Overview

URLhttp://205.196.121.209/299921lt8llg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe
IP205.196.121.209
ASNAS46179 MediaFire, LLC
Location United States
Report completed2012-11-11 18:03:43 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-11 18:03:06 205.196.120.6 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 18:03:08 195.159.219.9 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-11 18:03:03 urlQuery Client 72.233.69.42ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 18:03:03 urlQuery Client 72.233.69.42ssp_ssl: Invalid Client HELLO after Server HELLO Detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 205.196.121.209

Date Alerts / IDS URL IP
2013-03-10 08:49:340 / 4http://205.196.121.209/je13wu48eiig/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.121.209
2013-03-08 01:53:540 / 3http://205.196.121.209/je13wu48eiig/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.121.209
2012-11-11 20:08:100 / 3http://205.196.121.209/cvblcaypb6kg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_ (...)205.196.121.209

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date Alerts / IDS URL IP
2013-03-18 18:45:510 / 1http://205.196.121.253/bsbg8tilgbhg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.121.253
2013-03-18 18:40:500 / 7http://205.196.121.104/szc67si2i1sg/ox9699g479blej9/popitvsetupws.exe205.196.121.104
2013-03-18 17:14:050 / 2http://205.196.120.144/694kpvvkjlag/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.120.144
2013-03-18 17:09:470 / 2http://www.mediafire.com/file/19fhq7pf546hkpp205.196.120.8
2013-03-18 13:25:020 / 0http://199.91.153.248/6kkah5gh3wcg/1tfzxkpxrbr3bpe/popitvsetuptr.exe199.91.153.248
2013-03-18 13:25:010 / 0http://199.91.153.241/paaec1n7p7pg/ox9699g479blej9/popitvsetupws.exe199.91.153.241

Last 3 reports on domain: 205.196.121.209

Date Alerts / IDS URL IP
2013-03-10 08:49:340 / 4http://205.196.121.209/je13wu48eiig/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.121.209
2013-03-08 01:53:540 / 3http://205.196.121.209/je13wu48eiig/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.121.209
2012-11-11 20:08:100 / 3http://205.196.121.209/cvblcaypb6kg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe205.196.121.209



JavaScript

Executed Scripts (65)


Executed Evals (0)


Executed Writes (40)

#1 JavaScript::Write (size: 245, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#2 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#3 JavaScript::Write (size: 221, repeated: 1)

<!-- BEGIN STANDARD TAG - 160 x 600 - ROS: NO - DO NOT MODIFY -->
<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL}"></script>
<!-- END TAG -->

#4 JavaScript::Write (size: 279, repeated: 1)

<!-- BEGIN STANDARD TAG - 300 x 250 - ROS: NO - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=300 HEIGHT=250 SRC="http://ad.yieldmanager.com/st?ad_type=iframe&ad_size=300x250&section=3657428&pub_url=${PUB_URL}"></IFRAME>
<!-- END TAG -->

#5 JavaScript::Write (size: 9, repeated: 5)

</script>

#6 JavaScript::Write (size: 123, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=1306797600&B=10&r=0"></SCRIPT>

#7 JavaScript::Write (size: 224, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/imp?Z=300x250&s=3657428&T=3&_salt=1329566180&B=10&u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&r=0"></SCRIPT>

#8 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?O1YpPdNLnD87Vik900ucPwAAAEAzM8M_O1YpPdNLnD87Vik900ucP2jIhq2Mpwt-oArzhH1cTlFK2p9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAyFAAAgQCAQUAAIIAmh6mpAAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGOiQm-zK8emFfiIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#9 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?mFEst7Qakj-YUSy3tBqSPwAAAEAzM8M_mFEst7Qakj-YUSy3tBqSP1DPPTqe8jMkoArzhH1cTlFK2p9QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA_lIAAgQCAQUAAIIALSCxTgAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGNCe99Hj0_yZJCIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#10 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#11 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#12 JavaScript::Write (size: 198, repeated: 2)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#13 JavaScript::Write (size: 1217, repeated: 1)

<object type="application/x-shockwave-flash" data="http://content.yieldmanager.edgesuite.net/atoms/e6/4a/1b/33/e64a1b33c5b7d1d933535b7f669aae30.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJydjdtugzAMhp%2DmdxRBQkMQ2gWnVJtKuq5U1bijITSkMBBkYuLpF5WuDzDLlj%2E798GGvlcwjjzgXFjBAEClb8OishC7eLZrWL7vAwtAe4OwtzGAPDeRl%2D3pFB77dxzcjW6P%2D%2DuCwT2%2ELrzoYWKO5PSQ2488XShyDicn%2DL9FAom%2Eq%2ErfpF%2EHOGCDGHHchc%2DxLRFUfs4U5M0ue5OpTFSakSat7TqP6W13TmY665DXmWZE5ofn5othCKX6FQxWgGifpslseVkXVT1wk3Wt7ine9k2h%2DKi5qb9uqtNQ8qr4btQaQvcHYHv9qIHZC32NDCsYY8t10S%2D%2ElG8N%2C" height="250" width="300" loop="false" wmode="opaque"><param name="wmode" value="opaque"><param name="movie" value="http://content.yieldmanager.edgesuite.net/atoms/e6/4a/1b/33/e64a1b33c5b7d1d933535b7f669aae30.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJydjdtugzAMhp%2DmdxRBQkMQ2gWnVJtKuq5U1bijITSkMBBkYuLpF5WuDzDLlj%2E798GGvlcwjjzgXFjBAEClb8OishC7eLZrWL7vAwtAe4OwtzGAPDeRl%2D3pFB77dxzcjW6P%2D%2DuCwT2%2ELrzoYWKO5PSQ2488XShyDicn%2DL9FAom%2Eq%2ErfpF%2EHOGCDGHHchc%2DxLRFUfs4U5M0ue5OpTFSakSat7TqP6W13TmY665DXmWZE5ofn5othCKX6FQxWgGifpslseVkXVT1wk3Wt7ine9k2h%2DKi5qb9uqtNQ8qr4btQaQvcHYHv9qIHZC32NDCsYY8t10S%2D%2ElG8N%2C" /></object>

