Overview

URL www.sharefile.com
IP104.123.137.58
ASNAS35994 Akamai Technologies, Inc.
Location United States
Report completed2018-01-19 02:13:39 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.123.137.58

Date UQ / IDS / BL URL IP
2019-05-16 08:29:30 +0200
0 - 0 - 0 https://www.nitto.com 104.123.137.58
2018-07-11 01:01:51 +0200
0 - 0 - 0 https://www.sharefile.com 104.123.137.58
2018-06-14 00:10:55 +0200
0 - 0 - 0 www.sharefile.com 104.123.137.58
2018-06-05 11:09:55 +0200
0 - 0 - 0 www.sharefile.com/?src=system-email-outlookpl (...) 104.123.137.58
2018-05-09 11:18:59 +0200
0 - 0 - 0 www.sharefile.com/?src=emailfooter 104.123.137.58
2018-05-08 01:53:27 +0200
0 - 0 - 0 www.citrix.com 104.123.137.58
2018-04-13 10:54:29 +0200
0 - 0 - 0 https://www.citrix.com/ 104.123.137.58
2018-04-07 00:13:49 +0200
0 - 0 - 0 https://www.sharefile.com/ 104.123.137.58
2018-02-15 09:57:05 +0100
0 - 0 - 0 www.sharefile.com/?src=emailfooter 104.123.137.58
2018-01-31 00:01:13 +0100
0 - 0 - 0 https://www.sharefile.com 104.123.137.58

Last 10 reports on ASN: AS35994 Akamai Technologies, Inc.

Date UQ / IDS / BL URL IP
2019-06-19 20:25:36 +0200
0 - 0 - 0 ana.co.jp 104.122.221.234
2019-06-19 20:13:03 +0200
0 - 0 - 0 https://iraqveteran8888.us12.list-manage.com/ (...) 104.123.129.10
2019-06-19 19:47:27 +0200
0 - 0 - 0 https://id.pinterest.com/regarderfilmcomplet/ (...) 104.123.116.35
2019-06-19 19:20:11 +0200
0 - 0 - 0 cdn.smartbrief.com 104.120.253.111
2019-06-19 19:12:41 +0200
0 - 0 - 0 image.s7.exacttarget.com 104.123.117.94
2019-06-19 18:49:31 +0200
0 - 0 - 0 https://cl.exct.net/unsub_center.aspx?qs=6d9a (...) 104.123.134.202
2019-06-19 18:16:41 +0200
0 - 0 - 0 https://www.pinterest.com/fullfilm2018/vertm- (...) 104.123.116.35
2019-06-19 18:10:56 +0200
0 - 0 - 0 https://www.pinterest.com/fullfilm2018/vertm- (...) 104.123.116.35
2019-06-19 17:06:09 +0200
0 - 0 - 0 www.trello.com 104.123.121.45
2019-06-19 16:41:55 +0200
0 - 0 - 0 https://greenroomvoice.us4.list-manage.com/un (...) 104.123.129.10

No other reports on domain: sharefile.com



JavaScript

Executed Scripts (39)


Executed Evals (89)

#1 JavaScript::Eval (size: 83, repeated: 1) - SHA256: f4f802267dad8e7229cc26958df9ca26f5594092cd988125192886a0480544c7

                                        ({
    "zone": "homepage",
    "reference_element": "#extole-placeholder-global_footer"
})
                                    

#2 JavaScript::Eval (size: 51, repeated: 1) - SHA256: 7ba2fb09542778e1df77ebdb3db0f96630c879b48c9ee2c82944fd1b6dcbd0a5

                                        ({
    "zone": "global_footer"
})
                                    

#3 JavaScript::Eval (size: 328, repeated: 1) - SHA256: 9e4299fc2ad722f42c3cb5c6bee0e819a7a65b679593e5d5f2a82f5c19485bae

                                        (function() {
    function d(a) {
        a = a.src || "";
        if (-1 < a.indexOf("youtube.com/embed/") || -1 < a.indexOf("youtube.com/v/")) return !0
    }
    var b = document.getElementsByTagName("iframe"),
        e = document.getElementsByTagName("embed"),
        a;
    for (a = b.length - 1; - 1 < a; a--) {
        var c = b[a];
        if (c = d(c)) return !0
    }
    for (a = e.length - 1; - 1 < a; a--)
        if (b = e[a], c = d(b)) return !0;
    return !1
})();
                                    

#4 JavaScript::Eval (size: 178, repeated: 1) - SHA256: 4dc3a467ca9023d7448ed041f00863d19a4038a6ee81089812909e262040f678

                                        ({
    "access_token": "H19FPLPAPBTQA1R0ORIH6N3AJI",
    "expires_in": 31536001,
    "scopes": ["SHARE_EMAIL", "UPDATE_PROFILE", "SHARE_TWITTER", "SHARE_FACEBOOK"],
    "capabilities": ["UPDATE_PROFILE"]
})
                                    

#5 JavaScript::Eval (size: 144, repeated: 1) - SHA256: d05dc5ded9eb36bfaf395dee04f1e0746e18e0aa4ce41b5b478e174fe30b39ea

                                        ({
    "id": "6512565382805422504",
    "email": null,
    "first_name": null,
    "last_name": null,
    "profile_picture_url": null,
    "partner_user_id": null,
    "parameters": {}
})
                                    

#6 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 017cf964c5c794911432e34ca2f3cdd422aab0c127e11f42db0d1eb38c4bb743

                                        0,
function(L) {
    L.H(0);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 0796054130e7781d521d61ff73dd4c4af59a9ff02dca4aa5cd03e0dcce349198

                                        0,
function(L) {
    L.H(3);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 1) - SHA256: f9a6fa17add7ae2f40ea25cb78e8d11afea5fdefea8588a6b71bcde122ac73d7

                                        0,
function(L) {
    L.H(4);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 1) - SHA256: a5ab62e2bf1be2e4a7a52bf05f6f8179179ba876ba8c123e2d9c398bfc287b4c

                                        0,
function(L) {
    L.H(7);
}
                                    

#11 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 46fc4e3c65285fb8734ac357c0ffb749e69c62265315a17852c6e13de0a427e3

                                        0,
function(L) {
    L.P && d(L, 0);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 2017d53ec3ef5bca7f430fa25cfeb5869a28db1859514f7afebe92d0363b0a46

                                        0,
function(L) {
    m(L, 1);
}
                                    

#13 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 6247191a921311fba5a288b29c07c32a8d56798661f4801cffbde1767001ebbb

                                        0,
function(L) {
    m(L, 2);
}
                                    

#14 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 622bff5f090abb456922d0e00dd36ec56ddce95e8981abb40c52af160a8ad182

                                        0,
function(L) {
    m(L, 4);
}
                                    

#15 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7cd94317c0b2d648bfe087accae187cd5853e8f1afd792ea7a266d9097891d76

                                        0,
function(L) {
    v(L, 1);
}
                                    

#16 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 70a2613bdb1290d3b33dba5b2c6a56ceb7c3dff96213f49ee6b0838b16a1d9d5

                                        0,
function(L) {
    v(L, 2);
}
                                    

#17 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 3ddcc5fbe930c7db28aa4122b9625b61052a0f0cbdfedbfec1f643bc442eb5ee

                                        0,
function(L) {
    v(L, 4);
}
                                    

#18 JavaScript::Eval (size: 185, repeated: 1) - SHA256: 949ba07f7856309eb893b8791156a453427efdf454ea284d8186ddefdbe5b472

                                        0,
function(L, n) {
    (n.push(L[0] << 24 | L[1] << 16 | L[2] << 8 | L[3]), n).push(L[4] << 24 | L[5] << 16 | L[6] << 8 | L[7]), n.push(L[8] << 24 | L[9] << 16 | L[10] << 8 | L[11]);
}
                                    

#19 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 89695d7b7421ca06d02efd0792154cae73ec7e82a5020ab27869f73f4824c049

                                        0,
function(L, n) {
    D(L, 1, 5) || (n = J(L), e(L, n.i, n.O.apply(n.G, n.o)));
}
                                    

#20 JavaScript::Eval (size: 95, repeated: 1) - SHA256: fb3c34ba836cef8a71e8aee53f484c1d7c3576f2d6608d2f678afd3e83d8c3c8

                                        0,
function(L, n) {
    L = (n = L.X(), L).Z(n), L[0].removeEventListener(L[1], L[2], false);
}
                                    

#21 JavaScript::Eval (size: 123, repeated: 1) - SHA256: cffc62e14431c679bf3846a4f9ea899d76626f8266d4bb1caaf3cbbd7f7119c6

                                        0,
function(L, n) {
    if (n = this.V[L], void 0 === n) {
        throw T(this, 30, 0, L), this.v;
    }
    return n();
}
                                    

#22 JavaScript::Eval (size: 515, repeated: 1) - SHA256: d4eafaeac2f3274794dfc91181787ce1632190728e9006dac0d0ab5b66f22230

                                        0,
function(L, n) {
    if (this.M) {
        return L = L ? this.M().shift() : this.T().shift(), this.M().length ||
            this.T().length || (this.T = this.M = void 0, this.j--), L;
    }
    if (!(L = this.Z(57), L in this.I)) {
        throw T(this, 31), this.v;
    }
    return (((void 0 == this.A && (this.A = z(this.I, L - 4), this.N = void 0), this.N) != L >> 3 &&
        (this.N = L >> 3, n = [0, 0, 0, this.Z(202)], this.h = Y(this.A, this.N, n)), e)(this, 57, L + 1), this.I)[L] ^ this.h[L % 8];
}
                                    

#23 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 439ffdced7c76d221945644e51f07ca6b6b8eb12f438bc6f9870e6d1bf0d85d0

                                        0,
function(L, n) {
    n = L.Z(L.X()), G(L, n);
}
                                    

#24 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 888d868b49165bef0e1267c542bbc3db975523d0b492a605621ee3c0b2f84bdc

                                        0,
function(L, n, U) {
    (U = (n = L.X(), L).X(), n = L.V[n] && L.Z(n), e)(L, U, n);
}
                                    

#25 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 9a29a4bd866d4dbe4eb3fb232b3d23aadfaf952bfbd6d15852abeae83e3e33b7

                                        0,
function(L, n, U) {
    (U = (n = L.X(), L.X()), e)(L, U, "" + L.Z(n));
}
                                    

#26 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 8d14f513ae0f02f4174f249e1da52e0f97fb2b78dc91bc5dd44745a47b738476

                                        0,
function(L, n, U) {
    (n = (U = (n = L.X(), L.X()), L.Z(n)), e)(L, U, Z(n));
}
                                    

#27 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 0ed6f8036d420890eb21107ac65d262704f5b80ac2d9486d7fa8b707694965cf

                                        0,
function(L, n, U) {
    (n = L.X(), U = L.X(), e)(L, U, L.Z(U) % L.Z(n));
}
                                    

#28 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 2f499c00d1a04887c66091278daae54c64b45442301e41f80b8778675bf58c36

                                        0,
function(L, n, U) {
    (n = L.X(), U = L.X(), e)(L, U, L.Z(U) * L.Z(n));
}
                                    

#29 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 47e57c1e204968577cf93e631cf6a732af0f9fdbecbdbb892e361e9c10337a6b

                                        0,
function(L, n, U) {
    (n = L.X(), U = L.X(), e)(L, U, L.Z(U) + L.Z(n));
}
                                    

#30 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 3a51a00d27ba713718eaa2b75562040c4b2dbe87f28fe3c569d1195989e5284e

                                        0,
function(L, n, U) {
    (n = L.X(), U = L.X(), e)(L, U, L.Z(U) - L.Z(n));
}
                                    

#31 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 84be5a943f8ed5fd9a0de1c66d87604968bbab8e74c6eeb2a39c9dd51f53cd5a

                                        0,
function(L, n, U) {
    0 != (n = L.X(), U = L.X(), L).Z(n) && e(L, 57, L.Z(U));
}
                                    

#32 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 2cf12a91606661750798655998cbcc1a5cd367d157b3acaacc98852aa25250e7

                                        0,
function(L, n, U) {
    D(L, 1, 5) ||
        (n = L.X(), U = L.X(), e(L, U, function(L) {
            return eval(L);
        }(L.Z(n))));
}
                                    

#33 JavaScript::Eval (size: 244, repeated: 1) - SHA256: bef8b9f03ed017a7a66d415afffa2862237bc6c77deeeba261f9315c204a89d1

                                        0,
function(L, n, U) {
    if (3 == L.length) {
        for (U = 0; 3 > U; U++) {
            n[U] += L[U];
        }
        for (L = [13, 8, (U = 0, 13), 12, 16, 5, 3, 10, 15]; 9 > U; U++) {
            n[3](n, U % 3, L[U]);
        }
    }
}
                                    

#34 JavaScript::Eval (size: 135, repeated: 1) - SHA256: bb557eb30a1180d196220a0290fa0b45b2492f4ac8a35d239e6c2f916d13acd0

                                        0,
function(L, n, U) {
    return (U = function() {
        return L;
    }, n = function() {
        return U();
    }, n)[this.f] = function(B) {
        L = B;
    }, n;
}
                                    

#35 JavaScript::Eval (size: 296, repeated: 1) - SHA256: 42e18f60e426590997a6bf8a414c31a0602f26d557c9b92d452608e232b3c82c

                                        0,
function(L, n, U, Q, A, R, b) {
    if ((U = (n = L.X(), O)(L), Q = "", L).V[217]) {
        for (A = L.Z(217), b = A.length, R = 0; U--;) {
            R = (R + O(L)) % b, Q += w[A[R]];
        }
    } else {
        for (; U--;) {
            Q += w[L.X()];
        }
    }
    e(L, n, Q);
}
                                    

#36 JavaScript::Eval (size: 200, repeated: 1) - SHA256: b8c12ea77d2b3a29f337f2eef4d12598d4d52b91ef74fbe43f9104a16d41c93e

                                        0,
function(L, n, U, w) {
    ((n = L & 4, L &= 3, U = this.X(), w = this.X(), U = this.Z(U), n && (U = K(("" + U).replace(/\r\n/g, "\n"))), L) &&
        M(this, w, I(U.length, 2)), M)(this, w, U);
}
                                    

