Overview

URL www.sharefile.com/?src=emailfooter
IP104.123.137.58
ASNAS35994 Akamai Technologies, Inc.
Location United States
Report completed2018-02-15 09:57:05 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.123.137.58

Date UQ / IDS / BL URL IP
2019-05-16 08:29:30 +0200
0 - 0 - 0 https://www.nitto.com 104.123.137.58
2018-07-11 01:01:51 +0200
0 - 0 - 0 https://www.sharefile.com 104.123.137.58
2018-06-14 00:10:55 +0200
0 - 0 - 0 www.sharefile.com 104.123.137.58
2018-06-05 11:09:55 +0200
0 - 0 - 0 www.sharefile.com/?src=system-email-outlookpl (...) 104.123.137.58
2018-05-09 11:18:59 +0200
0 - 0 - 0 www.sharefile.com/?src=emailfooter 104.123.137.58
2018-05-08 01:53:27 +0200
0 - 0 - 0 www.citrix.com 104.123.137.58
2018-04-13 10:54:29 +0200
0 - 0 - 0 https://www.citrix.com/ 104.123.137.58
2018-04-07 00:13:49 +0200
0 - 0 - 0 https://www.sharefile.com/ 104.123.137.58
2018-01-31 00:01:13 +0100
0 - 0 - 0 https://www.sharefile.com 104.123.137.58
2018-01-19 02:13:39 +0100
0 - 0 - 0 www.sharefile.com 104.123.137.58

Last 10 reports on ASN: AS35994 Akamai Technologies, Inc.

Date UQ / IDS / BL URL IP
2019-06-18 11:56:24 +0200
0 - 0 - 0 https://queuedecheval.us7.list-manage.com/track/ 104.123.129.10
2019-06-18 11:34:28 +0200
0 - 0 - 0 https://www.pinterest.com/pin/824299538028444988 104.123.116.35
2019-06-18 11:19:48 +0200
0 - 0 - 0 https://www.pinterest.com/pin/824299538028444821 104.123.116.35
2019-06-18 07:50:21 +0200
0 - 0 - 0 https://go.microsoft.com/fwlink/p/?LinkID=838419 104.123.123.147
2019-06-18 05:38:29 +0200
0 - 0 - 0 www.nike.com 104.123.118.158
2019-06-18 05:37:19 +0200
0 - 0 - 0 Www.nike.com 104.123.118.158
2019-06-18 05:22:10 +0200
0 - 0 - 0 www.keyence.com 104.123.127.73
2019-06-17 22:44:12 +0200
0 - 0 - 0 software.cisco.com 104.123.116.198
2019-06-17 20:50:07 +0200
0 - 0 - 0 www.myworkdaycdn.com 104.123.116.246
2019-06-17 20:40:55 +0200
0 - 0 - 0 https://download.cnet.com/Calibre/3000-20412_ (...) 104.102.50.44

No other reports on domain: sharefile.com



JavaScript

Executed Scripts (37)


Executed Evals (84)

#1 JavaScript::Eval (size: 328, repeated: 1) - SHA256: 9e4299fc2ad722f42c3cb5c6bee0e819a7a65b679593e5d5f2a82f5c19485bae

                                        (function() {
    function d(a) {
        a = a.src || "";
        if (-1 < a.indexOf("youtube.com/embed/") || -1 < a.indexOf("youtube.com/v/")) return !0
    }
    var b = document.getElementsByTagName("iframe"),
        e = document.getElementsByTagName("embed"),
        a;
    for (a = b.length - 1; - 1 < a; a--) {
        var c = b[a];
        if (c = d(c)) return !0
    }
    for (a = e.length - 1; - 1 < a; a--)
        if (b = e[a], c = d(b)) return !0;
    return !1
})();
                                    

#2 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 1b6f6190e54f74b95ca04bf56654aca119351f00f3166ae1494a5cef19b06888

                                        0,
function(T) {
    D(T, 1);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 1333c6362751e5f532c8506abf2a76f9143179e355389625c893e697a1572693

                                        0,
function(T) {
    D(T, 2);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 750d69834cd9a60c29a51fde37d6db5a6d96b5a48c3e1205eea1d9da908ae8d8

                                        0,
function(T) {
    D(T, 4);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 9c3cb97555855abaef95f33ad276d46675f4decbfa5301dbaec80f303469609c

                                        0,
function(T) {
    T.R(0);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 548bdee49b352743a9ed03dbd801871f93d555862d5d870930a552a298ebc1a3

                                        0,
function(T) {
    T.R(3);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 6d9fb1552eced1953832dd5f235c1468a77f6b3493ce6e29d580b271d08f5d61

                                        0,
function(T) {
    T.R(4);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 1) - SHA256: ff3ae8cb9865e836546d954c8d1c2706e1664348b1e6c23c0a20f3be9b7093cd

                                        0,
function(T) {
    T.R(7);
}
                                    

#10 JavaScript::Eval (size: 38, repeated: 1) - SHA256: c3498abde1378d7570f7792096d8853c5cb9a2eec1df26305aaa4764b408b6a5

                                        0,
function(T) {
    T.U && q(T, 0);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 7bb9b36d8cb854c8b0bcbe7016223e922b01750a98a6cf1af6dd603d7efd2197

                                        0,
function(T) {
    p(T, 1);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 84ebefb6ef6642647a004a66d998edbdbdfea4ae37342cf1e59473ee0a0472a4

                                        0,
function(T) {
    p(T, 2);
}
                                    

#13 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 90c1882821423b6d8fed4fa7ac80a595dbbffb9bd1edd6a58851950bbcf61b4c

                                        0,
function(T) {
    p(T, 4);
}
                                    

#14 JavaScript::Eval (size: 95, repeated: 1) - SHA256: 5f9570578a1f647baaf353666895d47c461a390172e97d184ebdccfddcc05aa4

                                        0,
function(T, u) {
    (u = T.H(), T = T.g(u), T[0]).removeEventListener(T[1], T[2], false);
}
                                    

#15 JavaScript::Eval (size: 52, repeated: 1) - SHA256: 436190ce2022ca8af25a0671827a4daceae812a3d58aaa4541e46fa038115523

                                        0,
function(T, u) {
    (u = T.g(T.H()), n)(T, u);
}
                                    

#16 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 784cc70f3274ca6f25e94866983188b9b996a1762ce5d3872d9af03b7e587ce7

                                        0,
function(T, u) {
    a(T, 1, 5) || (u = G(T), W(T, u.c, u.a.apply(u.T, u.O)));
}
                                    

#17 JavaScript::Eval (size: 514, repeated: 1) - SHA256: 2947212477d0c4d6be4439d3d39dd59ca5af3d89302ebc278532282872b6f671

                                        0,
function(T, u) {
    if (this.L) {
        return T = T ? this.L().shift() : this.f().shift(), this.L().length ||
            this.f().length || (this.f = this.L = void 0, this.l--), T;
    }
    if (!((T = this.g(99), T) in this.G)) {
        throw A(this, 31), this.v;
    }
    return ((void 0 == this.M && (this.M = e(this.G, T - 4), this.B = void 0), this.B) != T >> 3 &&
        (this.B = T >> 3, u = [0, 0, 0, this.g(29)], this.j = J(this.M, this.B, u)), W(this, 99, T + 1), this.G)[T] ^ this.j[T % 8];
}
                                    

#18 JavaScript::Eval (size: 125, repeated: 1) - SHA256: 320922eb0385229b36294978106e519d17c98717b30ca7a8b4c66c6f84f184b7

                                        0,
function(T, u) {
    if (void 0 === (u = this.Y[T], u)) {
        throw A(this, 30, 0, T), this.v;
    }
    return u();
}
                                    

#19 JavaScript::Eval (size: 183, repeated: 1) - SHA256: 2b6ae9f522a841a8e5cc019febafb4c2855818b28f89eab09af1b1afb178c9b5

                                        0,
function(T, u) {
    u.push(T[0] << 24 | T[1] << 16 | T[2] << 8 | T[3]), u.push(T[4] << 24 | T[5] << 16 | T[6] << 8 | T[7]), u.push(T[8] << 24 | T[9] << 16 | T[10] << 8 | T[11]);
}
                                    

#20 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 45fdb9d16a36912637cd634517412094554bfbd91a5530791de8ac290a937cca

