I will make it simple https://mega.nz/#F!bDBggKTQ!zWMlWKbrMN40NFyOuS4buA
Credits to tx42.
BTW, do these url obfuscating techniques help these days ? I think these URLs aren't really converted to links and hence we cannot click them and hence the issue of setting referer header shouldn't occur. Though I need to double check my understanding.