Overview

URLwww.systemaredir2017.com.br/02/??mar6os
IP216.189.147.206
ASNAS25926 HostUS
Location United States
Report completed2017-02-12 08:20:46 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentOpera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-02-122www.systemaredir2017.com.br/02/??mar6osMalware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 216.189.147.206

Date UQ / IDS / BL URL IP
2017-02-08 20:44:210 - 0 - 3aviancaturismo2017.com.br/02/216.189.147.206
2017-02-08 12:35:370 - 0 - 0www.oitentaweb2017.com.br/nei/??bazaula216.189.147.206

Last 6 reports on ASN: AS25926 HostUS

Date UQ / IDS / BL URL IP
2017-03-23 20:50:400 - 0 - 0nb.bugil.top/216.189.151.8
2017-03-23 07:24:530 - 0 - 1youtube-page.com/watch@v=sexy-girlQDDNsBT/download/AdobeFlashPlayer.exe104.128.226.6
2017-03-23 07:24:500 - 0 - 1youtube-page.com/download/AdobeFlashPlayer.exe104.128.226.6
2017-03-21 02:34:110 - 0 - 1youtube-page.com/download/AdobeFlashPlayer.exe104.128.226.6
2017-03-21 02:34:100 - 0 - 1youtube-page.com/watch@v=sexy-girlQDDNsBT/download/AdobeFlashPlayer.exe104.128.226.6
2017-03-17 04:32:080 - 0 - 1youtube-page.com/watch@v=sexy-girlQDDNsBT/download/AdobeFlashPlayer.exe104.128.226.6



JavaScript

Executed Scripts (23)


Executed Evals (2)

#1 JavaScript::Eval (size: 2049, repeated: 1)

(function() {
    var a = navigator.userAgent || navigator.vendor || window.opera;
    return /(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(a) || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(a.substr(0, 4)) ? !0 : !1
})();

#2 JavaScript::Eval (size: 62, repeated: 4)

(function() {
    var a = window.self !== window.top;
    return a ? !0 : !1
})();

Executed Writes (0)



HTTP Transactions (60)


Request Response
GET /02/??mar6os HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Sun, 12 Feb 2017 07:19:55 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Wed, 16 Dec 2015 23:30:08 GMT
Etag: "566-5270c49650000"
Accept-Ranges: bytes
Content-Length: 1382
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 12 Feb 2017 07:19:55 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Content-Length: 209
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /02/anexo.html HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Sun, 12 Feb 2017 07:19:56 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Last-Modified: Sat, 12 Dec 2015 06:07:18 GMT
Etag: "84-526ad40911180"
Accept-Ranges: bytes
Content-Length: 132
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 12 Feb 2017 07:19:57 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Content-Length: 209
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /02/localizador/index.php HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Date: Sun, 12 Feb 2017 07:19:58 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
X-Powered-By: PHP/5.4.16
Set-Cookie: last2=1; expires=Mon, 13-Feb-2017 07:19:58 GMT
Location: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Content-Length: 1
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 12 Feb 2017 07:19:59 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Content-Length: 209
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: www.systemaredir2017.com.br

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 216.189.147.206
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 12 Feb 2017 07:19:59 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Content-Length: 209
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request
 72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:19:59 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119452, public, no-transform, must-revalidate
Last-Modified: Sun, 12 Feb 2017 06:15:38 GMT
Expires: Mon, 13 Feb 2017 18:15:38 GMT
Etag: "bbe21b18c0d155f55ddb3bb605ecbe108abe8c8a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1775
Connection: close
GET /pf/D3364504_863_6917427367?directDownload=true HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Date: Sun, 12 Feb 2017 07:19:59 GMT
Server: Apache
Set-Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; Path=/; Secure NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b;path=/;secure;httponly
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Wed, 31 Dec 1969 23:59:59 GMT
Content-Language: en-US
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1399
Keep-Alive: timeout=300, max=9999
Connection: Keep-Alive
POST / HTTP/1.1

Host: ss.symcd.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=503724, public, no-transform, must-revalidate
Last-Modified: Sat, 11 Feb 2017 03:13:22 GMT
Expires: Sat, 18 Feb 2017 03:13:22 GMT
Date: Sun, 12 Feb 2017 07:20:00 GMT
Connection: keep-alive
GET /js/236741765.js HTTP/1.1