                                        0,
function(T, u, z) {
    (z = (u = T.H(), T).H(), u = T.g(u), W)(T, z, B(u));
}
                                    

#21 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 2912f239cbef7f0e9229b68247ca2bbc54118ac549d8714c6f0820e04846a4d2

                                        0,
function(T, u, z) {
    0 != (u = T.H(), z = T.H(), T).g(u) && W(T, 99, T.g(z));
}
                                    

#22 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 2f561187ba6091eec5fe2e935e7037704b47ba5b261fda2f6ac348a446ab84bd

                                        0,
function(T, u, z) {
    a(T, 1, 5) ||
        (u = T.H(), z = T.H(), W(T, z, function(T) {
            return eval(T);
        }(T.g(u))));
}
                                    

#23 JavaScript::Eval (size: 244, repeated: 1) - SHA256: ec851c4ebe579df9077f07fdc4f4bff57b70e749cda70578f66ff2f8140c6a76

                                        0,
function(T, u, z) {
    if (3 == T.length) {
        for (z = 0; 3 > z; z++) {
            u[z] += T[z];
        }
        for (T = [13, 8, 13, 12, (z = 0, 16), 5, 3, 10, 15]; 9 > z; z++) {
            u[3](u, z % 3, T[z]);
        }
    }
}
                                    

#24 JavaScript::Eval (size: 135, repeated: 1) - SHA256: f429ca98d773595ad5304b686c4d3329b607955d827a306aa36aff6506766411

                                        0,
function(T, u, z) {
    return u = (z = function() {
        return T;
    }, function() {
        return z();
    }), u[this.b] = function(R) {
        T = R;
    }, u;
}
                                    

#25 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 062d9452fb93cbdee3500315c337bb4d6badca50f366da21f5f56e8a80fc31b0

                                        0,
function(T, u, z) {
    u = (z = (u = T.H(), T.H()), T.Y[u]) && T.g(u), W(T, z, u);
}
                                    

#26 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 9441fa33600d1e53b6b522592249d074342fb1986b169ce02ed5c14e49c6d152

                                        0,
function(T, u, z) {
    z = (u = T.H(), T).H(), W(T, z, T.g(z) % T.g(u));
}
                                    

#27 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 73a26feef252055b9c2716971e72864c815b7526693bd1ee97346f127f472f21

                                        0,
function(T, u, z) {
    z = (u = T.H(), T).H(), W(T, z, T.g(z) * T.g(u));
}
                                    

#28 JavaScript::Eval (size: 78, repeated: 1) - SHA256: b1963dc39fb720d907394cd91b8a59ed26b9346444a5805f1d13a85af92374e4

                                        0,
function(T, u, z) {
    z = (u = T.H(), T).H(), W(T, z, T.g(z) + T.g(u));
}
                                    

#29 JavaScript::Eval (size: 78, repeated: 1) - SHA256: c548a7591d3a2721605173e39c558062af85aadc63b5050fc11baf308645bcc8

                                        0,
function(T, u, z) {
    z = (u = T.H(), T).H(), W(T, z, T.g(z) - T.g(u));
}
                                    

#30 JavaScript::Eval (size: 74, repeated: 1) - SHA256: d8519dca581b6c12969200f31fb6ef721d47f382666615430c60aa095ff8f0f2

                                        0,
function(T, u, z) {
    z = (u = T.H(), T.H()), W(T, z, "" + T.g(u));
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 00c7437c62575bdb26d5d662c36d8e877edb620180e1548ecd147d7ece2864ce

                                        0,
function(T, u, z, P) {
    (u = (P = (u = T.H(), z = T.H(), T.H()), T.g(u) == T.g(z)), W)(T, P, +u);
}
                                    

#32 JavaScript::Eval (size: 105, repeated: 1) - SHA256: 7fb3d964971e5ef26795a5ef7262880268528533181818f79f5a1472636e7f09

                                        0,
function(T, u, z, P) {
    (u = (P = (u = T.H(), z = T.H(), T.H()), T.g(u) > T.g(z)), W)(T, P, +u);
}
                                    

#33 JavaScript::Eval (size: 194, repeated: 1) - SHA256: 0f4f0670abb13d9dfc05c3c009900b5663bb3c11752821947a8c2328983af0ea

                                        0,
function(T, u, z, P) {
    (z = (P = (u = T & 4, T &= 3, z = this.H(), this).H(), this).g(z), u && (z = r(("" + z).replace(/\r\n/g, "\n"))), T && C(this, P, V(z.length, 2)), C)(this, P, z);
}
                                    

#34 JavaScript::Eval (size: 94, repeated: 1) - SHA256: d910b96393a0dafb3bf40dd8e20f56958bf30a19b75f9e0912ab54a82e045363

                                        0,
function(T, u, z, P) {
    P = (z = (u = T.H(), T).H(), T.H()), W(T, P, T.g(u) | T.g(z));
}
                                    

#35 JavaScript::Eval (size: 95, repeated: 1) - SHA256: 317065594d00d4cb01083f1524d67aa76dde2b097b79bb91f01de4eb71ef4a6a

                                        0,
function(T, u, z, P) {
    P = (z = (u = T.H(), T).H(), T.H()), W(T, P, T.g(u) || T.g(z));
}
                                    

#36 JavaScript::Eval (size: 101, repeated: 1) - SHA256: 80b15538f1c2050c1eb1cf0beb9ccaeec5f61da06de5934a0c4deea12e1f9fd9

                                        0,
function(T, u, z, P) {
    P = (z = (u = T.H(), T.H()), T.H()), W(T, P, (T.g(u) in T.g(z)) + 0);
}
                                    

#37 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 13745246dcdccaa29094001b6a94cc8bb9d005d9865f40b75fef5602fad57f3a

                                        0,
function(T, u, z, P) {
    for (; z--;) {
        99 != z && 127 != z && u.Y[z] && (u.Y[z] = u[P](u[T](z), this));
    }
    u[T] = this;
}
                                    

#38 JavaScript::Eval (size: 242, repeated: 1) - SHA256: 462275ca234bd43550965003f4f370576ebacef25e53a55668f6c25b7ecf2836

                                        0,
function(T, u, z, P) {
    if ((u = T.i.pop())) {
        for (z = T.H(); 0 < z; z--) {
            P = T.H(), u[P] = T.Y[P];
        }
        u[32] = T.Y[32], u[225] = T.Y[225], T.Y = u;
    } else {
        W(T, 99, T.G.length);
    }
}
                                    

#39 JavaScript::Eval (size: 170, repeated: 1) - SHA256: c2b14076d3811f353326385d18b401816e44da0f24fe903adc30da63d04f50d3

                                        0,
function(T, u, z, P) {
    try {
        P = T[(u + 2) % 3], T[u] = T[u] - T[(u + 1) % 3] - P ^ (1 == u ? P << z : P >>> z);
    } catch (d) {
        throw d;
    }
}
                                    

#40 JavaScript::Eval (size: 109, repeated: 1) - SHA256: a47c8bbc170970a1c2776aad5f7b23f0fb10ab48e5b5e897d7286d0b5495daa2

                                        0,
function(T, u, z, P) {
    u = (z = (P = (u = T.H(), z = T.H(), T).H(), T).g(z), T.g(u)), W(T, P, u[z]);
}
                                    

#41 JavaScript::Eval (size: 86, repeated: 1) - SHA256: e9c1eb5efa18d7cf83b071ca86a2511ba3d21f6a3241cdba3f3c306af2e34efd

                                        0,
function(T, u, z, P) {
    u = T.H(), z = T.H(), P = T.H(), W(T, P, T.g(u) << z);
}
                                    

#42 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 0ca0e9c4797e96859511b1790872e8faf8f75a743f4af0d6ef8a724d058de16b

                                        0,
function(T, u, z, P) {
    u = T.H(), z = T.H(), P = T.H(), W(T, P, T.g(u) >> z);
}
                                    

#43 JavaScript::Eval (size: 91, repeated: 1) - SHA256: 6f19a1a6f187dfa34b9ca2c3e04a2bde282ffc8dec0070d8ffc5f0c6e6fa7f00

                                        0,
function(T, u, z, P) {
    z = (u = T.H(), T).H(), P = T.H(), T.g(u)[T.g(z)] = T.g(P);
}
                                    

#44 JavaScript::Eval (size: 224, repeated: 1) - SHA256: e5019d7969cd566ac0a959e79271f3207bddf4d602cd0376eb4a07cb16293b4f