#14 JavaScript::Write (size: 1185, repeated: 1)

<object type="application/x-shockwave-flash" data="http://content.yieldmanager.edgesuite.net/atoms/f4/11/d6/17/f411d617718f18fd81ed0e0f1309814d.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdtugkAQhp%2DGOyR7AISQXixdsRBApRjT3iHsCrgIwW226dMXlfgE%2EpnMfHOG2LN4cTTZkjFoM8g58yAuOLDLo8tcHXieB%2DESYQe7yNFRexDvKOtT4sMvZfrkpvjSbU%2EkoXvsH7x1bt5foaz6VHNfRDl5ieiHme1nDu9%2ET9Qh8SiuDu3959g6qDc0On8fAhHnUZu0K5nkgUgaYKUoBHEe%2EqW0atJ11iVtqTa75%2DabrtdSDhomGgomU0oZHauagjcjM8q%2Dm2qSdYMoJLtOLJrLWfYTVIwXP0IuoA1%2EbQAXc24M9XQsGDVMsQks9x%2EAF25h%2C" height="600" width="160" loop="false" wmode="opaque"><param name="wmode" value="opaque"><param name="movie" value="http://content.yieldmanager.edgesuite.net/atoms/f4/11/d6/17/f411d617718f18fd81ed0e0f1309814d.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdtugkAQhp%2DGOyR7AISQXixdsRBApRjT3iHsCrgIwW226dMXlfgE%2EpnMfHOG2LN4cTTZkjFoM8g58yAuOLDLo8tcHXieB%2DESYQe7yNFRexDvKOtT4sMvZfrkpvjSbU%2EkoXvsH7x1bt5foaz6VHNfRDl5ieiHme1nDu9%2ET9Qh8SiuDu3959g6qDc0On8fAhHnUZu0K5nkgUgaYKUoBHEe%2EqW0atJ11iVtqTa75%2DabrtdSDhomGgomU0oZHauagjcjM8q%2Dm2qSdYMoJLtOLJrLWfYTVIwXP0IuoA1%2EbQAXc24M9XQsGDVMsQks9x%2EAF25h%2C" /></object>

#15 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#16 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#17 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#18 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.9054774656696566&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#19 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.5021137695119674&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#20 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.6775563564809278&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#21 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.36548514725750003&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#22 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#23 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#24 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#25 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3421021" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#26 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3464044" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#27 JavaScript::Write (size: 498, repeated: 2)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#28 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#29 JavaScript::Write (size: 71, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.017342786754013795">

#30 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#31 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#32 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#33 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#34 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#35 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#36 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#37 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#38 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#39 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#40 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";


HTTP Transactions (123)


Request Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37605
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-11 HTTP/1.1

Host: cdn.mediafire.com
GET /css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52116
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /?5nwz1uz1r4ddec4 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; expires=Sun, 12-Oct-2014 17:03:00 GMT; path=/; domain=.mediafire.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17017
Connection: close
Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1

Host: fonts.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/css
Expires: Sun, 11 Nov 2012 17:03:01 GMT
Date: Sun, 11 Nov 2012 17:03:01 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Content-Length: 318
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /blank.html HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 78
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 1775
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2315
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 1799
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 941
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 123
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT
Accept-Ranges: bytes
Content-Length: 3708
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT
Accept-Ranges: bytes
Content-Length: 61715
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sun, 11 Nov 2012 08:53:13 GMT
Expires: Sun, 11 Nov 2012 20:53:13 GMT
Vary: Accept-Encoding
Age: 29388
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1

Host: platform.twitter.com
GET /widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=1800
Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT
Etag: &quot;567a94a4e136d5c4b7bfde258474cfa6&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25717
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT
Date: Sat, 10 Nov 2012 03:44:55 GMT
Expires: Sun, 10 Nov 2013 03:44:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 73891
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 134286
GET /images/favicon/download.ico HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Sun, 11 Nov 2012 17:03:01 GMT
Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT
Accept-Ranges: bytes
Content-Length: 1150
Connection: close
Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 722
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT
Accept-Ranges: bytes
Content-Length: 7653
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: ayht8/0hX9+7vmYbc7Wuwz/QlUbiDfgS52EHn1E6rX8=
Date: Sun, 11 Nov 2012 17:03:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

Host: p.twitter.com
GET /f.gif?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false&amp;twttr_variant=2.0&amp;twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&amp;twttr_widget=0&amp;twttr_hask=0&amp;twttr_li=0&amp;twttr_pid= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;377d257f2d2e294916143c069141c1c5:1328738114&quot;
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: no-cache
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Date: Sun, 11 Nov 2012 17:03:01 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 450
Server: GSE
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1

