After looking at the documents, they seem to be harvesting http get requests. The initial get is sent to the hosting service, which then directs the user to wh

After looking at the documents, they seem to be harvesting http get requests. The initial get is sent to the hosting service, which then directs the user to wherever they are keeping a copy of the wanted file. That location changes regularly. Only the initial get, the initial link, would be consistent. If I am right, spoofing the system should be easy. Sending a get doesn't mean you download anything. Sending a few thousand protest gets could mask those you actually follow through on.