                                        0,
function(T, u, z, P, d) {
    0 !== (P = (z = (u = (u = T.H(), z = T.H(), P = T.H(), T).g(u), d = T.g(T.H()), T).g(z), T.g(P)), u) &&
        (P = Y(T, P, d, 1, u, z), u.addEventListener(z, P, S), W(T, 237, [u, z, P]));
}
                                    

#45 JavaScript::Eval (size: 138, repeated: 1) - SHA256: ee6f30fa1ad7f36378ef5fb0611e135c9a949761e8fc4faedf70539ad14b9e78

                                        0,
function(T, u, z, P, d) {
    for (d = (z = (u = T.H(), b(T)), 0), P = []; d < z; d++) {
        P.push(T.H());
    }
    W(T, u, P);
}
                                    

#46 JavaScript::Eval (size: 132, repeated: 1) - SHA256: f680e73033ba0b60845a704ba9c0286e045997a62411a2c4502d18642fccc48d

                                        0,
function(T, u, z, P, d) {
    z = (d = (P = (z = (u = T.H(), T.H()), T).g(T.H()), T.g(T.H())), T).g(z), W(T, u, Y(T, z, P, d));
}
                                    

#47 JavaScript::Eval (size: 403, repeated: 1) - SHA256: 7523d1141baf63352de08b4d48ca3f47dbfb8861a08e3a1f780ca37a84b5f5d6

                                        0,
function(T, u, z, P, d, Z) {
    if (!a(T, 1, 255)) {
        if ("object" == (P = (z = (u = (P = (z = (u = T.H(), T).H(), T).H(), d = T.H(), T.g(u)), T.g(z)), T.g(P)), T = T.g(d), B)(u)) {
            for (Z in d = [], u) {
                d.push(Z);
            }
            u = d;
        }
        for (d = 0, Z = u.length; d < Z; d += P) {
            z(u.slice(d, d + P), T);
        }
    }
}
                                    

#48 JavaScript::Eval (size: 218, repeated: 1) - SHA256: 5dfca6327a066be3c9000bb68942c7449a6e9019359e557cb7eb5b31fcf49b2e

                                        0,
function(T, u, z, P, d, Z) {
    return ((z = (P = (d = function() {
        return P();
    }, function() {
        return P[z.m + (d[z.P] === u) - !Z[z.P]];
    }), this), Z = z.V, d)[z.b] = function(T) {
        P[z.I] = T;
    }, d)[z.b](T), T = d;
}
                                    

#49 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 67f24153c5e4d54e3c796552d231b019250e9db01d2d29e7c66a63cc0ebf7387

                                        0,
function(T, u, z, P, d, Z, h) {
    a(T, 1, 5) ||
        (u = G(T), d = u.a, P = u.T, z = u.O, h = z.length, 0 == h ? (Z = new(P[d])) : 1 == h ? (Z = new(P[d])(z[0])) : 2 == h ? (Z = new(P[d])(z[0], z[1])) : 3 == h ? (Z = new(P[d])(z[0], z[1], z[2])) : 4 == h ? (Z = new(P[d])(z[0], z[1], z[2], z[3])) : A(T, 22), W(T, u.c, Z));
}
                                    

#50 JavaScript::Eval (size: 782, repeated: 1) - SHA256: 284055d33ba60775f8c5de0b97419826aa5a4624baf6a8eca56cea97e8260a39

                                        0,
function(T, u, z, P, d, Z, h, E, m, M, L, v, K) {
    for (M = m = (Z = (d = (P = (u = T.H(), z = 0), function(u, R) {
            for (; P < u;) {
                z |= T.H() << P, P += 8;
            }
            return R = z & ((P -= u, 1) << u) - 1, z >>= u, R;
        }), d)(3) + 1, h = d(5), E = [], 0); M < h; M++) {
        L = d(1), E.push(L), m += L ? 0 : 1;
    }
    for (v = (m = (m - 1).toString(2).length, M = 0, []); M < h; M++) {
        E[M] || (v[M] = d(m));
    }
    for (M = 0; M < h; M++) {
        E[M] && (v[M] = T.H());
    }
    for (K = (M = Z, []); M--;) {
        K.push(T.g(T.H()));
    }
    W(T, u, function(T, u, R, z, P) {
        for (u = (T.l++, z = 0, R = [], []); z < h; z++) {
            if (P = v[z], !E[z]) {
                for (; P >= u.length;) {
                    u.push(T.H());
                }
                P = u[P];
            }
            R.push(P);
        }(T.L = T.o(K.slice(), T.H), T).f = T.o(R, T.H);
    });
}
                                    

#51 JavaScript::Eval (size: 294, repeated: 1) - SHA256: 80887ef466211eafba777187e6def634a24536f2f50476a05f5b24d2aedf2250

                                        0,
function(T, u, z, d, O, Z, h) {
    if (z = (u = T.H(), b(T)), d = "", T.Y[132]) {
        for (O = T.g(132), h = O.length, Z = 0; z--;) {
            Z = (Z + b(T)) % h, d += P[O[Z]];
        }
    } else {
        for (; z--;) {
            d += P[T.H()];
        }
    }
    W(T, u, d);
}
                                    

#52 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd

                                        A
                                    

#54 JavaScript::Eval (size: 429, repeated: 1) - SHA256: 20ad32099b79d444d284142b587ca6c09eda934919ceef8ab6cfe0a69e70f69d

                                        A = function(T, u, z, P, d) {
    z = ((P = ((u = (d = T.g(127), [u, d >> 8 & 255, d & 255]), void 0 != P && u.push(P), 0 == T.g(32).length) &&
                (T.Y[32] = void 0, W(T, 32, u)), ""), z) &&
            (z.message && (P += z.message), z.stack && (P += ":" + z.stack)), T).g(225), 3 < z &&
        (P = P.slice(0, z - 3), z -= P.length + 3, P = r(P.replace(/\r\n/g, "\n")), C(T, 126, V(P.length, 2).concat(P), 9)), W(T, 225, z);
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#56 JavaScript::Eval (size: 401, repeated: 1) - SHA256: 8ce7ad018ffa53988da1ce6dfbd3d5108fd7ec732dbf17cdb2f08627b77be1fe

                                        C = function(T, u, z, P, d, R) {
    for (T = ((d = T.g(u), 126 == u) ? (u = function(T, u, z, P) {
            if ((u = d.length, z = u - 4 >> 3, d).h != z) {
                P = [0, (d.h = z, 0), 0, R], z = (z << 3) - 4;
                try {
                    d.J = J(e(d, z), e(d, z + 4), P);
                } catch (Z) {
                    throw Z;
                }
            }
            d.push(d.J[u & 7] ^ T);
        }, R = T.g(111)) : (u = function(T) {
            d.push(T);
        }), P && u(P & 255), P = 0, z).length; P < T; P++) {
        u(z[P]);
    }
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f39d5c348e5b79d06e842c114e6cc571583bbf44e4b0ebfda1a01ec05745d43

                                        D
                                    

#58 JavaScript::Eval (size: 118, repeated: 1) - SHA256: d5404c4cbabcbb89bb3a54ca7be652e1edf6d81817a87814f6082d086ed1349a

                                        D = function(T, u, z, P) {
    for (z = T.H(), P = 0; 0 < u; u--) {
        P = P << 8 | T.H();
    }
    W(T, z, P);
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#60 JavaScript::Eval (size: 267, repeated: 1) - SHA256: 400171a7cad09d85539dbc06fcd889264d5f2e6cf615b1776c4a4606c59802e7

                                        G = function(T, u, z, P, d, R) {
    for (R = (d = (P = ((u = {}, z = T.H(), u).c = T.H(), u.O = [], T.H()) - 1, T.H()), 0); R < P; R++) {
        u.O.push(T.H());
    }
    for ((u.a = T.g(z), u).T = T.g(d); P--;) {
        u.O[P] = T.g(u.O[P]);
    }
    return u;
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

                                        J
                                    

#62 JavaScript::Eval (size: 367, repeated: 1) - SHA256: b9092f9e81700e2d10fde6be85c3617459582d8a907e02d9ec74f1b80fb2749c