#37 JavaScript::Eval (size: 93, repeated: 1) - SHA256: d84fad7ed25bd370d58ccbab9b03393e3d27b219efe5b6e52606355e1ef167ef

                                        0,
function(L, n, U, w) {
    (w = (n = L.X(), U = L.X(), L).X(), L.Z(n))[L.Z(U)] = L.Z(w);
}
                                    

#38 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 9e2a72d4df257010fe18f296eee775b0034b262304215a41e7d07af4d9b93945

                                        0,
function(L, n, U, w) {
    U = (n = L.X(), L.X()), w = L.X(), e(L, w, L.Z(n) << U);
}
                                    

#39 JavaScript::Eval (size: 88, repeated: 1) - SHA256: ec32fc5a532788ee1aac19daf33bf44f957859177d2c738983a8ec650c2f6978

                                        0,
function(L, n, U, w) {
    U = (n = L.X(), L.X()), w = L.X(), e(L, w, L.Z(n) >> U);
}
                                    

#40 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 77f6bf24542e4e9bec8e6c0e953491317bf3c095def41b346ed1b1ca1e4b5799

                                        0,
function(L, n, U, w) {
    for (; U--;) {
        57 != U && 103 != U && n.V[U] && (n.V[U] = n[w](n[L](U), this));
    }
    n[L] = this;
}
                                    

#41 JavaScript::Eval (size: 246, repeated: 1) - SHA256: 16d3170c6c97802c5e7b313ad91c2f0858ec40aec9e1e51f3691cbf541215ceb

                                        0,
function(L, n, U, w) {
    if ((n = L.l.pop())) {
        for (U = L.X(); 0 < U; U--) {
            w = L.X(), n[w] = L.V[w];
        }
        L.V = (n[212] = L.V[212], n[227] = L.V[227], n);
    } else {
        e(L, 57, L.I.length);
    }
}
                                    

#42 JavaScript::Eval (size: 107, repeated: 1) - SHA256: ce6db4c413c3c65ceb9a341c62bce6471b19ea1cfc411383f192734e541a00a3

                                        0,
function(L, n, U, w) {
    n = (U = (n = L.X(), U = L.X(), w = L.X(), L).Z(U), L).Z(n), e(L, w, n[U]);
}
                                    

#43 JavaScript::Eval (size: 97, repeated: 1) - SHA256: 6024af961510c880818e82553d02d70aee435484f6d74cf435780d4c782401fb

                                        0,
function(L, n, U, w) {
    n = L.X(), U = L.X(), w = L.X(), e(L, w, (L.Z(n) in L.Z(U)) + 0);
}
                                    

#44 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 368a4503f58179bf95600cb3dfe9ccfda5c020da43344a58e5aa6f82d2bdd747

                                        0,
function(L, n, U, w) {
    try {
        w = L[(n + 2) % 3], L[n] = L[n] - L[(n + 1) % 3] - w ^ (1 == n ? w << U : w >>> U);
    } catch (Q) {
        throw Q;
    }
}
                                    

#45 JavaScript::Eval (size: 94, repeated: 1) - SHA256: ec2d2f35e724a0907bb194cd5210de159c5f8a4057e7e3ce26745f36761383e0

                                        0,
function(L, n, U, w) {
    w = (U = (n = L.X(), L.X()), L.X()), e(L, w, L.Z(n) | L.Z(U));
}
                                    

#46 JavaScript::Eval (size: 95, repeated: 1) - SHA256: 73649a838f87d03d3dde2c2cf4ac7dd0c15a8eebe971e63d8caa6ae058a9db16

                                        0,
function(L, n, U, w) {
    w = (U = (n = L.X(), L.X()), L.X()), e(L, w, L.Z(n) || L.Z(U));
}
                                    

#47 JavaScript::Eval (size: 102, repeated: 1) - SHA256: e1c9236c999622620ac1968880509ea91c02ca967b18209372fa70cd5e30d976

                                        0,
function(L, n, U, w) {
    w = (n = L.X(), U = L.X(), L).X(), n = L.Z(n) == L.Z(U), e(L, w, +n);
}
                                    

#48 JavaScript::Eval (size: 101, repeated: 1) - SHA256: d8be2d036e815a8acd586671dcc60e18388fa14e22e022d73b80ceb0f383856a

                                        0,
function(L, n, U, w) {
    w = (n = L.X(), U = L.X(), L).X(), n = L.Z(n) > L.Z(U), e(L, w, +n);
}
                                    

#49 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 867f836a1cc3020ae61282d877c41866d30c254f91053894b6c4692629585ab6

                                        0,
function(L, n, U, w, Q) {
    (w = (w = (n = L.X(), U = L.X(), L.X()), n = L.Z(n), Q = L.Z(L.X()), U = L.Z(U), L).Z(w), 0 !== n) &&
    (w = X(L, w, Q, 1, n, U), n.addEventListener(U, w, E), e(L, 84, [n, U, w]));
}
                                    

#50 JavaScript::Eval (size: 130, repeated: 1) - SHA256: 3b3fa532f43e718a9e1cb6ad084d00d3e40c0af28d922a23942d16410ec7f947

                                        0,
function(L, n, U, w, Q) {
    U = (w = (U = (n = L.X(), L.X()), L).Z(L.X()), Q = L.Z(L.X()), L).Z(U), e(L, n, X(L, U, w, Q));
}
                                    

#51 JavaScript::Eval (size: 136, repeated: 1) - SHA256: 180f825f77a72e7231d3ff52570683947c468a2e876ff32755285a0e0ed8d4d1

                                        0,
function(L, n, U, w, Q) {
    for (Q = (n = L.X(), U = O(L), 0), w = []; Q < U; Q++) {
        w.push(L.X());
    }
    e(L, n, w);
}
                                    

#52 JavaScript::Eval (size: 397, repeated: 1) - SHA256: 96e917756474952a3f81f7620fd6fac7ce38a5475027b32e36976138a3e86e60

                                        0,
function(L, n, U, w, Q, R) {
    if (!D(L, 1, 255)) {
        if (w = (U = (U = (n = L.X(), L.X()), w = L.X(), Q = L.X(), n = L.Z(n), L.Z(U)), L).Z(w), L = L.Z(Q), "object" == Z(n)) {
            for (R in Q = [], n) {
                Q.push(R);
            }
            n = Q;
        }
        for (Q = 0, R = n.length; Q < R; Q += w) {
            U(n.slice(Q, Q + w), L);
        }
    }
}
                                    

#53 JavaScript::Eval (size: 218, repeated: 1) - SHA256: a370a6f6cfe6042003432003c8c4e9eca74437bd342e2324d1521200415842e9

                                        0,
function(L, n, U, w, Q, R) {
    return L = (R = (U = (Q = (w = function() {
        return w[U.W + (Q[U.c] === n) - !R[U.c]];
    }, function() {
        return w();
    }), this), U).w, Q[U.f] = function(L) {
        w[U.F] = L;
    }, Q[U.f](L), Q);
}
                                    

#54 JavaScript::Eval (size: 339, repeated: 1) - SHA256: a8aea57b9b0eaee276f25f83d11dbd6384b089968c8d4be72f8c2e97be7b140f

                                        0,
function(L, n, U, w, Q, R, b) {
    D(L, 1, 5) ||
        (n = J(L), Q = n.O, w = n.G, U = n.o, b = U.length, 0 == b ? (R = new(w[Q])) : 1 == b ? (R = new(w[Q])(U[0])) : 2 == b ? (R = new(w[Q])(U[0], U[1])) : 3 == b ? (R = new(w[Q])(U[0], U[1], U[2])) : 4 == b ? (R = new(w[Q])(U[0], U[1], U[2], U[3])) : T(L, 22), e(L, n.i, R));
}
                                    

#55 JavaScript::Eval (size: 784, repeated: 1) - SHA256: d8160f57fd73a2440cc23ef4fe95ad2408f7ad76c8e0f4a5ccb1603db142df9d

                                        0,
function(L, n, U, w, Q, R, b, P, u, x, f, q, S) {
    for (x = (P = (b = (R = (Q = (n = L.X(), w = U = 0, function(n, Q) {
            for (; w < n;) {
                U |= L.X() << w, w += 8;
            }
            return Q = U & (w -= n, (1 << n) - 1), U >>= n, Q;
        }), Q(3) + 1), Q(5)), []), u = 0); x < b; x++) {
        f = Q(1), P.push(f), u += f ? 0 : 1;
    }
    for (u = (u - 1).toString((x = 0, 2)).length, q = []; x < b; x++) {
        P[x] || (q[x] = Q(u));
    }
    for (x = 0; x < b; x++) {
        P[x] && (q[x] = L.X());
    }
    for (x = R, S = []; x--;) {
        S.push(L.Z(L.X()));
    }
    e(L, n, function(L, n, U, w, Q) {
        for (U = (w = 0, []), L.j++, n = []; w < b; w++) {
            if (!(Q = q[w], P)[w]) {
                for (; Q >= n.length;) {
                    n.push(L.X());
                }
                Q = n[Q];
            }
            U.push(Q);
        }(L.M = L.L(S.slice(), L.X), L).T = L.L(U, L.X);
    });
}
                                    

#56 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#58 JavaScript::Eval (size: 81, repeated: 1) - SHA256: b8527309d809b4902de5b86ba0c7d48db2ea18f3bf7cf12b2b75860e3898e56d

                                        G = function(L, n) {
    (L.l.push(L.V.slice()), L).V[57] = void 0, e(L, 57, n);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#60 JavaScript::Eval (size: 269, repeated: 1) - SHA256: 19235114916c2d2f4291f26af6e7d3d72f9d7cae90199befba2ffec20fdd4649

                                        J = function(L, n, U, w, Q, B) {
    for (B = (Q = (w = ((U = (n = {}, L).X(), n.i = L.X(), n).o = [], L).X() - 1, L.X()), 0); B < w; B++) {
        n.o.push(L.X());
    }
    for ((n.O = L.Z(U), n).G = L.Z(Q); w--;) {
        n.o[w] = L.Z(n.o[w]);
    }
    return n;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#62 JavaScript::Eval (size: 487, repeated: 1) - SHA256: f4bedd41b0ee8c54ac89e826f069eb1200a25fae40ed32494cdf13f4f4aa52cc

                                        K = function(L, n, U, w, Q) {
    for (w = U = (n = [], 0); w < L.length; w++) {
        Q = L.charCodeAt(w), 128 > Q ? (n[U++] = Q) : (2048 > Q ? (n[U++] = Q >> 6 | 192) : (55296 == (Q & 64512) &&
            w + 1 < L.length && 56320 == (L.charCodeAt(w + 1) & 64512) ? (Q = 65536 + ((Q & 1023) << 10) + (L.charCodeAt(++w) & 1023), n[U++] = Q >> 18 | 240, n[U++] = Q >> 12 & 63 | 128) : (n[U++] = Q >> 12 | 224), n[U++] = Q >> 6 & 63 | 128), n[U++] = Q & 63 | 128);
    }
    return n;
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#64 JavaScript::Eval (size: 417, repeated: 1) - SHA256: 329e2002baf08f441831aa4d7a794ecb52f3aa4fa7fc30d1bd93a72192f75a4c

                                        M = function(L, n, U, w, Q, B) {
    for (L = (w = ((230 == (Q = L.Z(n), n) ? (n = function(L, n, U, w) {
                if (Q.S != (U = (n = Q.length, n - 4) >> 3, U)) {
                    U = (U << 3) - (Q.S = (w = [0, 0, 0, B], U), 4);
                    try {
                        Q.J = Y(z(Q, U), z(Q, U + 4), w);
                    } catch (R) {
                        throw R;
                    }
                }
                Q.push(Q.J[n & 7] ^ L);
            }, B = L.Z(102)) : (n = function(L) {
                Q.push(L);
            }), w) &&
            n(w & 255), 0), U).length; w < L; w++) {
        n(U[w]);
    }
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: c4694f2e93d5c4e7d51f9c5deb75e6cc8be5e1114178c6a45b6fc2c566a0aa8c

                                        O
                                    

#66 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 92ec0adb2a83a8b25ed2ef1c562e62029c14a7390fe254941b370f2d3a8d5123

                                        O = function(L, n) {
    return (n = L.X(), n) & 128 && (n = n & 127 | L.X() << 7), n;
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#68 JavaScript::Eval (size: 442, repeated: 1) - SHA256: b5bbd1b609f8f93b8e39265909214ecf12c7372cdcdd8f69bde69b973c2414c0

                                        T = function(L, n, U, w, Q) {
    ((w = ((void 0 != (n = [(Q = L.Z(103), n), Q >> 8 & 255, Q & 255], w) &&
                n.push(w), 0) == L.Z(212).length &&
            (L.V[212] = void 0, e(L, 212, n)), ""), U) &&
        (U.message && (w += U.message), U.stack && (w += ":" + U.stack)), U = L.Z(227), 3) < U &&
        (w = w.slice(0, U - 3), U -= w.length + 3, w = K(w.replace(/\r\n/g, "\n")), M(L, 230, I(w.length, 2).concat(w), 9)), e(L, 227, U);
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#70 JavaScript::Eval (size: 272, repeated: 1) - SHA256: 9add70af5e91d7280e8229665ec4e2f9728d953deeb53362188778252b461432

                                        X = function(L, n, U, w, Q, B) {
    return function() {
        var H = w & 1,
            W = [6, n, U, void 0, Q, B, arguments];
        if (w & 2) {
            var F = (l(L, W), r(L, true, false, false));
        } else {
            H && L.U.length ? l(L, W) : H ? (l(L, W), r(L, true, false, false)) : (F = h(L, W));
        }
        return F;
    };
}
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#72 JavaScript::Eval (size: 367, repeated: 1) - SHA256: 195b502d89198067365582ab6fb869a9dad01655673120e6984d44c9abb593be