Host: cdn.api.twitter.com
GET /1/users/show.json?screen_name=MediaFire&amp;callback=twttr.setFollowersCount HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: application/javascript;charset=utf-8
Last-Modified: Sun, 11 Nov 2012 16:40:12 GMT
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Status: 200 OK
Content-Encoding: gzip
Content-Length: 897
Server: tfe
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Expires: Sun, 11 Nov 2012 17:03:01 GMT
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /js/bust_out.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:01 GMT
Last-Modified: Thu, 31 May 2012 19:49:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 17:03:01 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 57
Connection: close
Server: MediaFire
GET /js/encoder.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:01 GMT
Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 17:03:01 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3695
Connection: close
Server: MediaFire
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=278241496&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=258990954&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1867026469.1352653382.1352653382.1352653382.1%3B%2B__utmz%3D213136648.1352653382.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=278241496&amp;utmhn=www.mediafire.com&amp;utme=8(UserType)9(free)&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&amp;utmhid=258990954&amp;utmr=-&amp;utmp=%2F%3F5nwz1uz1r4ddec4&amp;utmac=UA-829541-1&amp;utmcc=__utma%3D213136648.1867026469.1352653382.1352653382.1352653382.1%3B%2B__utmz%3D213136648.1352653382.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Fri, 09 Nov 2012 20:33:28 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 160174
Server: GFE/2.0
GET /js/master_85677.js HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga
HTTP/1.1 200 OK

Content-Type: text/javascript
Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Server: MediaFire
Content-Length: 143613
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:01 GMT
Connection: keep-alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80
Origin: http://www.facebook.com
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Access-Control-Allow-Origin: *
Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM=
Content-Length: 37945
Vary: Accept-Encoding
Cache-Control: public, max-age=31093794
Expires: Wed, 06 Nov 2013 14:12:56 GMT
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request
HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sun, 11 Nov 2012 17:03:02 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=17106, public, no-transform, must-revalidate
Last-Modified: Sun, 11 Nov 2012 16:03:09 GMT
Expires: Sun, 11 Nov 2012 22:03:09 GMT
Etag: &quot;db027512dc00b1c3e2a0f7e3b65a2c2ecd14078c&quot;
P3P: CP=&quot;IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA&quot;
Content-Length: 1923
Connection: close
GET /images/ad-loader.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT
Accept-Ranges: bytes
Content-Length: 1786
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Expires: Sun, 11 Nov 2012 17:03:02 GMT
Date: Sun, 11 Nov 2012 17:03:02 GMT
Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 17531
Server: GSE
Cache-Control: public, max-age=0
Age: 0
GET /templates/linkto/default-729x91-default.php?r=31770 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:02 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=16531 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:02 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 786
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=80776 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:02 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 787
Connection: close
Server: MediaFire
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 17:10:06 GMT
Date: Sun, 11 Nov 2012 16:10:06 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 974
Server: GSE
Age: 3176
Cache-Control: public, max-age=3600
GET /recaptcha/api/image?c=03AHJ_VuuVxi6BnhcAJI4YgI1Bqxwf4ujOHkx7SHw8e5ZjcH3LaaEJiexAN4Zua-HGpVFTyRDSTlVvMU2kJKqtPB1I1WncBSESajtf7D3TGGJV3VgC-SmH6ee4d19uI4_jMY2Gi43kU-WM7mDxZZzpRE2nvSKNqsRniLx65xSwB78EGWfkXut_hJQ HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/jpeg
Expires: Sun, 11 Nov 2012 17:13:02 GMT
Date: Sun, 11 Nov 2012 17:03:02 GMT
Cache-Control: public, max-age=600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3347
Server: GSE
GET /recaptcha/api/img/red/audio.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 17:13:25 GMT
Date: Sun, 11 Nov 2012 16:13:25 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 914
Server: GSE
Age: 2977
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 17:07:24 GMT
Date: Sun, 11 Nov 2012 16:07:24 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 155
Server: GSE
Age: 3338
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 17:29:03 GMT
Date: Sun, 11 Nov 2012 16:29:03 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 367
Server: GSE
Age: 2039
Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT
Accept-Ranges: bytes
Content-Length: 2649
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 171
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT
Accept-Ranges: bytes
Content-Length: 312
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 274
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 514
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:02 GMT
Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 255
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:03 GMT
Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-11
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 387
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 17:03:03 GMT
Connection: keep-alive
GET /ad/3196.js?cb=0.017342786754013795 HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 17:03:03 GMT
Date: Sun, 11 Nov 2012 17:03:03 GMT
Connection: keep-alive
GET /ad/3196.js HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 17:03:03 GMT
Date: Sun, 11 Nov 2012 17:03:03 GMT
Connection: keep-alive
GET /en_US/all.js?_=1352653383143 HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Etag: &quot;06c9a8ca347f3538149da85e21e875b7&quot;
Content-Encoding: gzip
X-FB-Debug: b7uiIIZ1ldr2w7CuPLtPfZntx3FHPBXFUS+QMga3Uhk=
Content-Length: 58142
Cache-Control: public, max-age=437
Expires: Sun, 11 Nov 2012 17:10:20 GMT
Date: Sun, 11 Nov 2012 17:03:03 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /templates/linkto/default-161x601-default.php?r=34059 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:03 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 733
Connection: close
Server: MediaFire
GET /recaptcha/api/img/red/sprite.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Sun, 11 Nov 2012 17:39:44 GMT
Date: Sun, 11 Nov 2012 16:39:44 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 4679
Server: GSE
Age: 1401
Cache-Control: public, max-age=3600
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31401246
Expires: Sun, 10 Nov 2013 03:37:11 GMT
Date: Sun, 11 Nov 2012 17:03:05 GMT
Connection: keep-alive
GET /helper_01.swf HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=365dru2e6rufrq4nqk1c7rq24ngac2ga; __utma=213136648.1867026469.1352653382.1352653382.1352653382.1; __utmb=213136648.1.10.1352653382; __utmc=213136648; __utmz=213136648.1352653382.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sun, 11 Nov 2012 17:03:05 GMT
Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT
Accept-Ranges: bytes
Content-Length: 1480
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 17:03:05 GMT
Connection: close
Server: MediaFire
GET /a/3196/3346/9685-2.js?cb=0.6775563564809278&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-2.js?cb=0.6775563564809278&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:05 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dc79c509fda49c39f8cde2cbcba^1^1352653385^3282013406; expires=Sat, 09-Feb-2013 17:03:05 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 18:03:05 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 18:03:05 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=53814; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352653385^1352653385; expires=Sun, 18-Nov-2012 17:03:05 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /a/3196/3346/9685-15.js?cb=0.5021137695119674&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-15.js?cb=0.5021137695119674&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:05 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; expires=Sat, 09-Feb-2013 17:03:05 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 18:03:05 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 18:03:05 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=53814; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352653385^1352653385; expires=Sun, 18-Nov-2012 17:03:05 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1