Host: cdn.optimizely.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 104.123.117.117
HTTP/1.1 200 OK
Content-Type: text/javascript
x-amz-id-2: Ga9VV+TPdKjd86+a2fZBIN3ICAoco4FcdmtsDm1TX7yIu1iuISstNA1O+TlKphArVvn3GlBYdOQ=
x-amz-request-id: DE1D872B86B7A366
Last-Modified: Tue, 31 Jan 2017 18:47:58 GMT
Etag: "28a6a2d5fa91a709198515001f800e95"
x-amz-meta-revision: 2550
Content-Encoding: gzip
x-amz-version-id: cRNyqOaBlaIgv2jpDp1C79GtsXk1N53e
Accept-Ranges: bytes
Content-Length: 116641
Server: AmazonS3
Vary: Accept-Encoding
Cache-Control: max-age=126
Date: Sun, 12 Feb 2017 07:20:00 GMT
Connection: keep-alive
Set-Cookie: cdn=https%3a%2f%2fakamai%3adsd%40cdn.optimizely.com%2fjs%2f236741765.js; path=/; domain=.optimizely.com
Timing-Allow-Origin: *
GET /stylesheets/iris/all.201702020529.css HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"102767-1486042204000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:30:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18353
Keep-Alive: timeout=300, max=9998
Connection: Keep-Alive
GET /resources/js/iris/google-fonts.201702020529.js HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"427-1486041928000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:25:28 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 291
Keep-Alive: timeout=300, max=10000
Connection: Keep-Alive
GET /stylesheets/alpha/pf-download-landing-page-unshared-v3.201702020529.css HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"426-1486041928000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:25:28 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 284
Keep-Alive: timeout=300, max=9999
Connection: Keep-Alive
GET /images/corp-iris/logo-white.png HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: image/png
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"3613-1486041926000"
Last-Modified: Thu, 02 Feb 2017 13:25:26 GMT
Content-Length: 3613
Keep-Alive: timeout=300, max=9998
Connection: Keep-Alive
GET /resources/js/corp-iris.201702020529.js HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"18395-1486042194000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:29:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6828
Keep-Alive: timeout=300, max=9999
Connection: Keep-Alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:01 GMT
Expires: Thu, 16 Feb 2017 07:20:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
POST / HTTP/1.1

Host: g.symcd.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1377
Content-Transfer-Encoding: binary
Cache-Control: max-age=379039, public, no-transform, must-revalidate
Last-Modified: Thu, 9 Feb 2017 16:36:51 GMT
Expires: Thu, 16 Feb 2017 16:36:51 GMT
Date: Sun, 12 Feb 2017 07:20:01 GMT
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:01 GMT
Expires: Thu, 16 Feb 2017 07:20:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /ajax/libs/webfont/1/webfont.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 216.58.209.106
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 22:53:35 GMT
Expires: Thu, 11 Jan 2018 22:53:35 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 5437
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 2708786
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 12 Feb 2017 07:20:01 GMT
Etag: "589fad14-1d7"
Expires: Sat, 18 Feb 2017 19:20:01 GMT
Last-Modified: Sun, 12 Feb 2017 00:32:20 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 12 Feb 2017 07:20:01 GMT
Etag: "589ff344-1d7"
Expires: Sat, 18 Feb 2017 19:20:01 GMT
Last-Modified: Sun, 12 Feb 2017 05:31:48 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471
GET /images/corp-iris/file-not-available-icon.png HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/stylesheets/alpha/pf-download-landing-page-unshared-v3.201702020529.css
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b; optimizelyEndUserId=oeu1486884001000r0.5230243769242133; optimizelySegments=%7B%22243421360%22%3A%22opera%22%2C%22243316629%22%3A%22false%22%2C%22243335879%22%3A%22direct%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sugarsync.com%252Fpf%252FD3364504_863_6917427367%253FdirectDownload%253Dtrue%26u%3Doeu1486884001000r0.5230243769242133%26wxhr%3Dtrue%26time%3D1486884001.057%26f%3D6343620545%2C6409298946%2C3738481036%2C6681091682%2C3442191643%2C3693671074%2C3175110309%2C8050290731%2C6138960174%2C6013090997%2C8150670016%2C3241050426%2C3689950697%2C7699560544%2C3213370571%2C3189171022%2C7221640143%2C6157240149%2C3185450328%2C6729010268%2C3904260194%2C8035621869%2C7245730022%2C3815580010%2C6144340075%2C6285140063%2C8151512594%2C3163620542%2C6143200245%26g%3D6791744569%22%5D
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: image/png
Date: Sun, 12 Feb 2017 07:20:01 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"3680-1486041926000"
Last-Modified: Thu, 02 Feb 2017 13:25:26 GMT
Content-Length: 3680
Keep-Alive: timeout=300, max=9997
Connection: Keep-Alive
GET /gtm.js?id=GTM-KQHCXP HTTP/1.1