                                        Y = function(L, n, U, w) {
    try {
        for (w = 0; 101513633568 != w;) {
            L += (n << 4 ^ n >>> 5) + n ^ w + U[w & 3], w += 3172301049, n += (L << 4 ^ L >>> 5) + L ^ w + U[w >>> 11 & 3];
        }
        return [L >>> 24, L >> 16 & 255, L >> 8 & 255, L & 255, n >>> 24, n >> 16 & 255, n >> 8 & 255, n & 255];
    } catch (Q) {
        throw Q;
    }
}
                                    

#73 JavaScript::Eval (size: 2, repeated: 8) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#74 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#77 JavaScript::Eval (size: 325, repeated: 1) - SHA256: b80e84a165bc6fe756c0993f46beac772f93c8ea3b3365892edb381547297fd4

                                        e = function(L, n, U) {
    if (57 == n || 103 == n) {
        if (L.V[n]) {
            L.V[n][L.f](U);
        } else {
            L.V[n] = L.D(U);
        }
    } else if (98 != n && 230 != n && 108 != n && 212 != n || !L.V[n]) {
        L.V[n] = L.L(U, L.Z);
    }
    202 == n && (L.A = void 0, e(L, 57, L.Z(57) + 4));
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a

                                        k
                                    

#79 JavaScript::Eval (size: 635, repeated: 1) - SHA256: 62f9e0b5b59e2efa5f79a01d2b5a675305b0743b011e36c52640a4b9e81188b8

                                        k = function(L, n, U, w, Q, B, H) {
    L.j++;
    try {
        for (U = (w = (Q = void 0, B = 0, 5001), L).I.length;
            (--w || L.a) && (L.M || (B = L.Z(57)) < U);) {
            try {
                L.M ? (Q = L.X(true)) : (e(L, 103, B), H = L.X(), Q = L.Z(H)), Q && Q.call ? Q(L) : T(L, 21, 0, H), L.R = true, D(L, 0, 2);
            } catch (W) {
                W != L.v && (L.Z(25) ? T(L, 22, W) : e(L, 25, W));
            }
        }
        w || T(L, 33);
    } catch (W) {
        try {
            T(L, 22, W);
        } catch (F) {
            V(L, F);
        }
    }
    return (U = L.Z(182), n) && e(L, 57, n), L.j--, U;
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#81 JavaScript::Eval (size: 80, repeated: 1) - SHA256: c061953d33a06dcce9472f8b450192cba35c9b6abe0b405c8dd9d1c9c85894e8

                                        m = function(L, n, U, w) {
    (w = (U = L.X(), L.X()), M)(L, w, I(L.Z(U), n));
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8

                                        t
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4c94485e0c21ae6c41ce1dfe7b6bfaceea5ab68e40a2476f50208e526f506080

                                        v
                                    

#84 JavaScript::Eval (size: 118, repeated: 1) - SHA256: 1a5aeb20250728ed267245b728404d0bb50448bf8d4126bdd443ccb199199531

                                        v = function(L, n, U, w) {
    for (U = L.X(), w = 0; 0 < n; n--) {
        w = w << 8 | L.X();
    }
    e(L, U, w);
}
                                    

#85 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#86 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa

                                        y
                                    

#87 JavaScript::Eval (size: 128, repeated: 1) - SHA256: ee410e9333603f3eac28da8f554fe855f5277bd2cfd05d16808773188191f761

                                        y = function(L, n, U) {
    return U = L.Z(57), L.I && U < L.I.length ? (e(L, 57, L.I.length), G(L, n)) : e(L, 57, n), k(L, U);
}
                                    

#88 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#89 JavaScript::Eval (size: 88, repeated: 1) - SHA256: eedaa1885016314260f327e13afbddd353addad8758fdbfcf2e4b574c49ad804

                                        z = function(L, n) {
    return L[n] << 24 | L[n + 1] << 16 | L[n + 2] << 8 | L[n + 3];
}
                                    

Executed Writes (2)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1333, repeated: 1) - SHA256: fc7304e005440c2f0f574293e9060408528f593a6a7596049d54d61aafee2f1f

                                        < span id = "mag9039444" > < img src = "https://cm.g.doubleclick.net/pixel?google_nid=magnetic&amp;google_cm&amp;google_sc&amp;google_hm=756f1f2fd96b4207be3d7094f84b7044"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://secure.adnxs.com/pxj?bidder=143&amp;seg=530156&amp;action=setuid(&quot;756f1f2fd96b4207be3d7094f84b7044&quot;)"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://pixel.rubiconproject.com/tap.php?v=14256&amp;nid=2682&amp;expires=30&amp;put=756f1f2fd96b4207be3d7094f84b7044"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://rtb.gumgum.com/usersync?b=mag&amp;i=756f1f2fd96b4207be3d7094f84b7044"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://tapestry.tapad.com/tapestry/1?ta_partner_id=1032&amp;ta_partner_did=756f1f2fd96b4207be3d7094f84b7044&amp;ta_format=png"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://bh.contextweb.com/bh/rtset?do=add&amp;pid=548607&amp;ev=756f1f2fd96b4207be3d7094f84b7044"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://dsum-sec.casalemedia.com/rum?cm_dsp_id=48&amp;external_user_id=756f1f2fd96b4207be3d7094f84b7044"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://loadm.exelator.com/load/?p=204&amp;g=1103&amp;buid=756f1f2fd96b4207be3d7094f84b7044&amp;j=0"
width = "1"
height = "1"
style = "display:none;" > < /span>
                                    


HTTP Transactions (140)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.137.58
HTTP/1.1 301 Moved Permanently
                                        
Server: AkamaiGHost
Content-Length: 0
Location: https://www.sharefile.com/
Cache-Control: max-age=1800
Expires: Fri, 19 Jan 2018 01:49:38 GMT
Date: Fri, 19 Jan 2018 01:19:38 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=432121, public, no-transform, must-revalidate
Last-Modified: Wed, 17 Jan 2018 01:17:07 GMT
Expires: Wed, 24 Jan 2018 01:17:07 GMT
Date: Fri, 19 Jan 2018 01:19:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    2ac0e82db67259020e7d776f884058bf
Sha1:   c252bf053bdd1b4bf4e3749087294db77aeefacf
Sha256: cc66d7b5048fcfd5e56d694b12e8b9a850088c4026839c422a902ce825f22113
                                        
                                            GET / HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "520616-1d8ef-56282e3a9c44d:dtagent10133171206150114A0RG"
Last-Modified: Thu, 11 Jan 2018 16:46:27 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 18934
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:39 GMT
Date: Fri, 19 Jan 2018 01:19:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18934
Md5:    a3090bf5b4f60b555ce2fee489331719
Sha1:   a0652ec588a1089776554922a4fdd75d74be145e
Sha256: 37b3190f418037774b51d426d06f3d0ed061a24a3a35d1e8289a0f1ea3b306dc
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=466353, public, no-transform, must-revalidate
Last-Modified: Wed, 17 Jan 2018 10:47:33 GMT
Expires: Wed, 24 Jan 2018 10:47:33 GMT
Date: Fri, 19 Jan 2018 01:19:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    d9d5ce56d3c28a6ca620561a12480484
Sha1:   1cd0ccee30efdb41e398bb8c3cf94a91d8d1db6e
Sha256: 53f7dd033ba70df443e939bce5a12d62483c552ac769595948ebc1d7a59fbf89
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:39 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    2b9f19c44851dcc84e3366d62709b754
Sha1:   9ca7d08d740e932406c49fd33536424ffdcb7844
Sha256: 5503025a409741aeee2f785a40b06242a9cec28f30a0dbedd29ed575a985e2bd
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=337308, public, no-transform, must-revalidate
Last-Modified: Mon, 15 Jan 2018 22:57:00 GMT
Expires: Mon, 22 Jan 2018 22:57:00 GMT
Date: Fri, 19 Jan 2018 01:19:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    a03c349496c368d0227a66ecd524d7c9
Sha1:   b617a005bc90eb75920cdb91f040b867b6a33845
Sha256: dfb38e1cb7bf5c7d3e9520d0f63f5f37597366b9d6c1aebab7ed8077d8d39eec
                                        
                                            GET /recaptcha/api.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.147
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Fri, 19 Jan 2018 01:19:39 GMT
Date: Fri, 19 Jan 2018 01:19:39 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   403
Md5:    a51aa69b3e9f9c8a71253f9bb336cbbe
Sha1:   ab28da792d16da3e2102a8953fa6bf7b5e3f9e75
Sha256: 965f830c9461f37d67a873588e23ce66a7043a81cab011b346fe2fc2b4d36745
                                        
                                            GET /etc/designs/sf/css/app.css HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "280037-576cf-5620dee984c79-gzip"
Last-Modified: Fri, 05 Jan 2018 21:14:20 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 43166
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:39 GMT
Date: Fri, 19 Jan 2018 01:19:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43166
Md5:    17323cf2c837c1ff6f22abe6d9ca118e
Sha1:   65eec7e7518ab130ae6625b2c2e27a576ad4dc16
Sha256: 92e0c061c41e077ff37c85f0351abbd72794850cf9b832c28c18fa2db563537a
                                        
                                            GET /js/140522114.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         104.123.117.117
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
x-amz-id-2: UORNxzkEmXiyMiiGOsVUpGEhV2DXRPiExOXjWeC1SycKzCUohND+FybVOrP3m69SSAzZBvYBqQU=
x-amz-request-id: 7A8FA6F63FF0389F
Last-Modified: Wed, 17 Jan 2018 20:55:20 GMT
Etag: "d78c8faff0e2baf35311ad7b1a0aac26"
x-amz-meta-revision: 5347
Content-Encoding: gzip
x-amz-version-id: SiRJtJfDMPTQM5yGxPqhgwQHe1OHxX0E
Accept-Ranges: bytes
Content-Length: 76068
Server: AmazonS3
Vary: Accept-Encoding
Cache-Control: max-age=120
Date: Fri, 19 Jan 2018 01:19:39 GMT
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Expose-Headers: x-amz-meta-revision
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, last modified: Wed Jan 17 21:55:18 2018, max compression
Size:   76068
Md5:    d78c8faff0e2baf35311ad7b1a0aac26
Sha1:   804d01638d017acf2c072c3abcc047eeccd76047
Sha256: 153dfe6fe4f3533e047aa8750d8ce68a8aa8628070204de10488301eff4851fb
                                        
                                            GET /ruxitagentjs_2SVfqr_10133171206150114.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 34700
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   34700
Md5:    148e1f91435368d55d44b0fed35af01d
Sha1:   66c711c659c7529096005fa10bd106ecaae8f56e
Sha256: ffc5b679a607914580453245d889d2ec53ce20f2425b3915e0fb083062e93468
                                        
                                            GET /content/dam/sf/homepage/sf_hero_tablet_arch.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "180016-2cac-5620ddd3372a9"
Last-Modified: Fri, 05 Jan 2018 21:09:28 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 11436
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 1536 x 174, 8-bit/color RGBA, non-interlaced
Size:   11436
Md5:    df5a41cdbef86293ecdaf7b435396d37
Sha1:   fcff8fe39ecbf85b63b644d49d63dab610fae10a
Sha256: d7d492be3f8fd22625938838d9f8a4f0ea6cf7fdaa3a3d4ef12fb75bbeda00f0
                                        
                                            GET /content/dam/sf/homepage/sf_hero_mobile_arch.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28002f-b8f-5620de2f74aed"
Last-Modified: Fri, 05 Jan 2018 21:11:05 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2959
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 640 x 60, 8-bit/color RGBA, non-interlaced
Size:   2959
Md5:    778a18e36e94ad5b9a6180bb871e5a8e
Sha1:   3b8a22bcd73b3caad00fccc481368c04f446985a
Sha256: 18e4a5550949708be5db28dc9a387e32c70df287500a45544f50a06b1f82267f
                                        
                                            GET /etc/designs/sf/css/static/images/1x1.gif HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280022-2b-5620ddd3871b1"
Last-Modified: Fri, 05 Jan 2018 21:09:29 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 43
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_a.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "18002e-1f8da-5620de2f99105"
Last-Modified: Fri, 05 Jan 2018 21:11:05 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 129242
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 705 x 435, 8-bit/color RGBA, non-interlaced
Size:   129242
Md5:    150cdfa4967302a525adaac31fb2505f
Sha1:   31101081482450b8562959ecf7cfb871e259b9b8
Sha256: 6f8683bfd0a9caaf761f49ab6badc355bb0837c46223d38a8b6b2b7157d88bde
                                        
                                            GET /content/dam/sf/homepage/watch-the-video-button.jpg HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280024-c7c-5620ddd3967c8"
Last-Modified: Fri, 05 Jan 2018 21:09:29 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 3196
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.00, comment: "LEAD Technologies Inc. V1.01"
Size:   3196
Md5:    d17b552972489703aaf778cd98350468
Sha1:   bfb46ef2f0e6c8079659722ce29c246f3fa4f52b
Sha256: 165e81b6212ad23f8c9e63e6244755601503d26dc244d5a8b9ecb14b661926ac
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_c.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28001b-1a02b-5620ddd33457a"
Last-Modified: Fri, 05 Jan 2018 21:09:28 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 106539
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 720 x 439, 8-bit/color RGBA, non-interlaced
Size:   106539
Md5:    2cf3dc95340b2869708d80f27da4c85c
Sha1:   ad00a528a7429b9a161c98e9e44b88c7179731df
Sha256: 48eb15c29318bdb7be0694c4ef9dc1fa6c31521920a4ccc9c4ec995d5af1de84
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_b.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28001c-369fa-5620ddd37b249"
Last-Modified: Fri, 05 Jan 2018 21:09:29 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 223738
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 727 x 433, 8-bit/color RGBA, non-interlaced
Size:   223738
Md5:    5fe7f2edb215ec1bee2e3477919da618
Sha1:   b79cf458f72953ab77c80495eb0a0ec954cd3c52
Sha256: 17426682f687a6a0b135378c137fe122d5dab3ce5e7992573a552104e1d8c511
                                        
                                            GET /content/dam/sf/homepage/sf_video_people.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "180015-2531e-5620ddd3314e9"
Last-Modified: Fri, 05 Jan 2018 21:09:28 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 152350
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 950 x 600, 8-bit colormap, non-interlaced
Size:   152350
Md5:    16cbad7b3db3fe7648a4657039a3001d
Sha1:   89e3a97cfe4337bd96934b7c152d8a27e09126d4
Sha256: 3c176d15bc56484d9c14657a39c0597a4fab64dc754bcf4f091b4adf10f9c699
                                        