                                        J = function(T, u, z, P) {
    try {
        for (P = 0; 101513633568 != P;) {
            T += (u << 4 ^ u >>> 5) + u ^ P + z[P & 3], P += 3172301049, u += (T << 4 ^ T >>> 5) + T ^ P + z[P >>> 11 & 3];
        }
        return [T >>> 24, T >> 16 & 255, T >> 8 & 255, T & 255, u >>> 24, u >> 16 & 255, u >> 8 & 255, u & 255];
    } catch (d) {
        throw d;
    }
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#64 JavaScript::Eval (size: 128, repeated: 1) - SHA256: d30ac111ad3558f86fd8183a57946f73c971ce5fbe371db8fc05202225063e10

                                        Q = function(T, u, z) {
    return z = T.g(99), T.G && z < T.G.length ? (W(T, 99, T.G.length), n(T, u)) : W(T, 99, u), c(T, z);
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4

                                        W
                                    

#66 JavaScript::Eval (size: 323, repeated: 1) - SHA256: 807f84b78ef33fd343ca3cc2ff5425838526dcb30fda1af82b6c57267cd31ad6

                                        W = function(T, u, z) {
    if (99 == u || 127 == u) {
        if (T.Y[u]) {
            T.Y[u][T.b](z);
        } else {
            T.Y[u] = T.S(z);
        }
    } else if (46 != u && 126 != u && 175 != u && 32 != u || !T.Y[u]) {
        T.Y[u] = T.o(z, T.g);
    }
    29 == u && (T.M = void 0, W(T, 99, T.g(99) + 4));
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#68 JavaScript::Eval (size: 272, repeated: 1) - SHA256: e2700ed383aae3ea70eb0780485f2f881f22623321d830861c9b3dd9d0e83ff4

                                        Y = function(T, u, z, P, d, R) {
    return function() {
        var U = P & 1,
            x = [6, u, z, void 0, d, R, arguments];
        if (P & 2) {
            var H = (y(T, x), I)(T, true, false, false);
        } else {
            U && T.D.length ? y(T, x) : U ? (y(T, x), I(T, true, false, false)) : (H = w(T, x));
        }
        return H;
    };
}
                                    

#69 JavaScript::Eval (size: 2, repeated: 8) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#70 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d

                                        b
                                    

#71 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 03a70896b4c50ad3cfce82a36138e13cde83191e80243ed10582c8deccc0b000

                                        b = function(T, u) {
    return u = T.H(), u & 128 && (u = u & 127 | T.H() << 7), u;
}
                                    

#72 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#73 JavaScript::Eval (size: 639, repeated: 1) - SHA256: cfa089825a96504ef481226bfb0d55f3127ab8605d9c9a6d8d85e6d3c0050d3c

                                        c = function(T, u, z, P, d, R, U) {
    T.l++;
    try {
        for (z = (d = (R = (P = 5001, 0), void 0), T).G.length;
            (--P || T.s) && (T.L || (R = T.g(99)) < z);) {
            try {
                T.L ? (d = T.H(true)) : (W(T, 127, R), U = T.H(), d = T.g(U)), d && d.call ? d(T) : A(T, 21, 0, U), T.K = true, a(T, 0, 2);
            } catch (x) {
                x != T.v && (T.g(209) ? A(T, 22, x) : W(T, 209, x));
            }
        }
        P || A(T, 33);
    } catch (x) {
        try {
            A(T, 22, x);
        } catch (H) {
            f(T, H);
        }
    }
    return (z = T.g(164), u) && W(T, 99, u), T.l--, z;
}
                                    

#74 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#75 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#76 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#77 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 253e8513d430283feed1df8cc1cf36bde1cb6ae765dcb99da2fb1d0a6726c7ec

                                        e = function(T, u) {
    return T[u] << 24 | T[u + 1] << 16 | T[u + 2] << 8 | T[u + 3];
}
                                    

#78 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9

                                        n
                                    

#79 JavaScript::Eval (size: 81, repeated: 1) - SHA256: c2168885729d0b7c33ec904a5a40738d1496e304dcdc6546909a0e74d484b029

                                        n = function(T, u) {
    (T.i.push(T.Y.slice()), T.Y[99] = void 0, W)(T, 99, u);
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940

                                        p
                                    

#81 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 3339d87096f1955a3ff8fe40e86429810899c495ca5a0827197f5445df7358bb

                                        p = function(T, u, z, P) {
    z = T.H(), P = T.H(), C(T, P, V(T.g(z), u));
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1

                                        r
                                    

#83 JavaScript::Eval (size: 487, repeated: 1) - SHA256: d0157c4dff66b441e3de36bbaca4ee7b6cf0833028821b9348dac6bca3347011

                                        r = function(T, u, z, P, d) {
    for (P = z = (u = [], 0); P < T.length; P++) {
        d = T.charCodeAt(P), 128 > d ? (u[z++] = d) : (2048 > d ? (u[z++] = d >> 6 | 192) : (55296 == (d & 64512) &&
            P + 1 < T.length && 56320 == (T.charCodeAt(P + 1) & 64512) ? (d = 65536 + ((d & 1023) << 10) + (T.charCodeAt(++P) & 1023), u[z++] = d >> 18 | 240, u[z++] = d >> 12 & 63 | 128) : (u[z++] = d >> 12 | 224), u[z++] = d >> 6 & 63 | 128), u[z++] = d & 63 | 128);
    }
    return u;
}
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8

                                        t
                                    

Executed Writes (2)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 1333, repeated: 1) - SHA256: ea82ed136edeed7801fa652d24363efd49d4d3cd081fc84316e3fc515904886c

                                        < span id = "mag5739505" > < img src = "https://cm.g.doubleclick.net/pixel?google_nid=magnetic&amp;google_cm&amp;google_sc&amp;google_hm=6b3951975a3d463281479ecfac8d0a7f"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://secure.adnxs.com/pxj?bidder=143&amp;seg=530156&amp;action=setuid(&quot;6b3951975a3d463281479ecfac8d0a7f&quot;)"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://pixel.rubiconproject.com/tap.php?v=14256&amp;nid=2682&amp;expires=30&amp;put=6b3951975a3d463281479ecfac8d0a7f"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://loadm.exelator.com/load/?p=204&amp;g=1103&amp;buid=6b3951975a3d463281479ecfac8d0a7f&amp;j=0"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://tapestry.tapad.com/tapestry/1?ta_partner_id=1032&amp;ta_partner_did=6b3951975a3d463281479ecfac8d0a7f&amp;ta_format=png"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://bh.contextweb.com/bh/rtset?do=add&amp;pid=548607&amp;ev=6b3951975a3d463281479ecfac8d0a7f"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://dsum-sec.casalemedia.com/rum?cm_dsp_id=48&amp;external_user_id=6b3951975a3d463281479ecfac8d0a7f"
width = "1"
height = "1"
style = "display:none;" > < img src = "https://rtb.gumgum.com/usersync?b=mag&amp;i=6b3951975a3d463281479ecfac8d0a7f"
width = "1"
height = "1"
style = "display:none;" > < /span>
                                    


HTTP Transactions (133)


Request Response
                                        
                                            GET /?src=emailfooter HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.137.58
HTTP/1.1 301 Moved Permanently
                                        
Server: AkamaiGHost
Content-Length: 0
Location: https://www.sharefile.com/?src=emailfooter
Expires: Thu, 15 Feb 2018 09:03:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 15 Feb 2018 09:03:01 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=481393, public, no-transform, must-revalidate
Last-Modified: Tue, 13 Feb 2018 22:46:14 GMT
Expires: Tue, 20 Feb 2018 22:46:14 GMT
Date: Thu, 15 Feb 2018 09:03:01 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    96bb3ba633216fda39a858ed32f00687
Sha1:   4c3211b0712d61d7a987fe65e469098f003b1192
Sha256: 5671e08bac9b8f0aacd8a995f4770bb043489c26a7b63139a395d46225525f3d
                                        