Host: www.googletagmanager.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 12 Feb 2017 07:20:01 GMT
Expires: Sun, 12 Feb 2017 07:20:01 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
Transfer-Encoding: chunked
GET /images/corp-iris/header-bg.201702020529.png HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/stylesheets/iris/all.201702020529.css
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b; optimizelyEndUserId=oeu1486884001000r0.5230243769242133; optimizelySegments=%7B%22243421360%22%3A%22opera%22%2C%22243316629%22%3A%22false%22%2C%22243335879%22%3A%22direct%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sugarsync.com%252Fpf%252FD3364504_863_6917427367%253FdirectDownload%253Dtrue%26u%3Doeu1486884001000r0.5230243769242133%26wxhr%3Dtrue%26time%3D1486884001.057%26f%3D6343620545%2C6409298946%2C3738481036%2C6681091682%2C3442191643%2C3693671074%2C3175110309%2C8050290731%2C6138960174%2C6013090997%2C8150670016%2C3241050426%2C3689950697%2C7699560544%2C3213370571%2C3189171022%2C7221640143%2C6157240149%2C3185450328%2C6729010268%2C3904260194%2C8035621869%2C7245730022%2C3815580010%2C6144340075%2C6285140063%2C8151512594%2C3163620542%2C6143200245%26g%3D6791744569%22%5D
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: image/png
Date: Sun, 12 Feb 2017 07:20:01 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"92-1486041926000"
Last-Modified: Thu, 02 Feb 2017 13:25:26 GMT
Content-Length: 92
Keep-Alive: timeout=300, max=9998
Connection: Keep-Alive
GET /css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin HTTP/1.1

Host: fonts.googleapis.com
GET /css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sun, 12 Feb 2017 07:20:01 GMT
Date: Sun, 12 Feb 2017 07:20:01 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
Transfer-Encoding: chunked
GET /analytics.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sun, 12 Feb 2017 07:04:36 GMT
Expires: Sun, 12 Feb 2017 09:04:36 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 11590
Age: 925
Cache-Control: public, max-age=7200
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /event?a=236741765&d=236741765&y=false&src=js&s243421360=opera&s243316629=false&s243335879=direct&tsent=1486884001.057&n=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&u=oeu1486884001000r0.5230243769242133&wxhr=true&time=1486884001.057&f=6343620545,6409298946,3738481036,6681091682,3442191643,3693671074,3175110309,8050290731,6138960174,6013090997,8150670016,3241050426,3689950697,7699560544,3213370571,3189171022,7221640143,6157240149,3185450328,6729010268,3904260194,8035621869,7245730022,3815580010,6144340075,6285140063,8151512594,3163620542,6143200245&g=6791744569&cx2=24ee68b HTTP/1.1