                                            GET /content/dam/sf/newSF/gartner_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280065-681-5620e764c540a"
Last-Modified: Fri, 05 Jan 2018 21:52:17 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1665
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 90 x 21, 8-bit/color RGBA, non-interlaced
Size:   1665
Md5:    52ec889960542aa75449e53d156d82f1
Sha1:   c82e9e30f1377834ba7ec6965d86725ce1eebdc6
Sha256: 43e0a37bf17693949e47c39150f9db58af2097024209cb99c021bff55fa409d8
                                        
                                            GET /etc/designs/sf/js/foundation/personalization.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "180040-1e698-5620dee9ebc8c-gzip"
Last-Modified: Fri, 05 Jan 2018 21:14:21 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 29864
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29864
Md5:    ce398cfe48f38cbc3c8376e14a787fcc
Sha1:   6ea277bf6860f613eba78d444f9f1ac4a93fe8ff
Sha256: 067d8c647c46ac7d754ecea2907bd05e1dfcd853cc1e4c82115adee81a6b4437
                                        
                                            GET /etc/designs/sf/js/common.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "280053-48594-5620e25239064-gzip"
Last-Modified: Fri, 05 Jan 2018 21:29:35 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 85746
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   85746
Md5:    84a694fb5269b28b525b2c8cf7760599
Sha1:   322db8d6e0f02c7c7c61d22178f8857e03d664fc
Sha256: af261848b18b5b6a4509158cec743e6b7505229a32d884040bfee63377f625ba
                                        
                                            GET /js/geo2.js HTTP/1.1 
Host: cdn3.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         104.123.117.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: AmazonS3
Content-Length: 286
x-amz-id-2: qmABVB2K/aGZ0G5/hbusyLvUaftolF/mAHII0mMvpmmiMnjwZyPawprPglu5HpMBusbDRh+cIy0=
x-amz-version-id: Y1BKPK.c9lIaZx2uYj8JMWZye_vJfrh9
Etag: "adadfc5d7afd13e353d9d52cec1c7827"
x-amz-request-id: 1287A7B57673BC76
Cache-Control: max-age=84735
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   286
Md5:    f915d3de6ec19814c490d863512e1c00
Sha1:   ed496d06ef124156a3cbc8f0a8b0e4f23812e05f
Sha256: 5795f31cf669ef422d9b6454237d757e88b329b0c1f0c4709859e34486b63b72
                                        
                                            GET /etc/designs/sf/css/static/images/favicon.ico HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: HttpOnly; HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28002c-47e-5620ddd6dcdc7"
Last-Modified: Fri, 05 Jan 2018 21:09:32 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Content-Length: 947
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   947
Md5:    efdf11bdc9f0ac6d59bc5a4a0a2fc3e2
Sha1:   5a045c4de00224a5c1ab889a79ea151d1cbc6b2f
Sha256: 81cf3e96bc93a7de56099b5abcb74d8d777264d3b0bba9d4898b2d9fa1450cb4
                                        
                                            GET /content/dam/sf/homepage/citrix-logo-footer.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28001e-21b-5620ddd37fc81"
Last-Modified: Fri, 05 Jan 2018 21:09:29 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 539
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:40 GMT
Date: Fri, 19 Jan 2018 01:19:40 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 85 x 32, 8-bit gray+alpha, non-interlaced
Size:   539
Md5:    96f2ebc0fcc9815a1842c7e45eacc426
Sha1:   f6b3d6041a9c52938004d86c25ea5d5d0fa0b8f1
Sha256: 6d52d3b9bd5e3d90dfa344256e6cfc3ffcc56c0394f0d4fedc36165a0e999d87
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    23c82a2018783da751a652dd2a79ac42
Sha1:   d92f462730926a47a3b499bc8859b098b442a23b
Sha256: c2b5a0ac42134643b28c9a4b4e704a8ba312064032b6d3f6f5fae1a5b94f2df6
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /content/dam/sf/newSF/forrester-RGB-white_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280031-8aa9-5620de30329fa"
Last-Modified: Fri, 05 Jan 2018 21:11:06 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 35497
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:41 GMT
Date: Fri, 19 Jan 2018 01:19:41 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 1632 x 260, 8-bit/color RGBA, non-interlaced
Size:   35497
Md5:    6d185121fd9bfc4b2db6690a4d379549
Sha1:   7d005242fc31e84d97d851ce0e6260fa3d99472d
Sha256: 5714f9eb44cef35d3521c2c86760ca2a9193ebc49c63500c2d2e6407a4727caf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:43 GMT
Etag: "5a5906e3-1d7"
Expires: Sun, 21 Jan 2018 01:19:43 GMT
Last-Modified: Fri, 12 Jan 2018 19:05:07 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2de93c4e051cee650a8f6fd4fe48ffed
Sha1:   c7d3929643153be0ca8494ac2bb2939039fa22bb
Sha256: 72eaa03272b7d4c90b97b34a2fd8126eca7dbe46071fa6058e21958c43d64662
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:43 GMT
Etag: "5a60d9a0-1d7"
Expires: Sun, 21 Jan 2018 01:19:43 GMT
Last-Modified: Thu, 18 Jan 2018 17:30:08 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    300532093abe1ebd8f672ea7ccf8b1ab
Sha1:   8138f94bf23df63e09c1e32c51c250eadf5a606b
Sha256: 36e4e2aa2712c98db19bf3e7f58910ff2568ae5608c3e994b9ffbd645e52b3b3
                                        
                                            GET /gtm.js?id=GTM-XCGM HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 19 Jan 2018 01:19:43 GMT
Expires: Fri, 19 Jan 2018 01:19:43 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   36478
Md5:    e3cd54b781741519394ffa901ad7cd5e
Sha1:   b2d362c05809c348ae1d72c90ae96b7c52ccb354
Sha256: 682bec3e7cd890dc6aa360fb7aab73b39155360a17bd610362492cf590a8c436
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=491440, public, no-transform, must-revalidate
Last-Modified: Wed, 17 Jan 2018 17:46:38 GMT
Expires: Wed, 24 Jan 2018 17:46:38 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    8d363079229c77fd4cd3be043d0eef04
Sha1:   3bf15da000edccccdc0291fe8227b53abb5c5efd
Sha256: a63d7e09142ae6b16b650bf45a49a56e6b7d4b4cea0d84c59cf97672acc3f3b2
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-semibold.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280029-6682-5620ddd569097:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:09:30 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 26242
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:43 GMT
Date: Fri, 19 Jan 2018 01:19:43 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   26242
Md5:    47678f1e3e399b9b38df1041f5cafb32
Sha1:   6b4ac85b5dad0701b70bc603c6f70bf2619cf890
Sha256: 2817043a87ef7679c8f52b7dc70a81d306da35190c2d4fa40fa341600d4b2dd9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:44 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119048, public, no-transform, must-revalidate
Last-Modified: Fri, 19 Jan 2018 00:08:18 GMT
Expires: Sat, 20 Jan 2018 12:08:18 GMT
Etag: "1118215327820a0ff5cd056480701ab50830a699"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    e4022c89a631bbb65e021f59ad25fd0d
Sha1:   1118215327820a0ff5cd056480701ab50830a699
Sha256: 3da2c4575301924c85b45c472e810185f34f03db7fbf6023861497923d8ab500
                                        
                                            GET /etc/designs/sf/css/static/fonts/icons.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "180045-f818-5620deeae1a24:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:14:21 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 63512
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   63512
Md5:    3cb92b57a93fbc98b8a601cc56cbfdc9
Sha1:   70d6b922087b793b818ebcb006ca9fcd2876d318
Sha256: 2b61a81d2acdfe88deb71ab4a28060a199924089af7a37ac7ef047b443e58dae
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-bold.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "18002a-6390-5620de2ec71a5:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:11:03 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 25488
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   25488
Md5:    d72b7cc589366d0ec72dee468b459651
Sha1:   92bee02da830e389e993cf15cd10e543da31fb5e
Sha256: f9bb1440bc53812b4c6d14ca05415dc707eb5f94fa8d188cfd9cf60217cd1fe4
                                        
                                            POST /bin/citrix/shareFileWebHit HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/
Content-Length: 348
Cookie: HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=6a7841d4-8f5a-40e5-be98-830d4cebce50; uuid=1517610913987kkiHJxX
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 89
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:45 GMT
Date: Fri, 19 Jan 2018 01:19:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   89
Md5:    318a40622d1ee7443e312849f83d3934
Sha1:   b2db822a8f94ad047298bc66c655d81f8f363470
Sha256: 9e176e27e39104743d309c6be56f50948dbaae7eb1ffac166c55c6461b9faafb
                                        
                                            GET /api/v2/ip.json?key=851275e3832f80a88e468a191a65984648201358&callback=jQuery170045724838830833114_1516324781101&_=1516324782633 HTTP/1.1 
Host: api.demandbase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         52.85.240.39
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 19 Jan 2018 01:19:44 GMT
Server: nginx
Api-Version: v2
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Thu, 18 Jan 2018 01:19:45 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Request-ID: b84a443d-f72b-4bab-8cc4-d30a0e904f8e
X-Cache: Miss from cloudfront
Via: 1.1 efc12fd327e76ab48012cf50cecfdff8.cloudfront.net (CloudFront)
X-Amz-Cf-Id: xmDVvuR14xtyAg3xhRzhq8PYfnAaRBTxdb2vPbn5SoS90sh5Irg9LA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Jan 19 02:19:45 2018
Size:   674
Md5:    2aea3f9fa8ca84b19b3155098a40e597
Sha1:   6d5d1e2b11e0595aad020a4db3f3e67edd0703ad
Sha256: fc3906bec45873406499905bc9cb296162efe3e06855263d414fab1f1bc04d0b
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-regular.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280044-668a-5620deeb2dd39:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:14:21 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 26250
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   26250
Md5:    c8f2d5dc26ba3252f4e855c999550e69
Sha1:   7d53a7281e03d51c25039ab8ec5acd21eefc7eaf
Sha256: a1b0fdd10238a985ee45a051159dcba0f296b7f468213a31fb32d50e74ecfe18
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=322769, public, no-transform, must-revalidate
Last-Modified: Mon, 15 Jan 2018 18:56:54 GMT
Expires: Mon, 22 Jan 2018 18:56:54 GMT
Date: Fri, 19 Jan 2018 01:19:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    33a773105dce2ae61ee1641f6700ceee
Sha1:   d08a6f859efe0655735a2b1d012d7d4148fb0035
Sha256: 1e4d4ddbba46a99faa1b593514ad1c7a1072ef9bf1a0dde2051eca12794d365c
                                        
                                            GET /content/dam/sf/pricing.txt HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/
Cookie: HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=6a7841d4-8f5a-40e5-be98-830d4cebce50; uuid=1517610913987kkiHJxX

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "18002b-a3-5620de2f3b11d:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:11:04 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 132
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:45 GMT
Date: Fri, 19 Jan 2018 01:19:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   132
Md5:    2fa2adb0bb37c3da1815b768cba82c7c
Sha1:   bbd0312832c39fbb66d4e68529ca2c3754a8fc61
Sha256: 0806f5e7de5465aa7b672842770dc5d15d25929f62a219cf5941b541f1288925
                                        
                                            GET /event?a=140522114&d=24703920&y=false&src=js&s175091490=direct&s6781623442=true&s245471469=none&s174979504=ff&s175094193=false&tsent=1516324780.401&n=https%3A%2F%2Fwww.sharefile.com%2F&u=oeu1516324780372r0.5836457063699391&wxhr=true&time=1516324780.401&f=8319120065,8513231905,8514252506,8546741223,8607550983,9738173321,8545661644,8573102023,9189590451,6257010330,8561015617,8360262622&g=&cx2=e30bcd4 HTTP/1.1 
Host: 140522114.log.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Origin: https://www.sharefile.com

                                         
                                         54.243.216.79
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-Requested-With, X-TS-AJAX-Request
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.sharefile.com
Date: Fri, 19 Jan 2018 01:19:45 GMT
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Server: nginx
Set-Cookie: fixed_external_140522114_end_user_id=; Domain=.optimizely.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=-1 end_user_id=oeu1516324780372r0.5836457063699391; Domain=.140522114.log.optimizely.com; expires=Mon, 17 Jan 2028 01:19:45 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:45 GMT
Etag: "5a610880-1d7"
Expires: Sun, 21 Jan 2018 01:19:45 GMT
Last-Modified: Thu, 18 Jan 2018 20:50:08 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    258e226b3130f6cc39e47efabbe4d4a1
Sha1:   a12e925ba1132521f87661f2b86b61087e3e8c9b
Sha256: 90138e3dfd00714d8ae32447b3fae265b7afd3e7147ae7da3f269eeb67fd616f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:45 GMT
Etag: "5a61130d-1d7"
Expires: Sun, 21 Jan 2018 01:19:45 GMT
Last-Modified: Thu, 18 Jan 2018 21:35:09 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fe11d201bcf52f0cbcd54d0a85bf1a45
Sha1:   aee46c98ef9e251cf89458d2bfa17cf83b72f870
Sha256: 26a3d138fec34cda74829fc6293bb43b1866c8ed53d75a39fbda0dc5d2c9d4af
                                        
                                            GET /content/dam/sf/newSF/newsf_industries.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "180032-3d31-5620de3064ebd"
Last-Modified: Fri, 05 Jan 2018 21:11:06 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 15665
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:45 GMT
Date: Fri, 19 Jan 2018 01:19:45 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 308 x 307, 8-bit/color RGBA, non-interlaced
Size:   15665
Md5:    a54038d12a1620309b4ddc496dca3043
Sha1:   5a341d0bbda4b3d75ccabea91280bbdf61c68d54
Sha256: 01f70bc7e9f6fe89e6e0c4ac25724992081348e72f1bfce59d7b142ae8f7c5a9
                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         2.23.140.109
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Etag: "b546970ab6767ca502690d7810adb72f:1495041726"
Last-Modified: Wed, 17 May 2017 17:22:06 GMT
Accept-Ranges: bytes
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 19 Jan 2018 01:19:45 GMT
Content-Length: 708
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   708
Md5:    4661f5e961c5954c1d638a3f86868e28
Sha1:   2371a922e69d9376719c4f800d5c87c8e3952c6d
Sha256: dca896a0cc81f28de5ce3a22d3251577e18d79b41dce5cbec3f39f86935d8f9f
                                        