Host: secure.gravatar.com
GET /avatar/00000000?s=27&amp;d=mm&amp;f=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx
Date: Sun, 11 Nov 2012 17:03:03 GMT
Content-Length: 906
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Access-Control-Allow-Origin: *
Content-Disposition: inline; filename=&quot;00000000.png&quot;
X-Varnish: 2489558373 2489240383
Via: 1.1 varnish
Expires: Sun, 11 Nov 2012 17:08:03 GMT
Cache-Control: max-age=300
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 0
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700
Origin: http://www.mediafire.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Fri, 09 Nov 2012 20:33:30 GMT
Expires: Sat, 09 Nov 2013 20:33:30 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22748
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 160176
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 0
GET /a/3196/3346/27309-15.js?cb=0.9054774656696566&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/27309-15.js?cb=0.9054774656696566&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dc79c509fda49c39f8cde2cbcba^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:06 GMT
Server: RAS/1.3 (Unix)
Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 18:03:06 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 18:03:06 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=53813; path=/; domain=.rubiconproject.com csi15=3377660.js^1^1352653386^1352653386; expires=Sun, 18-Nov-2012 17:03:06 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /a/3196/3346/9685-9.js?cb=0.36548514725750003&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-9.js?cb=0.36548514725750003&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352653385^1352653385
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 17:03:06 GMT
Server: RAS/1.3 (Unix)
Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 18:03:06 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 18:03:06 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=53813; path=/; domain=.rubiconproject.com csi9=3348063.js^1^1352653386^1352653386; expires=Sun, 18-Nov-2012 17:03:06 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 17:03:06 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 1349
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 17:03:06 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; path=/; expires=Sat, 09-Feb-2013 17:03:06 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 1350
GET /partner/scripts/rubicon/alice.js HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sun, 11 Nov 2012 11:32:01 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 18:03:06 GMT
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 5798
Connection: keep-alive
Vary: Accept-Encoding
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; sess=1; icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;a9daeac0f83c5ce58b932bd0f829631f:1351039989&quot;
Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT
Accept-Ranges: bytes
Content-Length: 5051
Date: Sun, 11 Nov 2012 17:03:06 GMT
Connection: keep-alive
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; sess=1; icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;05c7006db8c87009c7ef4cebeac987fa:1350137588&quot;
Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT
Accept-Ranges: bytes
Content-Length: 5202
Date: Sun, 11 Nov 2012 17:03:06 GMT
Connection: keep-alive
GET /beacon.js HTTP/1.1

Host: b.scorecardresearch.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sun, 25 Nov 2012 17:03:06 GMT
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

Host: tap2-cdn.rubiconproject.com
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Last-Modified: Sat, 10 Nov 2012 20:12:21 GMT
Content-Encoding: gzip
Cache-Control: max-age=600
Expires: Sun, 11 Nov 2012 17:13:06 GMT
Date: Sun, 11 Nov 2012 17:03:06 GMT
Content-Length: 5080
Connection: keep-alive
Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 17:03:06 GMT
Connection: close
Content-Length: 381
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31401216
Expires: Sun, 10 Nov 2013 03:36:43 GMT
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3464044&ns__t=1352653387086&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3464044&amp;ns__t=1352653387086&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3464044&amp;ns__t=1352653387086&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Set-Cookie: UID=4facc9e-195.159.219.8-1352653387; expires=Sat, 01-Nov-2014 17:03:07 GMT; path=/; domain=.scorecardresearch.com UIDR=1352653387; expires=Sat, 01-Nov-2014 17:03:07 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /images/pixel.gif HTTP/1.1

Host: spe.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 42
Allow: GET
Expires: Mon, 12 Nov 2012 19:09:54 GMT
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3464044&ns__t=1352653387086&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3464044&amp;ns__t=1352653387086&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /erb HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Server: Apache/2.2.3 (CentOS)
Content-Length: 153
Location: http://px.owneriq.net/fr/epx.gif
X-Powered-By: PHP/5.2.17
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=40129
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; sess=1; icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 17:03:07 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 17:03:07 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; path=/; expires=Sat, 09-Feb-2013 17:03:07 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 17:03:07 GMT
GET /st?ad_type=iframe&ad_size=300x250&section=3657428&pub_url=${PUB_URL} HTTP/1.1