                                            GET /?src=emailfooter HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 18951
Cache-Control: public, max-age=0
Expires: Thu, 15 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18951
Md5:    7863176318fc7733d3d9e3408ab308ee
Sha1:   78c8f5aaf3fa69850bb62075b83cf8ee6fd12677
Sha256: 84dd2bb81a9666706e70183a21023aa14d97160a4e3e7f971724086de29d6bd7
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:02 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63697696a024b302d6fb61b4db6ab43d
Sha1:   af8989f2a857e856d98850ab45eb29b3c8a0587f
Sha256: 0e2b990e4bdf0608a85f1bed182d52767742aa05c52fcb87c1753cfef117caf0
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1391
Content-Transfer-Encoding: binary
Cache-Control: max-age=392142, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 21:56:01 GMT
Expires: Mon, 19 Feb 2018 21:56:01 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1391
Md5:    dab664d03e303a7b1deba30189c57d23
Sha1:   1a87b2335fc304a7783b6f7ffdb5ff97367d30de
Sha256: a420898c491aa5011be91b1f128d5401a72f65f88f6db5db605abde5677fb03d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:02 GMT
Etag: "5a8505cb-1d7"
Expires: Sat, 17 Feb 2018 09:03:02 GMT
Last-Modified: Thu, 15 Feb 2018 04:00:11 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f6305f0d417ba2bbf11e19593b7092be
Sha1:   fa918774c846b5ef79ab8bb4bc39a913c448ed32
Sha256: 5d394aac7805f1167835acbebda8c5f6fa4a71ccdbd95572a1b6e56f26ffb853
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:02 GMT
Etag: "5a84e043-1d7"
Expires: Sat, 17 Feb 2018 09:03:02 GMT
Last-Modified: Thu, 15 Feb 2018 01:20:03 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    977a846fb43da324781ea67bf1b51944
Sha1:   ea0941f1afd159071399df4b7e5a913acc6dc69c
Sha256: c4e227c21664616468b6d276c0e48a670fe92df4a239be98ef4513f246ca5ecf
                                        
                                            GET /ruxitagentjs_2SVfqr_10135180105125946.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 36377
Cache-Control: public, max-age=31536000
Expires: Fri, 15 Feb 2019 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   36377
Md5:    40d09b0c8758ee092e763e82c938c3af
Sha1:   b4d7ae7d3c3bcba97b7cb91341690b46d97acf28
Sha256: e24a2c8e8905203a8fbda0c7d5668e53e4a4fce8811a3f695fdb82838ca12fee
                                        
                                            GET /recaptcha/api.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Thu, 15 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   403
Md5:    7fe06dc397c571f2fd19c44aa70d94c1
Sha1:   169dd85107ac631a82e36075eed11eebb1f3cbc7
Sha256: 432d1f04c59e77d72b22532b43cac51d78c10fc15a433f7503acc326297aee52
                                        
                                            GET /etc/designs/sf/css/static/images/1x1.gif HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "220459-2b-56400a89551f9"
Last-Modified: Tue, 30 Jan 2018 16:14:34 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 43
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /content/dam/sf/homepage/sf_hero_tablet_arch.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52009a-2cac-56400a8718937"
Last-Modified: Tue, 30 Jan 2018 16:14:32 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 11436
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 1536 x 174, 8-bit/color RGBA, non-interlaced
Size:   11436
Md5:    df5a41cdbef86293ecdaf7b435396d37
Sha1:   fcff8fe39ecbf85b63b644d49d63dab610fae10a
Sha256: d7d492be3f8fd22625938838d9f8a4f0ea6cf7fdaa3a3d4ef12fb75bbeda00f0
                                        
                                            GET /content/dam/sf/homepage/sf_hero_mobile_arch.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "520054-b8f-56400a3c7b8b9"
Last-Modified: Tue, 30 Jan 2018 16:13:14 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2959
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 640 x 60, 8-bit/color RGBA, non-interlaced
Size:   2959
Md5:    778a18e36e94ad5b9a6180bb871e5a8e
Sha1:   3b8a22bcd73b3caad00fccc481368c04f446985a
Sha256: 18e4a5550949708be5db28dc9a387e32c70df287500a45544f50a06b1f82267f
                                        
                                            GET /js/140522114.js HTTP/1.1 
Host: cdn.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         88.221.73.116
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
x-amz-id-2: Y1zQ6t7V6dCvG3kcyBZvme4ELIivkRBoazZAOrGkMbMeXW49L4kBBrxxFkrSKXRIlABhYAnILbc=
x-amz-request-id: 7018ED6291844F55
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 02 Feb 2018 15:10:21 GMT
Etag: "67be4557acfc0ccaaac67e2ec318dd5e"
x-amz-meta-revision: 5352
Content-Encoding: gzip
x-amz-version-id: c5ioIxs0cess9WehjZGoCZF3hNmOLaxR
Accept-Ranges: bytes
Content-Length: 76297
Server: AmazonS3
Vary: Accept-Encoding
Cache-Control: max-age=120
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Expose-Headers: x-amz-meta-revision
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, last modified: Fri Feb 02 16:10:20 2018, max compression
Size:   76297
Md5:    67be4557acfc0ccaaac67e2ec318dd5e
Sha1:   ee7c54ed1d818248e5ed9412cffe2a9de0bb3f90
Sha256: db93922df6dfef28fa0f2ed6edf291414e2e1314e6bd4225e43af588963191ca
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_a.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52002f-1f8da-56400a347bc6d"
Last-Modified: Tue, 30 Jan 2018 16:13:05 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 129242
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:02 GMT
Date: Thu, 15 Feb 2018 09:03:02 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 705 x 435, 8-bit/color RGBA, non-interlaced
Size:   129242
Md5:    150cdfa4967302a525adaac31fb2505f
Sha1:   31101081482450b8562959ecf7cfb871e259b9b8
Sha256: 6f8683bfd0a9caaf761f49ab6badc355bb0837c46223d38a8b6b2b7157d88bde
                                        
                                            GET /etc/designs/sf/css/app.css HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "2203da-576cf-56400a2fae619-gzip"
Last-Modified: Tue, 30 Jan 2018 16:13:00 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 43166
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43166
Md5:    17323cf2c837c1ff6f22abe6d9ca118e
Sha1:   65eec7e7518ab130ae6625b2c2e27a576ad4dc16
Sha256: 92e0c061c41e077ff37c85f0351abbd72794850cf9b832c28c18fa2db563537a
                                        
                                            GET /etc/designs/sf/js/common.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "22040f-486ec-56400a38956a5-gzip"
Last-Modified: Tue, 30 Jan 2018 16:13:10 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   85903
Md5:    76cd035dce774f0ba31f2d5c3d95c535
Sha1:   66147b382619103aeee487d059415d44f9ab6440
Sha256: 7577932e609ba634f882f11b22b694ef8a724bba996a78b9b502e7eadba4ceeb
                                        
                                            GET /content/dam/sf/homepage/watch-the-video-button.jpg HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "22041c-c7c-56400a3c88264"
Last-Modified: Tue, 30 Jan 2018 16:13:14 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 3196
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.00, comment: "LEAD Technologies Inc. V1.01"
Size:   3196
Md5:    d17b552972489703aaf778cd98350468
Sha1:   bfb46ef2f0e6c8079659722ce29c246f3fa4f52b
Sha256: 165e81b6212ad23f8c9e63e6244755601503d26dc244d5a8b9ecb14b661926ac
                                        
                                            GET /etc/designs/sf/js/foundation/personalization.js HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "520057-1e698-56400a3c8b2b6-gzip"
Last-Modified: Tue, 30 Jan 2018 16:13:14 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 29864
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29864
Md5:    ce398cfe48f38cbc3c8376e14a787fcc
Sha1:   6ea277bf6860f613eba78d444f9f1ac4a93fe8ff
Sha256: 067d8c647c46ac7d754ecea2907bd05e1dfcd853cc1e4c82115adee81a6b4437
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:03 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    82ffa32ed05cffb175fbaa300e3e8f60
Sha1:   f8c417b3b20eeca76d6156aea193564728de4b31
Sha256: d77f8f9a5cdc6100fb94e8ae3fc19c796b3ce152b0c1f466e0c3f815f2c9bc1b
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:06 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_b.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "2203f6-369fa-56400a3482f18"
Last-Modified: Tue, 30 Jan 2018 16:13:05 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 223738
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 727 x 433, 8-bit/color RGBA, non-interlaced
Size:   223738
Md5:    5fe7f2edb215ec1bee2e3477919da618
Sha1:   b79cf458f72953ab77c80495eb0a0ec954cd3c52
Sha256: 17426682f687a6a0b135378c137fe122d5dab3ce5e7992573a552104e1d8c511
                                        