                                            GET /content/dam/sf/newpricing.txt HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/
Cookie: HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=6a7841d4-8f5a-40e5-be98-830d4cebce50; uuid=1517610913987kkiHJxX; allSources=direct

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "18002c-11f-5620de2f4e5b5:dtagent10133171206150114A0RG"
Last-Modified: Fri, 05 Jan 2018 21:11:04 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 182
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:45 GMT
Date: Fri, 19 Jan 2018 01:19:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   182
Md5:    880cea1ae99cca0bb67260160514f4ce
Sha1:   df2875b6309376460d8cf4679be3e23ff37046c0
Sha256: d9ec8b70fa68cd29e6b11f400b601e58833b7f109cd3444d3ad1a87b177dd000
                                        
                                            GET /sharefile/core.js HTTP/1.1 
Host: origin.extole.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         104.75.76.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Content-Encoding: gzip
Last-Modified: Thu, 18 Jan 2018 19:10:47 GMT
Server: Apache-Coyote/1.1
Vary: Accept-Encoding
Expires: Fri, 19 Jan 2018 01:19:45 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 19 Jan 2018 01:19:45 GMT
Content-Length: 31951
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   31951
Md5:    a3ecd626620da09d44dbf8ee762b7ef0
Sha1:   12e596215071b70477b0dd24692f7d2ee27adeb0
Sha256: f9fabd8942f0460cfbed1501558b6a4f49bb5ca9ff93140665ee1e1b6f74ea49
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:46 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d25ac561c1acd1d052d6b64284649eb4
Sha1:   c68ce6fb4f77e16d5ac7b35a054ed5f0713db811
Sha256: b043d154b23ac7e1485e0b5fb03c3c4f11f6b1c5a3c6001f03db1103de624185
                                        
                                            GET /content/dam/sf/newSF/newsf_pricing.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28002a-1b8e-5620ddd57482e"
Last-Modified: Fri, 05 Jan 2018 21:09:31 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 7054
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 300 x 276, 8-bit/color RGBA, non-interlaced
Size:   7054
Md5:    836a3a6793940cfbe6403e0ac3963336
Sha1:   d350bdba9635d6298468908d5538f077cc68a866
Sha256: 6ef9c93b136948ec0408ff10fad2b3c376c795c967615a9149ef6467163442fb
                                        
                                            GET /151/munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         2.23.140.109
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Etag: "bd3daad4a1e88a1196d76b6dd3c9deed:1440037148"
Last-Modified: Thu, 20 Aug 2015 02:19:08 GMT
Accept-Ranges: bytes
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Sun, 29 Apr 2018 01:19:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Content-Length: 3503
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3503
Md5:    b9bc623c2018c75721fdb69e1b2f2df6
Sha1:   1c5deaa68f106cd2e0e18dd898cd5f04bf8abea7
Sha256: 43ac5e2c57eeee79e7a34e9cdbafc3601ef1ba929f9cb61f720ecc731de31aed
                                        
                                            GET /content/dam/sf/chat-thumb.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28005b-ad5-5620e4dcc7df4"
Last-Modified: Fri, 05 Jan 2018 21:40:57 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2773
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 85 x 85, 8-bit/color RGBA, non-interlaced
Size:   2773
Md5:    8f40c04eacd189440288ef8ec97d3681
Sha1:   3e6356fb79a843a082ed698580d4580dfd1eb540
Sha256: eab83a62a80b128750970dbaf84701de1a5a4cca5d8821767dbcf0279cff88fb
                                        
                                            GET /content/dam/sf/newSF/newsf_mobile.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "18004a-609-5620e11ade4a7"
Last-Modified: Fri, 05 Jan 2018 21:24:09 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1545
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   1545
Md5:    e7fa001db515490f6ea0ec034d3fabd2
Sha1:   3716661db47853b20f9a55269884a50f35c6f68f
Sha256: 0b57aff9e53fc5a056d7f54c2969df25b9d2761636e218930b93b04364a4d01d
                                        
                                            GET /activityi;src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;~oref=https%3A%2F%2Fwww.sharefile.com%2F? HTTP/1.1 
Host: 3845646.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:46 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Strict-Transport-Security: max-age=21600
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Jan-2018 01:34:46 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   336
Md5:    3c27553bca77f0f05cc4afa9f4f068c2
Sha1:   6822a14e2887007876cea941a24ddc5b09949ea7
Sha256: 411b9b4e5f0853a4beefddfbc341b355539a70ad4de4e054c412cfb630ea8b65
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=445327, public, no-transform, must-revalidate
Last-Modified: Wed, 17 Jan 2018 05:01:53 GMT
Expires: Wed, 24 Jan 2018 05:01:53 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    ecaa3e92a65dc17a8c18eb3cc30e04ce
Sha1:   5766ccbd6a9a98660018eebc34d83428f924b8f1
Sha256: e40ce3bae6ab6a0a6182cb3231cc5d8e39f702e9c72cd0bae9db30bb83a05cd3
                                        
                                            GET /content/dam/sf/newSF/newsf_security.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "280058-f77-5620e31d75528"
Last-Modified: Fri, 05 Jan 2018 21:33:08 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 3959
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   3959
Md5:    3c0648e7013d06490d8d0e74a637666c
Sha1:   acd510cd211264b0f135c64f2b1626cb50dfe591
Sha256: b6ce5cb75e47b44b2a3cfd7ebadd6df8519d8699ced998ca6eda7388236953e8
                                        
                                            GET /content/dam/sf/newSF/newsf_support.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28004c-7fe-5620e11adda7a"
Last-Modified: Fri, 05 Jan 2018 21:24:09 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2046
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:46 GMT
Date: Fri, 19 Jan 2018 01:19:46 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   2046
Md5:    bff34713b9268ce5d2c632820d492f46
Sha1:   58e288479070f11345c1193c7be4801ebd1aac9e
Sha256: a8b711bcba3ca17f32442e88d377da87a305f9b3d5cf1cbdf8875c5db736e995
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:46 GMT
Etag: "5a61168b-1d7"
Expires: Sun, 21 Jan 2018 01:19:46 GMT
Last-Modified: Thu, 18 Jan 2018 21:50:03 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c841019bf9f69edd3ac12bf8f5912037
Sha1:   2d07c0c2971e84a0a95fbf97e4306e7e3a70a069
Sha256: 133491ee38288dd996a4da63390357406654271deda0c556527b07a1f48fae06
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:46 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3ace3f5044dc6140e4ef95a526ed3440
Sha1:   10b1aaceb5b9cd6a099020a8b2e1eaff22acca06
Sha256: 8abc001b331c4e8050f889a68badea0fe082bcb53e1b8bf4421bde76e550088d
                                        
                                            GET /event?a=140522114&d=24703920&y=false&src=js&s175091490=direct&s6781623442=true&s245471469=none&s174979504=ff&s175094193=false&s2069170296=true&tsent=1516324781.149&n=https%3A%2F%2Fwww.sharefile.com%2F&u=oeu1516324780372r0.5836457063699391&wxhr=true&time=1516324781.149&f=8319120065,8513231905,8514252506,8546741223,8607550983,9738173321,8545661644,8573102023,9189590451,6257010330,8561015617,8360262622&g=&cx2=6c3dfad2 HTTP/1.1 
Host: 140522114.log.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Origin: https://www.sharefile.com

                                         
                                         54.243.216.79
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-Requested-With, X-TS-AJAX-Request
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.sharefile.com
Date: Fri, 19 Jan 2018 01:19:46 GMT
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Server: nginx
Set-Cookie: fixed_external_140522114_end_user_id=; Domain=.optimizely.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=-1 end_user_id=oeu1516324780372r0.5836457063699391; Domain=.140522114.log.optimizely.com; expires=Mon, 17 Jan 2028 01:19:46 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /etc/designs/sf/css/static/images/citrix_bk_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28002e-8f0-5620de2f2e9d7"
Last-Modified: Fri, 05 Jan 2018 21:11:05 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2288
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 213 x 92, 8-bit/color RGBA, non-interlaced
Size:   2288
Md5:    15888d7316897f00cc5d64ea782f0def
Sha1:   869c6c62c3d58e7626e20dbedbfbddb59de52a1a
Sha256: c860243446b9353991978b5eb4426de3384175b0885f15f9d2ea91e52ae31586
                                        
                                            GET /etc/designs/sf/css/static/images/logo-black.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "180043-74e-5620deeac1a6c"
Last-Modified: Fri, 05 Jan 2018 21:14:21 GMT
Server: Apache
Web-Mar-Node: blupshf501
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1870
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 215 x 56, 8-bit/color RGBA, non-interlaced
Size:   1870
Md5:    137f453a30a11b4acf8a84745960fa61
Sha1:   29edba75b88f0871f3da4ac36da3c9b2519c84be
Sha256: 6a60ff4a47e51a718310cd070eabc55419b703dd081814567f80eec3579780fd
                                        
                                            GET /ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/activityi;src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;~oref=https%3A%2F%2Fwww.sharefile.com%2F?

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:46 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   337
Md5:    930311a3a34161aeddb033ef3041b8dc
Sha1:   91ea1f96b12d83662bea4eb9921f2e3e5c5339ca
Sha256: 5e9f3c3f9979c00be8a2373346db76016651c464fdca38369f532e7d4dc956a0
                                        
                                            GET /type=core:clientId=22556:coreAssetsVersion=1509024379443/assets//core-modules//shared/js/legacy-resource-selector.js?site=www.sharefile.com HTTP/1.1 
Host: origin-7.extole.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         104.75.76.153
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Content-Encoding: gzip
Last-Modified: Thu, 04 Jan 2018 15:27:20 GMT
Server: Apache-Coyote/1.1
Vary: Accept-Encoding
Content-Length: 483
Expires: Fri, 19 Jan 2018 01:19:47 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 19 Jan 2018 01:19:47 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   483
Md5:    a951f5d2e24adbe9134f62ba98535fa2
Sha1:   636ddd4f3715aceecd77b279961e77888fbc6641
Sha256: 34aa15000726211e2efb124d74f44d6a03448ff10ac222c9abbfab165e7674e6
                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=2108292605 HTTP/1.1 
Host: s.ml-attr.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         68.67.153.60
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.11.10
Date: Fri, 19 Jan 2018 01:19:49 GMT
Content-Length: 162
Connection: keep-alive
Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=2108292605


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    54a37e11c7fc29f705d0731a15daf45e
Sha1:   0f8f853c9e3a2900818e7ffb63decbe4a6296526
Sha256: 2dac60eaff7ba11e6d9c5e9165f76d621f0b61b17b45952f702889dde76f4b38
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:47 GMT
Etag: "5a60c933-1d7"
Expires: Sun, 21 Jan 2018 01:19:47 GMT
Last-Modified: Thu, 18 Jan 2018 16:20:03 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    1e0a461ec3608906f87734c28b721f5c
Sha1:   a72471e103b49b531de675938c11210197499588
Sha256: 898b638a23b2a5a88ec8787079be3b10755b4b9f167c4227b727635c72da176f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:47 GMT
Etag: "5a60f495-1d7"
Expires: Sun, 21 Jan 2018 01:19:47 GMT
Last-Modified: Thu, 18 Jan 2018 19:25:09 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f07ee274f61e7d331eded5750f7017ff
Sha1:   4d43dd33116bcf3a68aaebb7926ff4ea95effb32
Sha256: bf81676e5bd2317bfb7b0f488178c48950e34539afaf43dc64271d3a74b60d67
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1033
Content-Transfer-Encoding: binary
Cache-Control: max-age=438883, public, no-transform, must-revalidate
Last-Modified: Wed, 17 Jan 2018 03:11:43 GMT
Expires: Wed, 24 Jan 2018 03:11:43 GMT
Date: Fri, 19 Jan 2018 01:19:47 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1033
Md5:    8e0613578eaeef5137b6697ef2bc8e53
Sha1:   b0dc9d40cd93346c2190880d15df65db53d2d640
Sha256: e08a2af6964013226afc32415a63883616302f1a237bfe36aff061da898d6ee3
                                        
                                            GET /content/dam/sf/homepage/sf_hp_hero_bg.jpg HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28002d-201ee-5620de2f2e9d7"
Last-Modified: Fri, 05 Jan 2018 21:11:05 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 131566
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   131566
Md5:    cf5460fcbf9c1704d7e839f2ddf57f6b
Sha1:   17ebf7eafda7e840962ffffe606e467cf0379ffc
Sha256: eb19a93e20c6cca014fce8a94404829c017a5fd58e2151a695f07e9dc81d61b2
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         157.240.18.19
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://connect.facebook.net
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: public
Vary: Origin, Accept-Encoding
Access-Control-Allow-Methods: OPTIONS
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-FB-Debug: EdDfQx911gzsqR/ajjnMzCQM/1kIXTUgAY2Y3RqY4thu2VNpKlK11PSNFsU5x25o2DeOmORRk41SIB6IJHMQog==
Date: Fri, 19 Jan 2018 01:19:47 GMT
Connection: keep-alive
Content-Length: 12106


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12106
Md5:    d2cd5798ec8ab762e84b24762848f8f5
Sha1:   645fe933839a4cbd64702442f84772e91db10107
Sha256: 28b5541b58224f2979fef86cb7fcc34103dac0bf7ead606e7d54b87727866712
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:48 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121905, public, no-transform, must-revalidate
Last-Modified: Fri, 19 Jan 2018 00:58:30 GMT
Expires: Sat, 20 Jan 2018 12:58:30 GMT
Etag: "a7bd162daf58ff0ef71e4240edbf104dc05e15d3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    60e149a737b149abbe84e342d0d81038
Sha1:   a7bd162daf58ff0ef71e4240edbf104dc05e15d3
Sha256: 9c32461e7c34624becaa10405e931dc015e3daa01fefc4a95fd4abe61931e8d2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ab7fd2db7ea8ae2f9f09eee5a5eebe6d
Sha1:   018a5a6f75a1b383b60a2e80129e7008903968f1
Sha256: c1cd599877bd192d81d6e44dc889790455de16f986e6e2467d04a3d59b9ed647
                                        