Host: ad.yieldmanager.com
GET /st?ad_type=iframe&amp;ad_size=300x250&amp;section=3657428&amp;pub_url=${PUB_URL} HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=80776
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1012.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:07 GMT
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352653387371&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D31770&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352653387371&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D31770&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352653387372&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D31770&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352653387372&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D31770&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=31770
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1

Host: ad.yieldmanager.com
GET /st?ad_type=ad&amp;ad_size=160x600&amp;section=3434596&amp;pub_url=${PUB_URL} HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0096.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:07 GMT
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /dmm/rubicon/match HTTP/1.1

Host: rubicon-match.dotomi.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 204 No Content

Content-Type: text/plain
Date: Sun, 11 Nov 2012 17:03:07 GMT
X-Name: dtiad01rtb09p.int
Cache-Control: max-age=0, no-store
Content-Length: 0
Connection: close
GET /imp?Z=300x250&s=3657428&T=3&_salt=1329566180&B=10&u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=300x250&amp;s=3657428&amp;T=3&amp;_salt=1329566180&amp;B=10&amp;u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.yieldmanager.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=3657428&amp;pub_url=${PUB_URL}
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0539.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=15ljn48pj/*http%3A//ad.yieldmanager.com/imp?Z=300x250&amp;s=3657428&amp;T=3&amp;_salt=1329566180&amp;B=10&amp;u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:07 GMT
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /fr/epx.gif HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache/2.2.3 (CentOS)
Content-Length: 43
X-Powered-By: PHP/5.2.17
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: max-age=33979
Expires: Mon, 12 Nov 2012 02:29:26 GMT
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352653387458&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D16531&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352653387458&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D16531&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352653387458&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D16531&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320015&amp;ns__t=1352653387458&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D16531&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 17:03:06 GMT
Connection: close
Content-Length: 380
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1

Host: i.w55c.net
GET /ping_match.gif?ei=RUBICON&amp;rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 17:03:07 GMT
X-Version: DataXu Pixel Tracker v3.3 20120918
Cache-Control: private
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Content-Length: 0
Location: http://pixel.rubiconproject.com/tap.php?v=4210&amp;nid=1523&amp;put=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6&amp;expires=10
Via: 1.1 fra061005 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /orbserv/hbpix?pixId=4857 HTTP/1.1

Host: map.media6degrees.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Tue, 16 Dec 2008 21:07:52 GMT
Etag: &quot;1d60111-2b-45e305a397a00&quot;
Accept-Ranges: bytes
Content-Length: 43
Connection: close
GET /sync?ssp=rubicon HTTP/1.1

Host: x.bidswitch.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Sun, 11 Nov 2012 17:03:07 GMT
GET /sync/img?mt_exid=9 HTTP/1.1

Host: sync.mathtag.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 0
Connection: keep-alive
Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x6 pid 0x1580 5504
Cache-Control: no-cache
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: uuid=509fda4b-58d1-c582-d794-fb268868f553; domain=.mathtag.com; path=/; expires=Mon, 11-Nov-2013 17:03:07 GMT
Location: http://sync.mathtag.com/sync/img?mt_exid=9&amp;mm_bnc
GET /imp?Z=160x600&s=3434596&_salt=1306797600&B=10&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=1306797600&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0364.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12gftnege/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1306797600&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:07 GMT
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1

Host: rubicon-rtb.p.veruta.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
Content-Length: 43
Date: Sun, 11 Nov 2012 17:03:06 GMT
GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1

Host: sync.mathtag.com
GET /sync/img?mt_exid=9&amp;mm_bnc HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: uuid=509fda4b-58d1-c582-d794-fb268868f553
HTTP/1.1 302 Found

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 0
Connection: keep-alive
Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x6 pid 0x1595 5525
Cache-Control: no-cache
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: mt_mop=9:1352653387; domain=.mathtag.com; path=/; expires=Tue, 11-Dec-2012 17:03:07 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=4222&amp;nid=1512&amp;put=509fda4b-58d1-c582-d794-fb268868f553
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; sess=1; icu=ChIIlroHEAoYASABKAEwyrT_hAUQyrT_hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 17:03:07 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 17:03:07 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVtx+&gt;Kukb10I3eSD4#FdgHS0R!o)0VpiA!&lt;-^; path=/; expires=Sat, 09-Feb-2013 17:03:07 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 17:03:07 GMT
GET /rc.aspx HTTP/1.1

Host: um.eqads.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: Sat, 6 May 1995 12:00:00 GMT
Last-Modified: Sun, 11 Nov 2012 12:03:07 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=11598&amp;nid=2494&amp;put=4f8994ef04ec4f5f87e3bfcbd6844e35&amp;expires=90
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
Set-Cookie: EQUser=UID=4f8994ef-04ec-4f5f-87e3-bfcbd6844e35; domain=.eqads.com; expires=Mon, 11-Feb-2013 17:03:07 GMT; path=/
X-Powered-By: ASP.NET
P3P: CP=&quot;NOI DSP COR NID&quot;
Date: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 233
GET /px/rb.gif HTTP/1.1