                                            GET /content/dam/sf/homepage/sf_video_people.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52003f-2531e-56400a356b44e"
Last-Modified: Tue, 30 Jan 2018 16:13:06 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 152350
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 950 x 600, 8-bit colormap, non-interlaced
Size:   152350
Md5:    16cbad7b3db3fe7648a4657039a3001d
Sha1:   89e3a97cfe4337bd96934b7c152d8a27e09126d4
Sha256: 3c176d15bc56484d9c14657a39c0597a4fab64dc754bcf4f091b4adf10f9c699
                                        
                                            GET /content/dam/sf/newSF/forrester-RGB-white_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "220407-8aa9-56400a3666d38"
Last-Modified: Tue, 30 Jan 2018 16:13:07 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 35497
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 1632 x 260, 8-bit/color RGBA, non-interlaced
Size:   35497
Md5:    6d185121fd9bfc4b2db6690a4d379549
Sha1:   7d005242fc31e84d97d851ce0e6260fa3d99472d
Sha256: 5714f9eb44cef35d3521c2c86760ca2a9193ebc49c63500c2d2e6407a4727caf
                                        
                                            GET /content/dam/sf/newSF/gartner_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "22041d-681-56400a3c8dc3c"
Last-Modified: Tue, 30 Jan 2018 16:13:14 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1665
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 90 x 21, 8-bit/color RGBA, non-interlaced
Size:   1665
Md5:    52ec889960542aa75449e53d156d82f1
Sha1:   c82e9e30f1377834ba7ec6965d86725ce1eebdc6
Sha256: 43e0a37bf17693949e47c39150f9db58af2097024209cb99c021bff55fa409d8
                                        
                                            GET /etc/designs/sf/css/static/fonts/icons.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "22042e-f818-56400a4f2406e:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:13:32 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 63512
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:06 GMT
Date: Thu, 15 Feb 2018 09:03:06 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   63512
Md5:    3cb92b57a93fbc98b8a601cc56cbfdc9
Sha1:   70d6b922087b793b818ebcb006ca9fcd2876d318
Sha256: 2b61a81d2acdfe88deb71ab4a28060a199924089af7a37ac7ef047b443e58dae
                                        
                                            GET /gtm.js?id=GTM-XCGM HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 15 Feb 2018 09:03:06 GMT
Expires: Thu, 15 Feb 2018 09:03:06 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   35449
Md5:    29ad7ecaf945658bface17eb4fc982cc
Sha1:   dd61af99e87dbcdb53c4095d154452b21b1cddc8
Sha256: 61af66f88f1b0e445b4aec2f82a98b4dc3a8f16b1a9e7e48d841e4d7dacb0ac3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:06 GMT
Etag: "5a84d5c0-1d7"
Expires: Sat, 17 Feb 2018 09:03:06 GMT
Last-Modified: Thu, 15 Feb 2018 00:35:12 GMT
Server: ECS (arn/45E0)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6a18e108d465abe3f6bf0c4218eb1288
Sha1:   3f45eb515e35e24081a8b113a3d1e431fe31adb2
Sha256: f079e32bf3ae5f921a341694f71a9dcb11afe6eeaa120c604c8efdccf5c5a91c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:07 GMT
Etag: "5a851ae6-1d7"
Expires: Sat, 17 Feb 2018 09:03:07 GMT
Last-Modified: Thu, 15 Feb 2018 05:30:14 GMT
Server: ECS (arn/45A3)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ee8894965400dc1deee79304f59fdf1a
Sha1:   57b715526973a12992be1df9e5f2fd4dab441743
Sha256: 857ec2f23532c6ca9734643bb9045714906c5641bd9965fab251ad86a402fe62
                                        
                                            POST /bin/citrix/shareFileWebHit HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/?src=emailfooter
Content-Length: 368
Cookie: HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=20ab07a0-7072-47dd-8474-98ea1b021344; uuid=1524932492178o0toTOy
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 89
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:07 GMT
Date: Thu, 15 Feb 2018 09:03:07 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   89
Md5:    318a40622d1ee7443e312849f83d3934
Sha1:   b2db822a8f94ad047298bc66c655d81f8f363470
Sha256: 9e176e27e39104743d309c6be56f50948dbaae7eb1ffac166c55c6461b9faafb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:07 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120630, public, no-transform, must-revalidate
Last-Modified: Thu, 15 Feb 2018 08:19:26 GMT
Expires: Fri, 16 Feb 2018 20:19:26 GMT
Etag: "827d4e764820a26067941f002f531675cbc4aaf3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    714f2a2b8e4aefbd34484c300a881509
Sha1:   827d4e764820a26067941f002f531675cbc4aaf3
Sha256: 9c7fe947ed9635fd0f02ee650c61cc3ab8da4402d8d9dc82fe84e8cf94a9ae5f
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-bold.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52009f-6390-56400a892c4ae:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:14:33 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 25488
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:06 GMT
Date: Thu, 15 Feb 2018 09:03:06 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   25488
Md5:    d72b7cc589366d0ec72dee468b459651
Sha1:   92bee02da830e389e993cf15cd10e543da31fb5e
Sha256: f9bb1440bc53812b4c6d14ca05415dc707eb5f94fa8d188cfd9cf60217cd1fe4
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1033
Content-Transfer-Encoding: binary
Cache-Control: max-age=497373, public, no-transform, must-revalidate
Last-Modified: Wed, 14 Feb 2018 03:10:54 GMT
Expires: Wed, 21 Feb 2018 03:10:54 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1033
Md5:    2f5c3e8955b7320f0d39abcb7b2e8466
Sha1:   8bd996aeab4db5a19206cab89933af81d5e05978
Sha256: b609e5018d8e681834beefc54a9ba3a9c24506d5f9facdab647b414dffab5172
                                        
                                            GET /api/v2/ip.json?key=851275e3832f80a88e468a191a65984648201358&callback=jQuery17037088102014695623_1518685383728&_=1518685385282 HTTP/1.1 
Host: api.demandbase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         52.85.240.108
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 15 Feb 2018 09:03:08 GMT
Server: nginx
Api-Version: v2
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 14 Feb 2018 09:03:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Request-ID: 4dd02670-6fa2-477a-94ad-d2af5dbe3c55
X-Cache: Miss from cloudfront
Via: 1.1 f46b6835a58763129c9d1db5dc3ef62f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: sZvBaWoCMmIHnNyVMHPBNxc9-ezP1xb4zkeJ6uU-wHVPu_VpIBbW4Q==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Feb 15 10:03:06 2018
Size:   672
Md5:    4254c4316893845f004a0ded00eda54d
Sha1:   affd4266314a34e98476c1c0a0b737a3f5a807ef
Sha256: c60d594ab4e0f50e6f8dba2b0c48bc0200021fa66390826adb1b9664d552a84e
                                        
                                            GET /content/dam/sf/newSF/newsf_section1_c.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52004b-1a02b-56400a389c5fe"
Last-Modified: Tue, 30 Jan 2018 16:13:10 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 106539
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 720 x 439, 8-bit/color RGBA, non-interlaced
Size:   106539
Md5:    2cf3dc95340b2869708d80f27da4c85c
Sha1:   ad00a528a7429b9a161c98e9e44b88c7179731df
Sha256: 48eb15c29318bdb7be0694c4ef9dc1fa6c31521920a4ccc9c4ec995d5af1de84
                                        
                                            GET /content/dam/sf/pricing.txt HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=20ab07a0-7072-47dd-8474-98ea1b021344; uuid=1524932492178o0toTOy

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "5200ab-a3-56400a8bfa097:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:14:36 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 132
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   132
Md5:    2fa2adb0bb37c3da1815b768cba82c7c
Sha1:   bbd0312832c39fbb66d4e68529ca2c3754a8fc61
Sha256: 0806f5e7de5465aa7b672842770dc5d15d25929f62a219cf5941b541f1288925
                                        
                                            GET /content/dam/sf/newpricing.txt HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
X-Requested-With: XMLHttpRequest
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D; sessionId=20ab07a0-7072-47dd-8474-98ea1b021344; uuid=1524932492178o0toTOy; allSources=emailfooter

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: "520042-11f-56400a3738301:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:13:07 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 182
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   182
Md5:    880cea1ae99cca0bb67260160514f4ce
Sha1:   df2875b6309376460d8cf4679be3e23ff37046c0
Sha256: d9ec8b70fa68cd29e6b11f400b601e58833b7f109cd3444d3ad1a87b177dd000
                                        