Host: 236741765.log.optimizely.com
GET /event?a=236741765&d=236741765&y=false&src=js&s243421360=opera&s243316629=false&s243335879=direct&tsent=1486884001.057&n=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&u=oeu1486884001000r0.5230243769242133&wxhr=true&time=1486884001.057&f=6343620545,6409298946,3738481036,6681091682,3442191643,3693671074,3175110309,8050290731,6138960174,6013090997,8150670016,3241050426,3689950697,7699560544,3213370571,3189171022,7221640143,6157240149,3185450328,6729010268,3904260194,8035621869,7245730022,3815580010,6144340075,6285140063,8151512594,3163620542,6143200245&g=6791744569&cx2=24ee68b HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Origin: https://www.sugarsync.com
Cookie: cdn=https%3a%2f%2fakamai%3adsd%40cdn.optimizely.com%2fjs%2f236741765.js
 54.243.254.149
HTTP/1.1 200 OK
Content-Type: application/json
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-Requested-With, X-TS-AJAX-Request
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.sugarsync.com
Date: Sun, 12 Feb 2017 07:20:01 GMT
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Server: nginx
Set-Cookie: fixed_external_236741765_end_user_id=; Domain=.optimizely.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=-1 end_user_id=oeu1486884001000r0.5230243769242133; Domain=.236741765.log.optimizely.com; expires=Wed, 10 Feb 2027 07:20:01 GMT
Content-Length: 2
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:02 GMT
Expires: Thu, 16 Feb 2017 07:20:02 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /resources/js/i18n/messages.201702020529.js HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"44532-1486041928000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:25:28 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11759
Keep-Alive: timeout=300, max=9995
Connection: Keep-Alive
GET /images/photos-images/favicon.ico HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Accept-Ranges: bytes
Etag: W/"1150-1486041928000"
Last-Modified: Thu, 02 Feb 2017 13:25:28 GMT
Content-Length: 1150
Keep-Alive: timeout=300, max=9999
Connection: Keep-Alive
GET /s/montserrat/v10/zhcz-_WihjSQC0oHJ9TCYC3USBnSvpkopQaUR-2r7iU.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:28:29 GMT
Expires: Sat, 10 Feb 2018 06:28:29 GMT
Last-Modified: Thu, 09 Feb 2017 01:12:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 19254
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 175894
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /s/montserrat/v10/IQHow_FEYlDC4Gzy_m8fcvEr6Hm6RMS0v1dtXsGir4g.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:39:56 GMT
Expires: Sat, 10 Feb 2018 06:39:56 GMT
Last-Modified: Thu, 09 Feb 2017 01:14:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 19449
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 175207
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:03 GMT
Expires: Thu, 16 Feb 2017 07:20:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
POST / HTTP/1.1

Host: ocsp.msocsp.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request
 198.41.215.185
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:03 GMT
Content-Length: 1820
Connection: keep-alive
Set-Cookie: __cfduid=d551eb458af0cf0c5186718db5891846b1486884003; expires=Mon, 12-Feb-18 07:20:03 GMT; path=/; domain=.msocsp.com; HttpOnly
Last-Modified: Sun, 12 Feb 2017 05:55:34 GMT
Expires: Thu, 16 Feb 2017 05:55:34 GMT
Etag: "cf57890925e859a4767355fa0c3d65b42d454c25"
Cache-Control: max-age=10800,public,no-transform,must-revalidate
X-Cache: HIT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 32fe469ca6554273-OSL
GET /s/lato/v13/v0SdcGFAl2aezM9Vq_aFTQ.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:11:02 GMT
Expires: Sat, 10 Feb 2018 06:11:02 GMT
Last-Modified: Thu, 09 Feb 2017 19:14:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29922
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 176940
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /s/lato/v13/DvlFBScY1r-FMtZSYIYoYw.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:31:13 GMT
Expires: Sat, 10 Feb 2018 06:31:13 GMT
Last-Modified: Thu, 09 Feb 2017 19:14:24 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29433
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 175729
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_u=QGAAgAQ~&z=7672218 HTTP/1.1

Host: stats.g.doubleclick.net
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_u=QGAAgAQ~&z=7672218 HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 64.233.165.156
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sun, 12 Feb 2017 07:20:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 363
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /s/robotoslab/v6/y7lebkjgREBJK96VQi37Zp0EAVxt0G0biEntp43Qt6E.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:24:29 GMT
Expires: Sat, 10 Feb 2018 06:24:29 GMT
Last-Modified: Thu, 28 Aug 2014 20:40:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22087
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 176134
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /collect?v=1&_v=j47&a=1575068891&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&ul=en-us&de=UTF-8&dt=SugarSync&sd=24-bit&sr=1176x885&vp=1176x737&je=1&fl=10.0%20r45&_u=QGAAgAQ~&jid=1487876205&cid=1462634118.1486884002&tid=UA-2126719-6&gtm=GTM-KQHCXP&z=1585526739 HTTP/1.1

Host: www.google-analytics.com
GET /collect?v=1&_v=j47&a=1575068891&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&ul=en-us&de=UTF-8&dt=SugarSync&sd=24-bit&sr=1176x885&vp=1176x737&je=1&fl=10.0%20r45&_u=QGAAgAQ~&jid=1487876205&cid=1462634118.1486884002&tid=UA-2126719-6&gtm=GTM-KQHCXP&z=1585526739 HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Tue, 07 Feb 2017 13:25:06 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 410097
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 12 Feb 2017 07:20:03 GMT
Etag: "589fb1c2-1d7"
Expires: Sat, 18 Feb 2017 19:20:03 GMT
Last-Modified: Sun, 12 Feb 2017 00:52:18 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
GET /s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJZ_TkvowlIOtbR7ePgFOpF4.ttf HTTP/1.1