                                            GET /px?id=850058&seg=8621473&redir=https%3A%2F%2Fsecure.adnxs.com%2Fgetuid%3Fhttps%3A%2F%2Fpixel.mediaiqdigital.com%2Fpixel%3Fpixel_id%3D850058%26uid%3D%24UID&t=2&gtmcb=1638491848 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         185.33.223.218
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Fri, 19 Jan 2018 01:19:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: a90d8807-b441-4ae8-b46d-a7b2d47c5fe5
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.81:80


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:48 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=122296, public, no-transform, must-revalidate
Last-Modified: Fri, 19 Jan 2018 01:05:21 GMT
Expires: Sat, 20 Jan 2018 13:05:21 GMT
Etag: "0f87b8d3135b48034c56093e5c2b7feb38dea80b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    1a269642d0efecd16ed7f0fd7f268e5e
Sha1:   0f87b8d3135b48034c56093e5c2b7feb38dea80b
Sha256: 5dafd3af05b9fa6e2e68c9bbf171735dd69f9e36ea909578c1e52fa37242bdae
                                        
                                            GET /ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adservice.google.com/ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    9a65aef3b2094f53214f23b530e41178
Sha1:   86413f44daedea11ce47b8f9492f2d5b2ef229d5
Sha256: 058abf91ef5d3b621b02b967792e9b7c1fb3cf5045cb870a186893a326bdf7fe
                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=2108292605 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         185.33.223.218
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Fri, 19 Jan 2018 01:19:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dsharefile.com%2526pId%253d%2524UID%26gtmcb%3D2108292605
AN-X-Request-Uuid: 3ccc33bb-87a2-48d3-a7a2-124dc0d3d2b2
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Sat, 20-Jan-2018 01:19:50 GMT; Domain=.adnxs.com; HttpOnly uuid2=7130227245876348724; Path=/; Max-Age=7776000; Expires=Thu, 19-Apr-2018 01:19:50 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.21:80


--- Additional Info ---
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1c908b51fc64f073fa6d2f684aeec43f
Sha1:   d0c262efc331fb26bffa04ece080f31162b18f56
Sha256: caafc2d8b3eaba4ff3dbe9af4438570726a1a60cc085a0803a080b1932c8acad
                                        
                                            GET /api/v4/token HTTP/1.1 
Host: sharefile.extole.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/json
Referer: https://www.sharefile.com/
Origin: https://www.sharefile.com

                                         
                                         34.195.242.124
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Fri, 19 Jan 2018 01:19:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authentication,X-Extole-Polling-Time,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: https://www.sharefile.com
Access-Control-Expose-Headers: X-Extole-Token
P3P: CP="Please see our privacy policy"
Set-Cookie: access_token=H19FPLPAPBTQA1R0ORIH6N3AJI;Version=1;Domain=sharefile.extole.com;Path=/;Max-Age=31536000;HttpOnly;Expires=Sat, 19 Jan 2019 01:19:49 GMT xtl_bid=6512565379773160880;Version=1;Domain=sharefile.extole.com;Path=/;Max-Age=31536000;HttpOnly;Expires=Sat, 19 Jan 2019 01:19:49 GMT
Vary: Origin
Expires: Fri, 19 Jan 2018 01:19:48 GMT
Cache-Control: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   161
Md5:    da4ec659a03d0f7b9a41bae57d0f555a
Sha1:   5f16f446f108253ba989936c03cd3705b8c2c3a6
Sha256: 9a8d121731be6766a3ea0e2af8771ff821a23b92535cf4ff7888e7d6c257e3cf
                                        
                                            GET /ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F HTTP/1.1 
Host: 3845646.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adservice.google.com/ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:49 GMT
Expires: Fri, 19 Jan 2018 01:19:49 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlqDYsqdSplLTuA2qLjSsVBXcmve7l81ZeQ8X36oyfF2aI0ACCcrcUO3M2h; expires=Sun, 19-Jan-2020 01:19:49 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   326
Md5:    f99636ac48cf65b12330f3f576d5ad60
Sha1:   eb5790e9ac4f962e6c9835fd11a4d7031da1b1d1
Sha256: 3024abcf23d9141a0dd534caca9de494a813d1e19aaa3c52b9adf85f27ccc23f
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 18 Jan 2018 23:28:22 GMT
Expires: Fri, 19 Jan 2018 01:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Age: 6687
Cache-Control: public, max-age=7200
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /content/dam/sf/newSF/newsf_whatissf.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1516324780372r0.5836457063699391; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%2C%222069170296%22%3A%22true%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324781.149%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%2C%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%26u%3Doeu1516324780372r0.5836457063699391%26wxhr%3Dtrue%26time%3D1516324780.401%26f%3D8319120065%2C8513231905%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "28004b-3d6c-5620e11acec33"
Last-Modified: Fri, 05 Jan 2018 21:24:09 GMT
Server: Apache
Web-Mar-Node: blupshf502
Web-Mar-Region: blu
X-UA-Compatible: IE=EmulateIE8
Content-Length: 15724
Cache-Control: public, max-age=1800
Expires: Fri, 19 Jan 2018 01:49:44 GMT
Date: Fri, 19 Jan 2018 01:19:44 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 302 x 302, 8-bit/color RGBA, non-interlaced
Size:   15724
Md5:    12c5454a29c2134ae131c367bc1cfe2e
Sha1:   20c1da10c2bfc80818a9f15ff3a2a59e7fbf0a92
Sha256: 09972a5d67ebc4679ccaf0a0bdc7b600963861220ce2babf8a44180cdc851b8a
                                        
                                            GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dsharefile.com%2526pId%253d%2524UID%26gtmcb%3D2108292605 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: sess=1; uuid2=7130227245876348724

                                         
                                         185.33.223.218
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Fri, 19 Jan 2018 01:19:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://attr.ml-api.io/?domain=sharefile.com&pId=7130227245876348724&gtmcb=2108292605
AN-X-Request-Uuid: df878ff1-9400-4f1f-95e8-34f6e40edb18
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Sat, 20-Jan-2018 01:19:51 GMT; Domain=.adnxs.com; HttpOnly uuid2=7130227245876348724; Path=/; Max-Age=7776000; Expires=Thu, 19-Apr-2018 01:19:51 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.85:80


--- Additional Info ---
                                        
                                            GET /tracking.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         104.123.129.43
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: Apache
Last-Modified: Thu, 18 Jan 2018 11:04:56 GMT
Etag: "1c0952-38167-5630aef1c8600"
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Cache-Control: public, max-age=35307
Expires: Fri, 19 Jan 2018 11:08:16 GMT
Date: Fri, 19 Jan 2018 01:19:49 GMT
Content-Length: 65980
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   65980
Md5:    0e4737e3728fa2a7f94aafea65bd39f7
Sha1:   e7940849905b8c6b8b8ac75d13363b29aa44635b
Sha256: 751b852020ec250e51ce39a6929821a19e250a314d0ea7ce35589614bbee043e
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.20.34
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:49 GMT
Expires: Fri, 19 Jan 2018 01:19:49 GMT
Cache-Control: private, max-age=3600
Etag: 13921629365068183809
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6097
Md5:    5cee66b0bdf3e67d4754915994ac7938
Sha1:   49b5c9b980deee92afc3dc517d25676044ee1254
Sha256: 33a8a437d76c632afdc63744520d2661090c4dd24237b48bc42069e060094410
                                        
                                            GET /px?id=874010&seg=9031110&t=2&gtmcb=978610630 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         185.33.223.218
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Fri, 19 Jan 2018 01:19:52 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: b0b832a9-79e1-488d-87ac-3e0bef419e02
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.17:80


--- Additional Info ---
                                        
                                            GET /api/v4/me?access_token=H19FPLPAPBTQA1R0ORIH6N3AJI HTTP/1.1 
Host: sharefile.extole.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/json
Referer: https://www.sharefile.com/
Origin: https://www.sharefile.com
Cookie: access_token=H19FPLPAPBTQA1R0ORIH6N3AJI; xtl_bid=6512565379773160880

                                         
                                         34.195.242.124
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Fri, 19 Jan 2018 01:19:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authentication,X-Extole-Polling-Time,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: https://www.sharefile.com
Access-Control-Expose-Headers: X-Extole-Token
P3P: CP="Please see our privacy policy"
Set-Cookie: access_token=H19FPLPAPBTQA1R0ORIH6N3AJI;Version=1;Domain=sharefile.extole.com;Path=/;Max-Age=31536000;HttpOnly;Expires=Sat, 19 Jan 2019 01:19:49 GMT xtl_bid=6512565379773160880;Version=1;Domain=sharefile.extole.com;Path=/;Max-Age=31536000;HttpOnly;Expires=Sat, 19 Jan 2019 01:19:49 GMT
Vary: Origin
Expires: Fri, 19 Jan 2018 01:19:48 GMT
Cache-Control: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   120
Md5:    a10974878a7b6caee90b435f50f9cf49
Sha1:   dfff92973c2139ddcc2b5eb94e1d7afc9ea005ed
Sha256: 17fddbaf3f5852a6d101a96c2f9214ed5bff9657d564f56825f30c61713a8973
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:50 GMT
Server: Apache
Last-Modified: Thu, 18 Jan 2018 15:20:59 GMT
Expires: Thu, 25 Jan 2018 15:20:59 GMT
Etag: C6DCC98A91C6D95DDC7B76F86B6990BE9A52852C
Cache-Control: max-age=568268,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp29
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    ba69c0aa0c2f9f008006ea4778126896
Sha1:   c6dcc98a91c6d95ddc7b76f86b6990be9a52852c
Sha256: c3e11a3407bb96c57b5675c31de3d6a38a432b32e9d894d4d71658d40cad0821
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:50 GMT
Server: Apache
Last-Modified: Thu, 18 Jan 2018 23:56:12 GMT
Expires: Thu, 25 Jan 2018 23:56:12 GMT
Etag: D90778D1F15F83B130CB575E1353E3A4F6C455C2
Cache-Control: max-age=599181,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp29
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    8229573a40937e85c0e568404a414051
Sha1:   d90778d1f15f83b130cb575e1353e3a4f6c455c2
Sha256: 3a94bee0d5cf61cd09fc81bc28a07f89ac8b1f91c7a50afbd9a812cf2e359997
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:50 GMT
Server: Apache
Last-Modified: Thu, 18 Jan 2018 23:56:12 GMT
Expires: Thu, 25 Jan 2018 23:56:12 GMT
Etag: E34E207EAC887E05CCB3DC8BDEFDE38AA3F86FA4
Cache-Control: max-age=599181,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a8ddb208c71fb2572612d833c4b91ff8
Sha1:   e34e207eac887e05ccb3dc8bdefde38aa3f86fa4
Sha256: 0fea39053d5876fd46c1a2f2ee482cc806ff2c1caa262ca7d014cf31cb0651e0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:50 GMT
Etag: "5a612246-1d7"
Expires: Sun, 21 Jan 2018 01:19:50 GMT
Last-Modified: Thu, 18 Jan 2018 22:40:06 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    81b248f0eae181455e13d90966de6641
Sha1:   8a2ebe074e3da6410423d18039420d86f7aedfb5
Sha256: 3f6c85e823a11c19004282f2c1e6880e0285be1f37f75ec0f146039f0ebe86db
                                        
                                            GET /recaptcha/api2/v1515997865826/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 72136
Date: Thu, 18 Jan 2018 19:12:01 GMT
Expires: Fri, 18 Jan 2019 19:12:01 GMT
Last-Modified: Wed, 17 Jan 2018 19:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 22069
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   72136
Md5:    b93c42466496652b15f31a5899de0f4c
Sha1:   72fca788898fcefa1908f2c02d5f28130eba676d
Sha256: 9c69b74ef3e8eda9514e85cd4b84f3eb32371a7601e3b212e0267e7600743b33
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:51 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    184a2802b4e60c8328ee0fa58aaff0d4
Sha1:   38ced121db0a0b58c8d6f80bbdc9048d79ca667e
Sha256: 98452414f3548f5ac316541aa1005dbf39a40f6e77d38c1e89fbf90eef7c0bac
                                        
                                            GET /?domain=sharefile.com&pId=7130227245876348724&gtmcb=2108292605 HTTP/1.1 
Host: attr.ml-api.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         52.85.240.16
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 4
Connection: keep-alive
Date: Fri, 19 Jan 2018 01:19:50 GMT
x-amzn-RequestId: d8b8da43-fcb6-11e7-908b-5b9ef28be50b
X-Amzn-Trace-Id: sampled=0;root=1-5a6147b6-d9a98785a316a6cae569322d
X-Cache: Miss from cloudfront
Via: 1.1 8021f954d329869476f935f2fb14e66e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: YERVDv2a3A3L0rMHYEY90G-jtkjick7XesrJltzUwPiC50iTLFRD2A==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    37a6259cc0c1dae299a7866489dff0bd
Sha1:   2be88ca4242c76e8253ac62474851065032d6833
Sha256: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
                                        
                                            GET /ki.js/52360/bdy.js HTTP/1.1 
Host: s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         52.216.81.163
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: eLComF7kav9MJNPnwdgGn1eRJDSojXqfSytwx8CoJaUIFd3PQEKljqR16EMaFmtlCwOVQrSSBkU=
x-amz-request-id: 08FC3AD9B5E55341
Date: Fri, 19 Jan 2018 01:19:50 GMT
Last-Modified: Tue, 17 Oct 2017 14:45:43 GMT
Etag: "f970fdf8f14c7a5b1e0f49fcf20548bc"
Cache-Control: max-age=3600
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 40714
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Tue Oct 17 16:45:42 2017
Size:   40714
Md5:    f970fdf8f14c7a5b1e0f49fcf20548bc
Sha1:   22e7cd461646579b0fcf3da23c21f7fee2337ddb
Sha256: 92980d403110db475dd3ce0853828be0d395cb53329471b94ac51c9dcaa7ad80
                                        