                                            GET /etc/designs/sf/css/static/images/logo-black.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "2203eb-74e-56400a31d0c37"
Last-Modified: Tue, 30 Jan 2018 16:13:02 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1870
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 215 x 56, 8-bit/color RGBA, non-interlaced
Size:   1870
Md5:    137f453a30a11b4acf8a84745960fa61
Sha1:   29edba75b88f0871f3da4ac36da3c9b2519c84be
Sha256: 6a60ff4a47e51a718310cd070eabc55419b703dd081814567f80eec3579780fd
                                        
                                            GET /content/dam/sf/homepage/citrix-logo-footer.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52009b-21b-56400a876e059"
Last-Modified: Tue, 30 Jan 2018 16:14:32 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 539
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:03 GMT
Date: Thu, 15 Feb 2018 09:03:03 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 85 x 32, 8-bit gray+alpha, non-interlaced
Size:   539
Md5:    96f2ebc0fcc9815a1842c7e45eacc426
Sha1:   f6b3d6041a9c52938004d86c25ea5d5d0fa0b8f1
Sha256: 6d52d3b9bd5e3d90dfa344256e6cfc3ffcc56c0394f0d4fedc36165a0e999d87
                                        
                                            GET /content/dam/sf/homepage/sf_hp_hero_bg.jpg HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "520022-201ee-56400a33912ac"
Last-Modified: Tue, 30 Jan 2018 16:13:04 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 131566
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   131566
Md5:    cf5460fcbf9c1704d7e839f2ddf57f6b
Sha1:   17ebf7eafda7e840962ffffe606e467cf0379ffc
Sha256: eb19a93e20c6cca014fce8a94404829c017a5fd58e2151a695f07e9dc81d61b2
                                        
                                            GET /px?id=874010&seg=9031110&t=2&gtmcb=591553985 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         185.33.223.198
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 15 Feb 2018 09:03:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 6ecb6e34-5385-4b23-aff0-60c9491e2168
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 310.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.75:80


--- Additional Info ---
                                        
                                            GET /event?a=140522114&d=24703920&y=false&src=js&s175091490=direct&s6781623442=true&s245471469=none&s174979504=ff&s175094193=false&tsent=1518685383.186&n=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&u=oeu1518685383156r0.399457022848144&wxhr=true&time=1518685383.185&f=8319120065,8513231905,10238430889,8514252506,8546741223,8607550983,9738173321,8545661644,8573102023,9189590451,6257010330,8561015617,8360262622&g=&cx2=c1c66bfa HTTP/1.1 
Host: 140522114.log.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Origin: https://www.sharefile.com

                                         
                                         54.243.159.159
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-Requested-With, X-TS-AJAX-Request
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.sharefile.com
Date: Thu, 15 Feb 2018 09:03:08 GMT
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Server: nginx
Set-Cookie: fixed_external_140522114_end_user_id=; Domain=.optimizely.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=-1 end_user_id=oeu1518685383156r0.399457022848144; Domain=.140522114.log.optimizely.com; expires=Sun, 13 Feb 2028 09:03:08 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=374834, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 17:05:29 GMT
Expires: Mon, 19 Feb 2018 17:05:29 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    52de7cb1f7c6d2a1d1777cf82debc200
Sha1:   b0105cec9af12d75db75bccb22354e78abb7ffea
Sha256: d856d0a298dcd4ba297198566429313efd188a573e9bd8832ed5e9547e34e513
                                        
                                            GET /5wDCfOAs.min.js HTTP/1.1 
Host: scripts.demandbase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         52.85.240.36
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 02 Feb 2018 05:45:37 GMT
Last-Modified: Fri, 02 Feb 2018 04:59:25 GMT
Cache-Control: public, max-age=3600
x-amz-version-id: uRI2vAfwGKPpZoocP8PCU1bMzBmCkVxt
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 1581
X-Cache: Hit from cloudfront
Via: 1.1 22696b6e831fc717b53b9273ad3341c2.cloudfront.net (CloudFront)
X-Amz-Cf-Id: -EbaW6l7ZxrM4zMq4Kpot1axn1NXlNaHrUinnyJJ-1SICaVnFDF9TA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13600
Md5:    b24ba98ec54562223f77400ed4d167ed
Sha1:   80cc7e54eaed634d2d6cf59ff8b73005d67912bd
Sha256: 67cedb42196fe815c44315b9b2fb810b16cff1e6b3de040ecf1578457bb91d29
                                        
                                            GET /content/dam/sf/newSF/newsf_industries.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "22045b-3d31-56400a8973a40"
Last-Modified: Tue, 30 Jan 2018 16:14:34 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 15665
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 308 x 307, 8-bit/color RGBA, non-interlaced
Size:   15665
Md5:    a54038d12a1620309b4ddc496dca3043
Sha1:   5a341d0bbda4b3d75ccabea91280bbdf61c68d54
Sha256: 01f70bc7e9f6fe89e6e0c4ac25724992081348e72f1bfce59d7b142ae8f7c5a9
                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         2.23.140.109
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Etag: "d1b41ed040bddca0129ddaf626345cab:1516840702"
Last-Modified: Thu, 25 Jan 2018 00:38:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 735
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   735
Md5:    66a4788b4a3398217217cc269aa1b6e6
Sha1:   5eea558c3f03d41acc35c54605c01b19b03a7f59
Sha256: 5e6dc70692f3a10147a04508d92aac20d8d81d14441970f43159efb4a66ecbe2
                                        
                                            GET /etc/designs/sf/css/static/images/citrix_bk_logo.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "5200a7-8f0-56400a8b93038"
Last-Modified: Tue, 30 Jan 2018 16:14:37 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2288
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 213 x 92, 8-bit/color RGBA, non-interlaced
Size:   2288
Md5:    15888d7316897f00cc5d64ea782f0def
Sha1:   869c6c62c3d58e7626e20dbedbfbddb59de52a1a
Sha256: c860243446b9353991978b5eb4426de3384175b0885f15f9d2ea91e52ae31586
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:09 GMT
Etag: "5a850a73-1d7"
Expires: Sat, 17 Feb 2018 09:03:09 GMT
Last-Modified: Thu, 15 Feb 2018 04:20:03 GMT
Server: ECS (ams/49B8)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    483701b22db1506d66ee956fbfc9ffe4
Sha1:   7b835a3008b3cd780ba67bc4532649a31e2128fc
Sha256: 08688b26837183de0b56e37ec82268636ddd0b58ebaa3eb7ca05d8468c1940c5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:09 GMT
Etag: "5a84e170-1d7"
Expires: Sat, 17 Feb 2018 09:03:09 GMT
Last-Modified: Thu, 15 Feb 2018 01:25:04 GMT
Server: ECS (arn/4679)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f07ee274f61e7d331eded5750f7017ff
Sha1:   4d43dd33116bcf3a68aaebb7926ff4ea95effb32
Sha256: bf81676e5bd2317bfb7b0f488178c48950e34539afaf43dc64271d3a74b60d67
                                        
                                            GET /content/dam/sf/chat-thumb.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "5200b2-ad5-56400a8d50106"
Last-Modified: Tue, 30 Jan 2018 16:14:38 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2773
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 85 x 85, 8-bit/color RGBA, non-interlaced
Size:   2773
Md5:    8f40c04eacd189440288ef8ec97d3681
Sha1:   3e6356fb79a843a082ed698580d4580dfd1eb540
Sha256: eab83a62a80b128750970dbaf84701de1a5a4cca5d8821767dbcf0279cff88fb
                                        