Host: ad.yabuka.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 FOUND

Content-Type: text/html; charset=utf-8
Server: nginx/1.1.19
Date: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 186
Connection: keep-alive
Location: http://pixel.rubiconproject.com/tap.php?v=9047&amp;nid=2147&amp;put=rX7wO7SYVE
Set-Cookie: client_id=rX7wO7SYVE; Path=/ tc=&quot;QjDRx4pXN4+dtDRh/w4zbJmc9g4=?_expires=STEzNTMwNjM3ODcKLg==&amp;client_id=UydyWDd3TzdTWVZFJwpwMQou&quot;; Domain=.yabuka.com; expires=Fri, 16-Nov-2012 11:03:07 GMT; Path=/
Cache-Control: no-cache
Pragma: no-cache
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1

Host: extmap.rub.ace.advertising.com
GET /cfcm.ashx?providerId=1007&amp;extMatch=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Pragma: no-cache
Location: /cfcm.ashx?providerId=1007&amp;extMatch=1&amp;ctst=1
Set-Cookie: ACID=xP620013526533870018; domain=advertising.com; expires=Tue, 11-Nov-2014 17:03:07 GMT; path=/
Cache-Control: private, no-cache, max-age=0
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 0
GET /v2/cexposer/SIG=15ljn48pj/*http%3A//ad.yieldmanager.com/imp?Z=300x250&s=3657428&T=3&_salt=1329566180&B=10&u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=15ljn48pj/*http%3A//ad.yieldmanager.com/imp?Z=300x250&amp;s=3657428&amp;T=3&amp;_salt=1329566180&amp;B=10&amp;u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.yieldmanager.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=3657428&amp;pub_url=${PUB_URL}
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Sun, 11 Nov 2012 17:03:07 GMT
Set-Cookie: B=ahekcmt89vmib&amp;b=3&amp;s=hp; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=300x250&amp;s=3657428&amp;T=3&amp;_salt=1329566180&amp;B=10&amp;u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;r=0&amp;SIG=10vasbg9t;x-cookie=nurxpzg89izvo&amp;o=3&amp;f=uc
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /do-association?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: id=4613164014305087856; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 17:03:07 GMT mdata=1|4613164014305087856|1352653387; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 17:03:07 GMT
Location: /do-association-set?rbc&amp;can=20
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=891
Connection: Keep-Alive
GET /tap.php?v=4210&nid=1523&put=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6&expires=10 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4210&amp;nid=1523&amp;put=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264210%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; expires=Wed, 21-Nov-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9801
Connection: Keep-Alive
GET /tap.php?v=4222&nid=1512&put=509fda4b-58d1-c582-d794-fb268868f553 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4222&amp;nid=1512&amp;put=509fda4b-58d1-c582-d794-fb268868f553 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264222%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264222%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_1512=509fda4b-58d1-c582-d794-fb268868f553; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9473
Connection: Keep-Alive
GET /images/pixel.gif HTTP/1.1

Host: ec.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 42
Allow: GET
Age: 546569
Date: Sun, 11 Nov 2012 17:03:07 GMT
Expires: Mon, 12 Nov 2012 09:13:38 GMT
Connection: keep-alive
GET /tap.php?v=9047&nid=2147&put=rX7wO7SYVE HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=9047&amp;nid=2147&amp;put=rX7wO7SYVE HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%269047%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=rX7wO7SYVE; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9544
Connection: Keep-Alive
GET /tap.php?v=11598&nid=2494&put=4f8994ef04ec4f5f87e3bfcbd6844e35&expires=90 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11598&amp;nid=2494&amp;put=4f8994ef04ec4f5f87e3bfcbd6844e35&amp;expires=90 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35; expires=Sat, 09-Feb-2013 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9434
Connection: Keep-Alive
GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1

Host: extmap.rub.ace.advertising.com
GET /cfcm.ashx?providerId=1007&amp;extMatch=1&amp;ctst=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: ACID=xP620013526533870018
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Pragma: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=7249%7c%7c11203&amp;nid=2146,2309&amp;put=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao====&amp;expires=30
Set-Cookie: UMAP=MTAwNzoxMzUyNjUzMzg4; domain=advertising.com; expires=Tue, 11-Nov-2014 17:03:07 GMT; path=/
Cache-Control: private, no-cache, max-age=0
Expires: Sun, 11 Nov 2012 17:03:07 GMT
Content-Length: 0
GET /do-association-set?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association-set?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4613164014305087856; mdata=1|4613164014305087856|1352653387
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://pixel.rubiconproject.com/tap.php?v=7259&amp;nid=2211&amp;put=4613164014305087856&amp;expires=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=957
Connection: Keep-Alive
GET /tap.php?v=7259&nid=2211&put=4613164014305087856&expires=1 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7259&amp;nid=2211&amp;put=4613164014305087856&amp;expires=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%2611598%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1%267259%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267259%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4613164014305087856; expires=Mon, 12-Nov-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9956
Connection: Keep-Alive
GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao====&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7249%7c%7c11203&amp;nid=2146,2309&amp;put=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao====&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%2611598%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.pixel.rubiconproject.com put_2146=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com put_2309=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; expires=Tue, 11-Dec-2012 17:03:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9087
Connection: Keep-Alive
GET /v2/cexposer/SIG=12gftnege/*http%3A//ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=1306797600&B=10&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=12gftnege/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1306797600&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Sun, 11 Nov 2012 17:03:07 GMT
Set-Cookie: B=1m1v2it89vmib&amp;b=3&amp;s=9o; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1306797600&amp;B=10&amp;r=0&amp;SIG=10vbes6ol;x-cookie=1z1i2vg89izvo&amp;o=3&amp;f=9b
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /match?p=2 HTTP/1.1