                                            GET /plugins/ua/linkid.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 856
Date: Fri, 19 Jan 2018 00:27:05 GMT
Expires: Fri, 19 Jan 2018 01:27:05 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 3166
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   856
Md5:    99103567b5f940f76e050fa08e175ab0
Sha1:   5a7462a01efb639b746f31cddd46af6fa8e21567
Sha256: 3fac730f3740ba563c83c99c28f49ebd79e72d180b8bad22f8b546781716f974
                                        
                                            GET /5wDCfOAs.min.js HTTP/1.1 
Host: scripts.demandbase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         52.85.240.89
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 30 Dec 2017 02:50:39 GMT
Last-Modified: Thu, 21 Dec 2017 00:31:15 GMT
Cache-Control: public, max-age=3600
x-amz-version-id: yD5UlLAdOt5U2Mco1ckqekzobEssYz34
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 3327
X-Cache: Hit from cloudfront
Via: 1.1 c908cbeaf223c80632fd467b8ff1278b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 6gzbB2gJLsJed-2DTAaASFRFL-SoNyPRxDUqUUpMkpWcgxvIe4MgOA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13216
Md5:    9cc84745d197c3aac3a6e26ecaf3ee54
Sha1:   3bc0d5a3d86428bbabe162624dff7364288e401d
Sha256: 64ceacdb972c777881c05348030bf7928ec9fa24ac4fde4d8fd3adc3c056e139
                                        
                                            GET /16637/pix.js?t=r&for=Sharefile HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         34.197.99.97
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Date: Fri, 19 Jan 2018 01:19:51 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Location: https://magnetic.t.domdex.com/16637/pix.js?t=r&for=Sharefile&cc=1
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Set-Cookie: cc=1; Domain=.domdex.com; Path=/ PAD=756f1f2fd96b4207be3d7094f84b7044; Domain=.domdex.com; expires=Sat, 19-Jan-2019 01:19:51 GMT; Max-Age=31536000; Path=/
Content-Length: 353
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   353
Md5:    73045eeb1e1059fdb01426ef84337e87
Sha1:   15276dad911d0220f322b5b7db93a0848a9fc719
Sha256: baaaafeec81ec367af54d67abaea596db15dfbfafd04dd0ffef3249aff0c1367
                                        
                                            GET /pagead/viewthroughconversion/1068539930/?random=1516324790303&cv=8&fst=1516324790303&num=1&fmt=3&guid=ON&eid=659238991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=Gc5&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: IDE=AHWqTUlqDYsqdSplLTuA2qLjSsVBXcmve7l81ZeQ8X36oyfF2aI0ACCcrcUO3M2h

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1068539930/?random=1516324790303&cv=8&fst=1516323600000&num=1&fmt=3&guid=ON&eid=659238991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=893317717
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /webevents/visitWebPage?_mchNc=1516324786128&_mchCn=&_mchId=027-LMP-993&_mchTk=_mch-sharefile.com-1516324786127-50317&_mchHo=www.sharefile.com&_mchPo=&_mchRu=%2F&_mchPc=https%3A&_mchVr=151&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 
Host: 027-lmp-993.mktoresp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Origin: https://www.sharefile.com

                                         
                                         199.15.215.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 19 Jan 2018 01:19:51 GMT
Server: Apache
Content-Length: 43
Access-Control-Allow-Origin: *
Last-Modified: Thu, 18 Jan 2018 19:19:51 -0600
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Set-Cookie: BIGipServersjpweb-mch_https=!iPz98ocbuN2G8/hj9B1ErAeILedSLIfnJmvgkLMt1JxhsULFh+KmrPREPNtuuZWQiLjYhkUDUyf6qc0=; path=/; Httponly; Secure


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    7e1a751d6f8efada000e3df3aac35514
Sha1:   4c73d56e1221bcee6aca2e954b71b9d6216de36e
Sha256: cbbd42bb1d88693e6805bd9d676840424af5ecf3e13d874fd06e6b57d53d8d40
                                        
                                            GET /collect?v=1&_v=j66&a=1169897746&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sharefile.com%2F&ul=en-us&de=UTF-8&dt=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=aGBAgEQi~&jid=353165744&gjid=1703788576&cid=814229086.1516324790&uid=1517610913987kkiHJxX&tid=UA-142592-2&_gid=996887756.1516324790&z=1836731481 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 18 Jan 2018 15:20:03 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 35988
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1515997865826&theme=light&size=normal&cb=a9tcyquz5m7k HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.147
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 19 Jan 2018 01:19:51 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   9535
Md5:    a58ee42b86534555e009ed4cc1b73d70
Sha1:   d1c78f47417480d460262d84f5cf936d44529be6
Sha256: c43e2d312ee6b87120c4964274a47ee01b4408a9ee8f47cc9307591cd98e7a3f
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j66&tid=UA-142592-2&cid=814229086.1516324790&jid=353165744&uid=1517610913987kkiHJxX&gjid=1703788576&_gid=996887756.1516324790&_u=aGBAgEQi~&z=695137619 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/
Cookie: IDE=AHWqTUlqDYsqdSplLTuA2qLjSsVBXcmve7l81ZeQ8X36oyfF2aI0ACCcrcUO3M2h

                                         
                                         173.194.221.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=814229086.1516324790&jid=353165744&_v=j66&z=695137619
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Fri, 19 Jan 2018 01:19:51 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 362
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   362
Md5:    014154b7545c1848a6b8816572a2a501
Sha1:   ee27a2bcc21b2b08661ee7f6cc617bac816b022c
Sha256: c1d23ce81b584fc21080296636a5caa4df5b518de5dc090f5f5741d7d6f36860
                                        
                                            GET /recaptcha/api2/v1515997865826/styles__ltr.css HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1515997865826&theme=light&size=normal&cb=a9tcyquz5m7k

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 90709
Date: Thu, 18 Jan 2018 19:03:44 GMT
Expires: Fri, 18 Jan 2019 19:03:44 GMT
Last-Modified: Wed, 17 Jan 2018 19:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 22567
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   90709
Md5:    914854346a895867b24c9c07317b5afc
Sha1:   2337b08a0f45f64d542aee2846aa6376f56753aa
Sha256: 758d4ff3005cb5837802b06b502f51f8aabe26c143c8ea17aef958c5dc441cce
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=814229086.1516324790&jid=353165744&_v=j66&z=695137619 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.147
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=814229086.1516324790&jid=353165744&_v=j66&z=695137619&slf_rd=1&random=3369561708
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.ssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:52 GMT
Server: Apache
Last-Modified: Tue, 16 Jan 2018 03:31:40 GMT
Expires: Tue, 23 Jan 2018 03:31:40 GMT
Etag: FD748F7FF846B4218999486FC3009A0F85842907
Cache-Control: max-age=352907,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    6ad10f6fee9dd39ccafee3078df68817
Sha1:   fd748f7ff846b4218999486fc3009a0f85842907
Sha256: de49d7c3c38acbf4345c1b2c7a357754ffcb53d30874c9f28b631464761eafef
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:52 GMT
Server: Apache
Last-Modified: Mon, 15 Jan 2018 11:56:12 GMT
Expires: Mon, 22 Jan 2018 11:56:12 GMT
Etag: F92D768B72E7B50C3AC28187E8F296D3FAA4B3E3
Cache-Control: max-age=296779,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    72e8f34b68835ead986e957ccab34af2
Sha1:   f92d768b72e7b50c3ac28187e8f296d3faa4b3e3
Sha256: 4e3c743d10eab319f813e276382004df97c46aacee122139266b25ad4aa5ae51
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:52 GMT
Server: Apache
Last-Modified: Mon, 15 Jan 2018 10:44:51 GMT
Expires: Mon, 22 Jan 2018 10:44:51 GMT
Etag: 2BA76BD4C96FDAACA1401EFC0D502C8671712228
Cache-Control: max-age=292498,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp29
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3c84e57ff5515c0494ce9a8f45fe071d
Sha1:   2ba76bd4c96fdaaca1401efc0d502c8671712228
Sha256: d47398706805135709cf5aeb182b521d6a9e8c1b6ac041decf70c89b5cbfacc7
                                        
                                            GET /recaptcha/api2/logo_48.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/api2/v1515997865826/styles__ltr.css

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 2228
Date: Thu, 18 Jan 2018 15:20:11 GMT
Expires: Thu, 25 Jan 2018 15:20:11 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 35981
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   2228
Md5:    ef9941290c50cd3866e2ba6b793f010d
Sha1:   4736508c795667dcea21f8d864233031223b7832
Sha256: 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
                                        
                                            GET /ads/user-lists/1068539930/?random=1516324790303&cv=8&fst=1516323600000&num=1&fmt=3&guid=ON&eid=659238991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=893317717&ipr=y&ulfeg=n HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.94
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 19 Jan 2018 01:19:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /recaptcha/api2/bframe?hl=en&v=v1515997865826&k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&cb=sbpek5sggevr HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.147
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 19 Jan 2018 01:19:52 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   690
Md5:    8a368f45e417892103443e6a9ba1cf90
Sha1:   85e2acb9f92c712c886c0d024c7496b6d3e6a8c7
Sha256: ab7122e34936454f8963f55002506c1b70d9be9f95c31b59937ed15c5b06aa26
                                        
                                            GET /recaptcha/api2/webworker.js?hl=en&v=v1515997865826 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         64.233.161.147
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Fri, 19 Jan 2018 01:19:52 GMT
Date: Fri, 19 Jan 2018 01:19:52 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   98
Md5:    6d0c5caf8d6165048fdbc954a66dc2d9
Sha1:   afc96b416e82fda8a84ba0bb5926489aa8d22af3
Sha256: a716a3906556dd1b9538dee1e1184e5fe1497909203c193597924dd0caf5bcec
                                        
                                            GET /js/bg/y0E5ZpI4RlTVeFhqe7zquneglYetKa5ds-pXKiHXTkI.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1515997865826&theme=light&size=normal&cb=a9tcyquz5m7k

                                         
                                         64.233.161.147
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4997
Date: Wed, 17 Jan 2018 23:48:18 GMT
Expires: Thu, 17 Jan 2019 23:48:18 GMT
Last-Modified: Mon, 15 Jan 2018 16:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 91894
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4997
Md5:    cccb382c3591e209dcd23e6ca8b2d44c
Sha1:   5afbba297a1d626c1e2716bbc95c5f6d1e8ada13
Sha256: 5e8d79909d8ded23f2c2f5a2c32bec3fef2fa27e24b1731f981f53650dca2fad
                                        
                                            GET /s/roboto/v18/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1515997865826&theme=light&size=normal&cb=a9tcyquz5m7k
Origin: https://www.google.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19824
Date: Wed, 17 Jan 2018 10:26:53 GMT
Expires: Thu, 17 Jan 2019 10:26:53 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 139979
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            GET /16637/pix.js?t=r&for=Sharefile&cc=1 HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: cc=1; PAD=756f1f2fd96b4207be3d7094f84b7044

                                         
                                         34.197.99.97
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Content-Encoding: gzip
Date: Fri, 19 Jan 2018 01:19:52 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Set-Cookie: PIXELtbbtyr=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELnccarkhf=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELehovpba=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELthzthz=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELgncnq=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELpbagrkgjro=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELpnfnyr=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/ PIXELrkryngr=1; Domain=.domdex.com; expires=Fri, 26-Jan-2018 01:19:52 GMT; Max-Age=604800; Path=/
Content-Length: 777
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   777
Md5:    4a7729fe3103f7e7acaf8a07488dbdd9
Sha1:   1f4497978743a2d99c2f375a3efdda0bd8caaae3
Sha256: ac53d03c51e5f917c38fd672add51f06982f0eca4d8780079515a58bd2a50007
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=563699, public, no-transform, must-revalidate
Last-Modified: Thu, 18 Jan 2018 13:52:05 GMT
Expires: Thu, 25 Jan 2018 13:52:05 GMT
Date: Fri, 19 Jan 2018 01:19:53 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    d74fcb574439ad29b7c657c0a751276c
Sha1:   08224acaac6c8df05a179fa299089dbeb71c2390
Sha256: 843a41430a43360009f94a6c173af5f3451a2aba9c070d260270454050779d46
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=814229086.1516324790&jid=353165744&_v=j66&z=695137619&slf_rd=1&random=3369561708 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.94
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 19 Jan 2018 01:19:53 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            OPTIONS /api/v3/projects/141580/notices?key=9a0a3519e930259f5886a7af53b0ccaa HTTP/1.1 
Host: airbrake.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://www.sharefile.com
Access-Control-Request-Method: POST

                                         
                                         52.200.106.146
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Headers: Accept,Origin,Content-Type,X-Requested-With
Access-Control-Allow-Methods: OPTIONS,GET,PUT,POST
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-RateLimit-Delay
Date: Fri, 19 Jan 2018 01:19:53 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pxj?bidder=143&seg=530156&action=setuid(%22756f1f2fd96b4207be3d7094f84b7044%22) HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: sess=1; uuid2=7130227245876348724

                                         
                                         185.33.223.218
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Fri, 19 Jan 2018 01:19:55 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: b0ca1322-6ffa-479c-9cb6-f9a63e17f566
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 313.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.198:80


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:53 GMT
Etag: "5a60ff1a-1d7"
Expires: Sun, 21 Jan 2018 01:19:53 GMT
Last-Modified: Thu, 18 Jan 2018 20:10:02 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7be27ac222fb3ab18350dddd9a8daa3d
Sha1:   9a51d1b5c19c3583b802c071a7823faafc1b1a26
Sha256: a986420ecbebac21811938f995eeeab03ddc99e5e027cf27a5da02e6f65aa2ce
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:53 GMT
Etag: "5a60f36c-1d7"
Expires: Sun, 21 Jan 2018 01:19:53 GMT
Last-Modified: Thu, 18 Jan 2018 19:20:12 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c53042e97a6ce409feeda45eace2cf0e
Sha1:   341df7b9d9aa2a08785a9a1314f4626968255d0f
Sha256: 833d856fe7c4fac92d22f2b231bde93c4e6bf06b882b0293409fb04a5ea378a8
                                        