Host: fonts.gstatic.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700%7CMontserrat:400,700%7CRoboto+Slab:400,700&subset=latin,latin,latin
Origin: https://www.sugarsync.com
 64.233.165.94
HTTP/1.1 200 OK
Content-Type: font/ttf
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 10 Feb 2017 06:37:34 GMT
Expires: Sat, 10 Feb 2018 06:37:34 GMT
Last-Modified: Thu, 28 Aug 2014 18:22:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22199
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 175349
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
POST / HTTP/1.1

Host: ss.symcd.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=565423, public, no-transform, must-revalidate
Last-Modified: Sat, 11 Feb 2017 20:23:46 GMT
Expires: Sat, 18 Feb 2017 20:23:46 GMT
Date: Sun, 12 Feb 2017 07:20:03 GMT
Connection: keep-alive
GET /bat.js HTTP/1.1

Host: bat.bing.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 13.107.21.200
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 10 Jan 2017 21:12:17 GMT
Accept-Ranges: bytes
Etag: "804ece38866bd21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Date: Sun, 12 Feb 2017 07:20:02 GMT
Content-Length: 2851
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:03 GMT
Expires: Thu, 16 Feb 2017 07:20:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218 HTTP/1.1

Host: www.google.com
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218 HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.164
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218&ipr=y&ulfeg=n
Cache-Control: private, max-age=43200
Date: Sun, 12 Feb 2017 07:20:03 GMT
Expires: Sun, 12 Feb 2017 07:20:03 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 384
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 157.240.3.24
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 60e5798e16824772aa12d71687c8bf85
Etag: "100d0176cefbcb0a1fbbf5f7ddc10b8f"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Sun, 12 Feb 2017 07:28:57 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: VF0JOuxyhnTGeQMN8t03xg==
X-FB-Debug: Oj/3vcMxk2IAaNyOiIcrgRm9650NeinxMvsIlp29CC+syC+RvfR7Vg5utdYAc88LsT6COcFbvqTnUGWjvnrmDw==
Date: Sun, 12 Feb 2017 07:20:03 GMT
Connection: keep-alive
Content-Length: 4079
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:04 GMT
Expires: Thu, 16 Feb 2017 07:20:04 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218&ipr=y&ulfeg=n HTTP/1.1

Host: www.google.no
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-2126719-6&cid=1462634118.1486884002&jid=1487876205&_v=j47&z=7672218&ipr=y&ulfeg=n HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.163
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Sun, 12 Feb 2017 07:20:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
GET /Clients/J2Global/webmetro_dsmmtracker.js HTTP/1.1

Host: tracking.dsmmadvantage.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 8.14.137.240
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Thu, 26 Mar 2015 06:22:30 GMT
Accept-Ranges: bytes
Etag: "097b03c8d67d01:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: policyref="/w3c/p3p.xml",CP="NOI DSP COR NID CUR OUR STP UNI"
Date: Sun, 12 Feb 2017 07:20:03 GMT
Content-Length: 3984
GET /resources/js/sscore.201702020529.js HTTP/1.1

Host: www.sugarsync.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: JSESSIONID=E76BF479E532D1A2C9557A811AD69280; NSC_JOz1vusxc5vh2zpcdbez0ldinrxp3c3=ffffffff090d9c9e45525d5f4f58455e445a4a42378b
 74.201.86.28
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sun, 12 Feb 2017 07:20:00 GMT
Server: Apache
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Etag: W/"269120-1486042194000-gzip"
Last-Modified: Thu, 02 Feb 2017 13:29:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=300, max=9997
Connection: Keep-Alive
Transfer-Encoding: chunked
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 12 Feb 2017 07:20:04 GMT
Expires: Thu, 16 Feb 2017 07:20:04 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /activityi;src=4382037;type=visit789;cat=sugar0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=3506654127435.723? HTTP/1.1