Host: match.rtbidder.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain
Server: rtbidder
Date: Sun, 11 Nov 2012 17:03:08 GMT
Content-Length: 277
P3P: policyref=&quot;http://match.rtbidder.net/p3p.xml&quot;, CP=&quot;NOI DSP COR CURa ADMa DEVa TAIo PSAo PSDo IVAo IVDo CONo HISa TELo OUR STP&quot;
Pragma: no-cache
Set-Cookie: bsuid=%3EsUL%3C%3F%3E%21l%21qy55%5E; path=/; domain=.rtbidder.net; expires=Sat, 09-Feb-2013 17:03:08 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-store, no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=5157&amp;nid=2021&amp;put=509fda4c51cfd65dec668c58
GET /tap.php?v=5157&nid=2021&put=509fda4c51cfd65dec668c58 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5157&amp;nid=2021&amp;put=509fda4c51cfd65dec668c58 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35; put_2211=4613164014305087856; put_2146=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2309=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:08 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C%265157%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.pixel.rubiconproject.com put_2021=509fda4c51cfd65dec668c58; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=7407
Connection: Keep-Alive
GET /imp?Z=300x250&s=3657428&T=3&_salt=1329566180&B=10&u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&r=0&SIG=10vasbg9t;x-cookie=nurxpzg89izvo&o=3&f=uc HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=300x250&amp;s=3657428&amp;T=3&amp;_salt=1329566180&amp;B=10&amp;u=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D80776&amp;r=0&amp;SIG=10vasbg9t;x-cookie=nurxpzg89izvo&amp;o=3&amp;f=uc HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.yieldmanager.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=3657428&amp;pub_url=${PUB_URL}
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Sun, 11 Nov 2012 17:03:08 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0418.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: BX=ahekcmt89vmib&amp;b=3&amp;s=hp&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=aa65000a-2c21-11e2-9cf7-f32a44603b7c&amp;_hmacv=1&amp;_salt=1701949974&amp;_keyid=k1&amp;_hmac=054f8fc1ad0200b0b35912bc0ec56e81a69d37de; path=/; expires=Tue, 11-Dec-2012 17:03:07 GMT RMBX=ahekcmt89vmib&amp;b=3&amp;s=hp&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:08 GMT
Expires: Sun, 11 Nov 2012 17:03:08 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 1
Transfer-Encoding: chunked
Connection: keep-alive
GET /atoms/e6/4a/1b/33/e64a1b33c5b7d1d933535b7f669aae30.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJydjdtugzAMhp%2DmdxRBQkMQ2gWnVJtKuq5U1bijITSkMBBkYuLpF5WuDzDLlj%2E798GGvlcwjjzgXFjBAEClb8OishC7eLZrWL7vAwtAe4OwtzGAPDeRl%2D3pFB77dxzcjW6P%2D%2DuCwT2%2ELrzoYWKO5PSQ2488XShyDicn%2DL9FAom%2Eq%2ErfpF%2EHOGCDGHHchc%2DxLRFUfs4U5M0ue5OpTFSakSat7TqP6W13TmY665DXmWZE5ofn5othCKX6FQxWgGifpslseVkXVT1wk3Wt7ine9k2h%2DKi5qb9uqtNQ8qr4btQaQvcHYHv9qIHZC32NDCsYY8t10S%2D%2ElG8N%2C HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.yieldmanager.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=3657428&amp;pub_url=${PUB_URL}
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: Apache
Etag: &quot;e64a1b33c5b7d1d933535b7f669aae30:1312211285&quot;
Last-Modified: Mon, 01 Aug 2011 15:08:04 GMT
Accept-Ranges: bytes
Content-Length: 34743
Cache-Control: max-age=31536000
Date: Sun, 11 Nov 2012 17:03:08 GMT
Connection: keep-alive
GET /imp?Z=160x600&s=3434596&_salt=1306797600&B=10&r=0&SIG=10vbes6ol;x-cookie=1z1i2vg89izvo&o=3&f=9b HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=1306797600&amp;B=10&amp;r=0&amp;SIG=10vbes6ol;x-cookie=1z1i2vg89izvo&amp;o=3&amp;f=9b HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Sun, 11 Nov 2012 17:03:08 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1104.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: BX=1m1v2it89vmib&amp;b=3&amp;s=9o&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=aa81476a-2c21-11e2-bac3-837d92e240de&amp;_hmacv=1&amp;_salt=148686585&amp;_keyid=k1&amp;_hmac=8e39afda8f54f3e2263f26c038c8663efc3192b0; path=/; expires=Tue, 11-Dec-2012 17:03:08 GMT RMBX=1m1v2it89vmib&amp;b=3&amp;s=9o&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 17:03:08 GMT
Expires: Sun, 11 Nov 2012 17:03:08 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /atoms/f4/11/d6/17/f411d617718f18fd81ed0e0f1309814d.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdtugkAQhp%2DGOyR7AISQXixdsRBApRjT3iHsCrgIwW226dMXlfgE%2EpnMfHOG2LN4cTTZkjFoM8g58yAuOLDLo8tcHXieB%2DESYQe7yNFRexDvKOtT4sMvZfrkpvjSbU%2EkoXvsH7x1bt5foaz6VHNfRDl5ieiHme1nDu9%2ET9Qh8SiuDu3959g6qDc0On8fAhHnUZu0K5nkgUgaYKUoBHEe%2EqW0atJ11iVtqTa75%2DabrtdSDhomGgomU0oZHauagjcjM8q%2Dm2qSdYMoJLtOLJrLWfYTVIwXP0IuoA1%2EbQAXc24M9XQsGDVMsQks9x%2EAF25h%2C HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: Apache
Etag: &quot;f411d617718f18fd81ed0e0f1309814d:1345561185&quot;
Last-Modified: Tue, 21 Aug 2012 14:59:40 GMT
Accept-Ranges: bytes
Content-Length: 23725
Cache-Control: max-age=31536000
Date: Sun, 11 Nov 2012 17:03:08 GMT
Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352653388360&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D34059&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3421021&amp;ns__t=1352653388360&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D34059&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=34059
Cookie: UID=4facc9e-195.159.219.8-1352653387; UIDR=1352653387
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 17:03:08 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /match?mrbyus=true&excid=17 HTTP/1.1