                                            GET /rum?cm_dsp_id=48&external_user_id=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         104.123.132.211
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=48&external_user_id=756f1f2fd96b4207be3d7094f84b7044&C=1
Content-Length: 295
Expires: Fri, 19 Jan 2018 01:19:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 19 Jan 2018 01:19:53 GMT
Connection: keep-alive
Set-Cookie: CMID=WmFHublQJuQAAHa.WG4AAAAU;domain=casalemedia.com;path=/;expires=Sat, 19 Jan 2019 01:19:53 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Thu, 19 Apr 2018 01:19:53 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   295
Md5:    5d146f473ff9052578dcef34086ffe64
Sha1:   5838b9412832ed02355b3b48f93696fc93c623d0
Sha256: f8a82ca2f4b143ffa0bf337d40d9683f9f0e4043aa2fbdb01835cfcb4da56e8e
                                        
                                            GET /pixel?google_nid=magnetic&google_cm&google_sc&google_hm=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: IDE=AHWqTUlqDYsqdSplLTuA2qLjSsVBXcmve7l81ZeQ8X36oyfF2aI0ACCcrcUO3M2h

                                         
                                         172.217.20.34
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://magnetic.t.domdex.com/return/google?google_gid=CAESEGThZ4BzOvB2rLnw79wutHY&google_cver=1
Date: Fri, 19 Jan 2018 01:19:53 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 297
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   297
Md5:    afce78807cad37547bc4181bd9261715
Sha1:   8d91c3c2193c7ac778b56c796abc7b3134ba741f
Sha256: 805534e4b5063ed5a008f88c5404d8050eb5be4583f6e54da988fdcb02bc0cf4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:53 GMT
Etag: "5a60fb9a-1d7"
Expires: Sun, 21 Jan 2018 01:19:53 GMT
Last-Modified: Thu, 18 Jan 2018 19:55:06 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8770c73315b2d91e755fd1f5d17020ca
Sha1:   bc191a68b39c5964a8550eae7e80fb03ea92820c
Sha256: ee887b741a9b5cef2e686b331ca538b01b11fe1d874b2fbe78995d2266f5c7bc
                                        
                                            POST /api/v3/projects/141580/notices?key=9a0a3519e930259f5886a7af53b0ccaa HTTP/1.1 
Host: airbrake.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/json; charset=UTF-8
Referer: https://www.sharefile.com/
Content-Length: 1662
Origin: https://www.sharefile.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         52.200.106.146
HTTP/1.1 201 Created
Content-Type: application/json
                                        
Access-Control-Allow-Headers: Accept,Origin,Content-Type,X-Requested-With
Access-Control-Allow-Methods: OPTIONS,GET,PUT,POST
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-RateLimit-Delay
Content-Encoding: gzip
Date: Fri, 19 Jan 2018 01:19:53 GMT
X-Ratelimit-Delay: 7
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9998
Content-Length: 100
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   100
Md5:    22529186056156131bdaab3a1a17d300
Sha1:   41d66f2154cadbdb1ad555e0c4c180309a837c6a
Sha256: 6c5937c250f49e6bca62cae8d7760901a7cced4729f2ca1a8e24309f74bbb026
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1035
Content-Transfer-Encoding: binary
Cache-Control: max-age=524996, public, no-transform, must-revalidate
Last-Modified: Thu, 18 Jan 2018 03:07:01 GMT
Expires: Thu, 25 Jan 2018 03:07:01 GMT
Date: Fri, 19 Jan 2018 01:19:53 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1035
Md5:    24bb79e193fc39ff15c6343b89a0bac8
Sha1:   7a1e6641544a38b5d3bd138c99ac7761d9b6aeb3
Sha256: 0ecb3c5ac7a0bdd410fa2c997def9640862b92b56771ad451a32b2aee97e0f2e
                                        
                                            GET /tap.php?v=14256&nid=2682&expires=30&put=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=14256&nid=2682&expires=30&put=756f1f2fd96b4207be3d7094f84b7044
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Fri, 19 Jan 2018 01:19:53 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /rum?cm_dsp_id=48&external_user_id=756f1f2fd96b4207be3d7094f84b7044&C=1 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: CMID=WmFHublQJuQAAHa.WG4AAAAU; CMPS=3259

                                         
                                         104.123.132.211
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Expires: Fri, 19 Jan 2018 01:19:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 19 Jan 2018 01:19:53 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=WmFHublQJuQAAHa.WG4AAAAU;domain=casalemedia.com;path=/;expires=Sat, 19 Jan 2019 01:19:53 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Thu, 19 Apr 2018 01:19:53 GMT CMPRO=1219;domain=casalemedia.com;path=/;expires=Thu, 19 Apr 2018 01:19:53 GMT CMST=WmFHuVphR7kA;domain=casalemedia.com;path=/;expires=Sat, 20 Jan 2018 01:19:53 GMT CMDD=;domain=casalemedia.com;path=/;expires=Sat, 20 Jan 2018 01:19:53 GMT CMRUM3=305a6147b92760756f1f2fd96b4207be3d7094f84b7044;domain=casalemedia.com;path=/;expires=Sat, 19 Jan 2019 01:19:53 GMT CMSC=WmFHuQ**;domain=casalemedia.com;path=/;


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         52.85.243.200
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 19 Jan 2018 01:19:53 GMT
Etag: "5a611ebe-1d7"
Expires: Sun, 21 Jan 2018 01:19:53 GMT
Last-Modified: Thu, 18 Jan 2018 22:25:02 GMT
Server: ECS (lga/1384)
X-Cache: Miss from cloudfront
Via: 1.1 cbd18b02b7c6aaf27ea81991ef8e7128.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 8NNUqljadnjGiVmpFPFGhAA3eBT0SMx1xFGnFQq9ETFxmouPRZfRjA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b01fb0e917b26853c6782ba912aefe4a
Sha1:   2ad733eaaa0be96c281b06b1245ce08e2c576b15
Sha256: 26e3eea28b56275a0e673c6baf44b034b19d63b2e9721f6f9877a8f8c10572ad
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         52.85.243.143
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Fri, 19 Jan 2018 01:19:53 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.1/2016-04-26)
X-Cache: Miss from cloudfront
Via: 1.1 e31ab4c27d99cec62ef37e2607db9b45.cloudfront.net (CloudFront)
X-Amz-Cf-Id: PbjAxj_uYyhzQUh8IiqwVor4tPCXBQrbhDPcgtHTQ5CYTzCNTlPDEQ==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    a2492b37d98d4656d3c4f1c821c9de11
Sha1:   c5bdc893796969adac23b00bba947538fc89c658
Sha256: 2b52c18d8474f52ba66974ca16baba8f44ba724e9e432ea033354d521f92223a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Jan 2018 01:19:54 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121488, public, no-transform, must-revalidate
Last-Modified: Fri, 19 Jan 2018 00:51:17 GMT
Expires: Sat, 20 Jan 2018 12:51:17 GMT
Etag: "3ae208904f1d546143faf6f5a2be409dce8dcad9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    2fd781b7b8b42c12ffe6e7ffbc5ac175
Sha1:   3ae208904f1d546143faf6f5a2be409dce8dcad9
Sha256: b973e550ef969cd81c6ba101567d8a3aab42eea7d9886c6428ce705da633eb6b
                                        
                                            GET /bh/rtset?do=add&pid=548607&ev=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: bh.contextweb.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         151.101.36.166
HTTP/1.1 200 OK
Content-Type: image/gif;charset=iso-8859-1
                                        
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Set-Cookie: V=HAZravbPbhbk;Path=/;Domain=.contextweb.com;Expires=Mon, 14-Jan-2019 01:19:53 GMT;Max-Age=31104000 pb_rtb_ev=3-kmk|4Ec.0.756f1f2fd96b4207be3d7094f84b7044;Path=/;Domain=.contextweb.com;Expires=Sat, 19-Jan-2019 01:19:53 GMT;Max-Age=31536000 sto-id-20480-bh=DIANNMAKJDBP; Domain=contextweb.com; Expires=Fri, 19-Jan-2018 01:34:53 GMT; Path=/
Expires: -1
CW-Server: ams-bh01
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Server: Jetty(9.4.6.v20170531)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Fri, 19 Jan 2018 01:19:53 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-ams4143-AMS
X-Cache: MISS
X-Cache-Hits: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    889bc1fffc025af4685839fb516a0b8b
Sha1:   7f105137a4eafe93213ecd8cc34dd907c340467c
Sha256: d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
                                        
                                            GET /tap.php?cookie_redirect=1&v=14256&nid=2682&expires=30&put=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: c=1

                                         
                                         213.19.162.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: NLdOxl8o66jT5BPT7vz1iA
Set-Cookie: rpb=14256%3D1; Domain=.rubiconproject.com; Expires=Sun, 18-Feb-2018 01:19:53 GMT; Path=/ put_2682=756f1f2fd96b4207be3d7094f84b7044; Domain=.rubiconproject.com; Expires=Sun, 18-Feb-2018 01:19:53 GMT; Path=/ rpx=14256%3D70553%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Sun, 18-Feb-2018 01:19:53 GMT; Path=/ khaos=JCL8MQOF-G-1G05; Domain=.rubiconproject.com; Expires=Fri, 20-Jul-2018 13:19:53 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Fri, 19 Jan 2018 01:19:53 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /tapestry/1?ta_partner_id=1032&ta_partner_did=756f1f2fd96b4207be3d7094f84b7044&ta_format=png HTTP/1.1 
Host: tapestry.tapad.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         185.57.60.185
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.11.3
Date: Fri, 19 Jan 2018 01:19:54 GMT
Content-Length: 95
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 1 x 1, 1-bit colormap, non-interlaced
Size:   95
Md5:    71a50dbba44c78128b221b7df7bb51f1
Sha1:   0ec63b140374ba704a58fa0c743cb357683313dd
Sha256: 3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
                                        
                                            GET /usersync?b=mag&i=756f1f2fd96b4207be3d7094f84b7044 HTTP/1.1 
Host: rtb.gumgum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         52.16.217.16
HTTP/1.1 200 OK
Content-Type: image/gif;charset=UTF-8
                                        
Date: Fri, 19 Jan 2018 01:19:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
P3P: CP="This is not a P3P policy"
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    cb4a250eaa01b7a9c7ba08ff8f03cdc8
Sha1:   b6ea87c61df363b0e9dffd790563bb07e7d14bf0
Sha256: ad1eaeafde714b48cb15678bf92e82cdcb0ba1ca559b69e376639dfbe916fd2e
                                        
                                            GET /load/?p=204&g=1103&buid=756f1f2fd96b4207be3d7094f84b7044&j=0 HTTP/1.1 
Host: loadm.exelator.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         216.52.1.12
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Fri, 19 Jan 2018 01:19:54 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache
X-Powered-By: Undertow/1
P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
Location: https://load77.exelator.com/pixel.gif
Access-Control-Allow-Credentials: true


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "F504648A7CA33FE9356B58B4DC95732E6F86B3AF596B5733CCF1780913B698F9"
Last-Modified: Tue, 16 Jan 2018 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10542
Expires: Fri, 19 Jan 2018 04:15:36 GMT
Date: Fri, 19 Jan 2018 01:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    6770850087b2913658714c6e1ed9b5d6
Sha1:   d64d1c5659d2cf15292382d8bedb81ad02a5d948
Sha256: f504648a7ca33fe9356b58b4dc95732e6f86b3af596b5733ccf1780913b698f9
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         195.159.219.8
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 17 Jan 2018 22:24:55 GMT
Etag: "f9415eb7bdb2f37ff3ac2ff024a3e6af6b0ad8ae"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=20500
Expires: Fri, 19 Jan 2018 07:01:34 GMT
Date: Fri, 19 Jan 2018 01:19:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    d519997b7e74306094f90b264fdc3a24
Sha1:   f9415eb7bdb2f37ff3ac2ff024a3e6af6b0ad8ae
Sha256: b804ae2d7539260115f3c929bde09baf00d3d28784951209fd6ea121b9704a91
                                        
                                            GET /pixel.gif HTTP/1.1 
Host: load77.exelator.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F

                                         
                                         185.76.9.19
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 19 Jan 2018 01:19:54 GMT
Content-Length: 43
Connection: keep-alive
Last-Modified: Wed, 25 Oct 2017 17:03:56 GMT
Etag: "59f0c3fc-2b"
Access-Control-Allow-Origin: *
Server: CDN77-Turbo
X-Edge-IP: 185.76.9.10
X-Edge-Location: stockholmSE
X-Cache: HIT
X-Age: 550678
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /return/google?google_gid=CAESEGThZ4BzOvB2rLnw79wutHY&google_cver=1 HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=9702073526856;gtm=Gc5;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F
Cookie: cc=1; PAD=756f1f2fd96b4207be3d7094f84b7044; PIXELtbbtyr=1; PIXELnccarkhf=1; PIXELehovpba=1; PIXELthzthz=1; PIXELgncnq=1; PIXELpbagrkgjro=1; PIXELpnfnyr=1; PIXELrkryngr=1

                                         
                                         34.197.99.97
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Date: Fri, 19 Jan 2018 01:19:54 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    4bd992dae2dbbe35b4ec51458103f729
Sha1:   64cd0b1d593d4ca9745db50a88d1047a7c8cd154
Sha256: db5d64a9ea32ed3abb874f295003ef2465cecc2f669efe951930e182c34a5013
                                        
                                            GET /ads/user-lists/1068539930/?random=1516324790303&cv=8&fst=1516323600000&num=1&fmt=3&guid=ON&eid=659238991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=893317717 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/

                                         
                                         64.233.161.147
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.no/ads/user-lists/1068539930/?random=1516324790303&cv=8&fst=1516323600000&num=1&fmt=3&guid=ON&eid=659238991&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=893317717&ipr=y&ulfeg=n
Cache-Control: private, max-age=43200
Date: Fri, 19 Jan 2018 01:19:51 GMT
Expires: Fri, 19 Jan 2018 01:19:51 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 695
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---