Host: 4382037.fls.doubleclick.net

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sun, 12 Feb 2017 07:20:04 GMT
Expires: Sun, 12 Feb 2017 07:20:04 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 12-Feb-2017 07:35:04 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
Transfer-Encoding: chunked
GET /tr/?id=544144772418581&ev=PageView&dl=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&rl=&if=false&ts=1486884004012&v=2.5.1 HTTP/1.1

Host: www.facebook.com
GET /tr/?id=544144772418581&ev=PageView&dl=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue&rl=&if=false&ts=1486884004012&v=2.5.1 HTTP/1.1

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 31.13.73.36
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Sun, 12 Feb 2017 07:20:04 GMT
Expires: Sun, 12 Feb 2017 07:20:04 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=0VPnPek0DJZ1p6hXL..BYoAyk...1.0.BYoAyk.; expires=Saturday, 13-May-2017 07:20:04 GMT; path=/; domain=.facebook.com
Server: proxygen
Connection: keep-alive
Content-Length: 44
GET /activity;dc_iu=/39950040/DFPAudiencePixels;ord=1159792901732.657;dc_seg=403982396? HTTP/1.1

Host: pubads.g.doubleclick.net

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 172.217.22.162
HTTP/1.1 200 OK
Content-Type: image/gif
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sun, 12 Feb 2017 07:20:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 12-Feb-2017 07:35:04 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
POST / HTTP/1.1

Host: gv.symcd.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1399
Content-Transfer-Encoding: binary
Cache-Control: max-age=378564, public, no-transform, must-revalidate
Last-Modified: Thu, 9 Feb 2017 16:29:29 GMT
Expires: Thu, 16 Feb 2017 16:29:29 GMT
Date: Sun, 12 Feb 2017 07:20:05 GMT
Connection: keep-alive
GET /active/sugarsync(j2global).jsp HTTP/1.1

Host: www.upsellit.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 208.118.62.70
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: nginx
Date: Sun, 12 Feb 2017 07:20:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: JSESSIONID=ADA03DEF819BEEAA5360FCA63E33A0EB; Path=/ uid=CgoKBVigDKUZo2co8WoGAg==; expires=Mon, 12-Feb-18 07:20:05 GMT; domain=www.upsellit.com; path=/
Expires: Mon, 13 Feb 2017 07:20:05 GMT
P3P: policyref="/w3c/p3p.xml", CP="NON DSP LAW CUR ADMi TAIi PSAi PSD TELi OUR SAMi IND PHY DEM ONL STA NAV UNI LOC COM CNT"
Content-Encoding: gzip
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: public, max-age=172800
Date: Sun, 12 Feb 2017 07:20:06 GMT
Etag: "589fc427-1d7"
Expires: Sat, 18 Feb 2017 19:20:06 GMT
Last-Modified: Sun, 12 Feb 2017 02:10:47 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471
GET /aquant.js?a=p-0dpsUgIU6xoGw HTTP/1.1

Host: secure.quantserve.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
 95.172.94.43
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Connection: close
Vary: Accept-Encoding
Etag: M0-16c5e310
Content-Encoding: gzip
Set-Cookie: mc=58a00ca6-c58fc-6d13b-0b92f; expires=Thu, 15-Mar-2018 07:20:06 GMT; path=/; domain=.quantserve.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
Cache-Control: private, no-transform, must-revalidate, max-age=86400
Expires: Mon, 13 Feb 2017 07:20:06 GMT
Content-Length: 4905
Date: Sun, 12 Feb 2017 07:20:06 GMT
Server: QS
GET /pixel;r=1910131139;a=p-0dpsUgIU6xoGw;ezt=1;orderid=;revenue=;labels=_fp.event.Default;fpan=1;fpa=P0-1591585241-1486884006820;ns=0;ce=1;cm=;je=1;sr=1176x885x24;enc=n;dst=1;et=1486884006819;tzo=-60;ref=;url=https%3A%2F%2Fwww.sugarsync.com%2Fpf%2FD3364504_863_6917427367%3FdirectDownload%3Dtrue;ogl= HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Opera/9.80 (Windows NT 6.1; U; en) Presto/2.5.24 Version/10.54
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sugarsync.com/pf/D3364504_863_6917427367?directDownload=true
Cookie: mc=58a00ca6-c58fc-6d13b-0b92f
 95.172.94.42
HTTP/1.1 200 OK
Content-Type: image/gif
Connection: close
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sun, 12 Feb 2017 07:20:06 GMT
Server: QS