Host: rubicon.admailtiser.com
GET /match?mrbyus=true&amp;excid=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.1.1
Date: Sun, 11 Nov 2012 17:03:08 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref=&quot;http://admailtiser.com/w3c/p3p.xml&quot;, CP=&quot;NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI&quot;
Set-Cookie: cicouid=daec079e-c697-44ae-ad85-a5b894f8ac87QdX39_BecVi-BQpUv2tmwg; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 17:03:08 GMT; Path=/
Location: http://pixel.rubiconproject.com/tap.php?v=12224&amp;nid=2530&amp;put=-840500292948699261&amp;expires=365
GET /cm?in=1&pub=64 HTTP/1.1

Host: p.rfihub.com
GET /cm?in=1&amp;pub=64 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: s3=1352653388470;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT u=&quot;aABT28dqw==AI3oyfww==AAABOvBsurY=&quot;;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT e=cr;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT a=c638103774024978471;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT j=c638103774024978471;Path=/;Domain=.rfihub.com r=1352653388470;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT o=1-9NagP-PncSWp;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 17:03:08 GMT p=1-9NagP-PncSWp;Path=/;Domain=.rfihub.com
Location: http://pixel.rubiconproject.com/tap.php?v=13490&amp;nid=2596&amp;put=638103774024978471&amp;expires=30
Content-Length: 0
GET /tap.php?v=12224&nid=2530&put=-840500292948699261&expires=365 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=12224&amp;nid=2530&amp;put=-840500292948699261&amp;expires=365 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C%265157%3D25089%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35; put_2211=4613164014305087856; put_2146=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2309=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2021=509fda4c51cfd65dec668c58
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:08 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C%265157%3D25089%2C0%2C1%2C%2C%2612224%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-840500292948699261; expires=Mon, 11-Nov-2013 17:03:08 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9722
Connection: Keep-Alive
GET /tap.php?v=13490&nid=2596&put=638103774024978471&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=13490&amp;nid=2596&amp;put=638103774024978471&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C%265157%3D25089%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35; put_2211=4613164014305087856; put_2146=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2309=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2021=509fda4c51cfd65dec668c58
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 17:03:08 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1%2613490%3D1; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2611598%3D25089%2C0%2C1%2C%2C%267249%3D25089%2C0%2C1%2C%2C%2611203%3D25089%2C0%2C1%2C%2C%265157%3D25089%2C0%2C1%2C%2C%2613490%3D25089%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.pixel.rubiconproject.com put_2596=638103774024978471; expires=Tue, 11-Dec-2012 17:03:08 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9870
Connection: Keep-Alive
GET /c/cse?a=Q&B=17 HTTP/1.1

Host: connexity.net
GET /c/cse?a=Q&amp;B=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Connexity
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Nov 2012 17:03:08 GMT
Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0
Pragma: no-cache
Expires: -1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM&quot;,an.pp=&quot;http://www.connexity.com/privacy&quot;,an.oo=&quot;http://www.connexity.com/privacy&quot;,an.bt=&quot;N&quot;
Set-Cookie: COu=e97b365698cef496-064a296080041aa8-2175fb3ddb4b107e; expires=Fri, 10-Nov-2017 17:03:08 GMT; domain=.connexity.net; path=/
Content-Transfer-Encoding: binary
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=16531
Cookie: rpb=14240%3D1%2611598%3D1%267249%3D1%2611203%3D1%265157%3D1%2613490%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd7509fda49c39f8cde3e2b1a^1^1352653385^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352653385^1352653385; rdk15=0; ses15=3346^1; csi15=3377660.js^1^1352653386^1352653386; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352653386^1352653386; put_1523=e016e6d4-bd7f-49b8-a82b-fd98a6f46ef6; put_1512=509fda4b-58d1-c582-d794-fb268868f553; put_2147=rX7wO7SYVE; put_2494=4f8994ef04ec4f5f87e3bfcbd6844e35; put_2211=4613164014305087856; put_2146=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2309=RUIDim641e531xryqk5rnu86a57uaip5w1kweryhcghn33m51ps8rjao%3D%3D%3D%3D; put_2021=509fda4c51cfd65dec668c58; put_2530=-840500292948699261; put_2596=638103774024978471
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sun, 11 Nov 2012 11:31:59 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 18:03:09 GMT
Date: Sun, 11 Nov 2012 17:03:09 GMT
Content-Length: 5705
Connection: keep-alive
Vary: Accept-Encoding
GET /299921lt8llg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe HTTP/1.1

Host: 205.196.121.209

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Location: http://www.mediafire.com/?5nwz1uz1r4ddec4
Connection: Close
GET /rb_match HTTP/1.1

Host: um.simpli.fi

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no