                                            GET /content/dam/sf/newSF/newsf_pricing.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "520044-1b8e-56400a3753494"
Last-Modified: Tue, 30 Jan 2018 16:13:08 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 7054
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 300 x 276, 8-bit/color RGBA, non-interlaced
Size:   7054
Md5:    836a3a6793940cfbe6403e0ac3963336
Sha1:   d350bdba9635d6298468908d5538f077cc68a866
Sha256: 6ef9c93b136948ec0408ff10fad2b3c376c795c967615a9149ef6467163442fb
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-semibold.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52009c-6682-56400a8912a8b:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:14:33 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 26242
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   26242
Md5:    47678f1e3e399b9b38df1041f5cafb32
Sha1:   6b4ac85b5dad0701b70bc603c6f70bf2619cf890
Sha256: 2817043a87ef7679c8f52b7dc70a81d306da35190c2d4fa40fa341600d4b2dd9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.ssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:09 GMT
Server: Apache
Last-Modified: Tue, 13 Feb 2018 03:31:57 GMT
Expires: Tue, 20 Feb 2018 03:31:57 GMT
Etag: 117C0328F058250DF78425570179166083899B3D
Cache-Control: max-age=411527,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    7d22106b701cfeb1d0400a7fdb0c9a86
Sha1:   117c0328f058250df78425570179166083899b3d
Sha256: 9d25ab50481133570f5593ca3ca76e9b7253b3e219086efbe769a5ff484a6e68
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:09 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: B15828FD6D51CF013B17BE94EA3DF778AB20EA92
Cache-Control: max-age=353863,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    75bcff5203bb968ab20eaabf09a96bae
Sha1:   b15828fd6d51cf013b17be94ea3df778ab20ea92
Sha256: 54849a23a92b858f1e6f1bf5d1ecf0c8932575fc6c09144b8dd344b89bf3b144
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:09 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: F8323968297C8023B7E715DE5E4873825B042798
Cache-Control: max-age=353863,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a3389572a0ad2c8d92f3e809c29a43ee
Sha1:   f8323968297c8023b7e715de5e4873825b042798
Sha256: ef1c07a47e29adc3b6b0984ea5c7ecdb22b9ef4f4c4989c9ec2dc19354fd7619
                                        
                                            GET /ki.js/52360/bdy.js HTTP/1.1 
Host: s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         52.216.85.101
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: aDPYoHwYmpqyXVQsEay+W7WbFbl3RX0c/7ZFnNk3pfejtRiSM4G5Dk2UogZ35dBt/6WjrjS1n7M=
x-amz-request-id: 8EC71E16A8CA610E
Date: Thu, 15 Feb 2018 09:03:10 GMT
Last-Modified: Fri, 09 Feb 2018 15:13:26 GMT
Etag: "cc4e89d75c46ba6321bf85824130616d"
Cache-Control: max-age=3600
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Length: 40989
Server: AmazonS3


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Feb 09 16:13:25 2018
Size:   40989
Md5:    cc4e89d75c46ba6321bf85824130616d
Sha1:   f627850226852e7fa0b7201b4fa8813dd3e26764
Sha256: 8933a64fb0acd8c7713c9465a3fc8e6e798476752198fb57147cbe30ecbab0c9
                                        
                                            GET /151/munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         2.23.140.109
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Etag: "bd3daad4a1e88a1196d76b6dd3c9deed:1440037148"
Last-Modified: Thu, 20 Aug 2015 02:19:08 GMT
Accept-Ranges: bytes
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Sat, 26 May 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Content-Length: 3503
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3503
Md5:    b9bc623c2018c75721fdb69e1b2f2df6
Sha1:   1c5deaa68f106cd2e0e18dd898cd5f04bf8abea7
Sha256: 43ac5e2c57eeee79e7a34e9cdbafc3601ef1ba929f9cb61f720ecc731de31aed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:10 GMT
Etag: "5a85036c-1d7"
Expires: Sat, 17 Feb 2018 09:03:10 GMT
Last-Modified: Thu, 15 Feb 2018 03:50:04 GMT
Server: ECS (arn/4598)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    011e2e3fca23c64a0cbc280560ebca63
Sha1:   0ac84ffa6049b361f7b23b78534aa2f2de8b8a92
Sha256: a89650ffd45f21801bee8911c87ec3d2b6412da00b33459946b7c7ea38b3c8a1
                                        
                                            GET /content/dam/sf/newSF/newsf_security.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "52009e-f77-56400a8928247"
Last-Modified: Tue, 30 Jan 2018 16:14:34 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 3959
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   3959
Md5:    3c0648e7013d06490d8d0e74a637666c
Sha1:   acd510cd211264b0f135c64f2b1626cb50dfe591
Sha256: b6ce5cb75e47b44b2a3cfd7ebadd6df8519d8699ced998ca6eda7388236953e8
                                        
                                            GET /content/dam/sf/newSF/newsf_support.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "5200a1-7fe-56400a893708d"
Last-Modified: Tue, 30 Jan 2018 16:14:34 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 2046
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   2046
Md5:    bff34713b9268ce5d2c632820d492f46
Sha1:   58e288479070f11345c1193c7be4801ebd1aac9e
Sha256: a8b711bcba3ca17f32442e88d377da87a305f9b3d5cf1cbdf8875c5db736e995
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=505948, public, no-transform, must-revalidate
Last-Modified: Wed, 14 Feb 2018 05:35:36 GMT
Expires: Wed, 21 Feb 2018 05:35:36 GMT
Date: Thu, 15 Feb 2018 09:03:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    770f046cf867fc1f970bcf9a3b127036
Sha1:   7e8c638ac1d541856e804252a2c487efab2390e1
Sha256: 93e6d15d194fd041de0331cd29e674537deba23ec73824282f8adfff011ed52c
                                        
                                            GET /content/dam/sf/newSF/newsf_mobile.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "220458-609-56400a8914ea3"
Last-Modified: Tue, 30 Jan 2018 16:14:34 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 1545
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Set-Cookie: HttpOnly;Secure
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 86 x 86, 8-bit/color RGBA, non-interlaced
Size:   1545
Md5:    e7fa001db515490f6ea0ec034d3fabd2
Sha1:   3716661db47853b20f9a55269884a50f35c6f68f
Sha256: 0b57aff9e53fc5a056d7f54c2969df25b9d2761636e218930b93b04364a4d01d
                                        
                                            OPTIONS /api/v3/projects/141580/notices?key=9a0a3519e930259f5886a7af53b0ccaa HTTP/1.1 
Host: airbrake.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://www.sharefile.com
Access-Control-Request-Method: POST

                                         
                                         52.86.197.152
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Headers: Accept,Origin,Content-Type,X-Requested-With
Access-Control-Allow-Methods: OPTIONS,GET,PUT,POST
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-RateLimit-Delay
Date: Thu, 15 Feb 2018 09:03:10 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f1cf058bbadca72f52f35af06ed5489f
Sha1:   d3199ddf4b8783b1eb4b3d7d9f3469b5b46c7dfb
Sha256: b8b1933bf4d532794abdc7e2522a64c3eea8a5d90be5128007a3399e8cfbaee4
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://connect.facebook.net
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: public
Vary: Origin, Accept-Encoding
Access-Control-Allow-Methods: OPTIONS
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-FB-Debug: vejOWvYpfBjDZKQBr/mo7rSW673VpOJi+ZbGBoqB/2smq9NlBqrJ/XDXVK5WwCfmlSB5EF0vzPMpOSrZg1M1Dg==
Date: Thu, 15 Feb 2018 09:03:10 GMT
Connection: keep-alive
Content-Length: 12439


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12439
Md5:    89a5134a1a71fd31713943930b3f3e2a
Sha1:   7f8e3cfe21fa6410d894ae20644df3b380cfb146
Sha256: 04269fc9a8957e0fb3d4e95a4f9a2b1c845ee3bdedabfc911dae9d66ad3d720f
                                        
                                            GET /px?id=850058&seg=8621473&redir=https%3A%2F%2Fsecure.adnxs.com%2Fgetuid%3Fhttps%3A%2F%2Fpixel.mediaiqdigital.com%2Fpixel%3Fpixel_id%3D850058%26uid%3D%24UID&t=2&gtmcb=1381036423 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         185.33.223.198
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 15 Feb 2018 09:03:12 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 2068fc69-867e-4f13-a5a5-e04b996244e1
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 310.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.41:80


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    59c17177db9497ae54ca38c76ecbdd58
Sha1:   e4e5c68dfc93f94a2c68fc03d0a8e33831eb2b82
Sha256: ed09127ec5df5c8dbf5e0ccbd599e3d3c6a86c82991113d0a08660e1db33ab82
                                        
                                            GET /content/dam/sf/newSF/newsf_whatissf.png HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "220409-3d6c-56400a36fa493"
Last-Modified: Tue, 30 Jan 2018 16:13:08 GMT
Server: Apache
Web-Mar-Node: redpshf501
Web-Mar-Region: red
X-UA-Compatible: IE=EmulateIE8
Content-Length: 15724
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  PNG image, 302 x 302, 8-bit/color RGBA, non-interlaced
Size:   15724
Md5:    12c5454a29c2134ae131c367bc1cfe2e
Sha1:   20c1da10c2bfc80818a9f15ff3a2a59e7fbf0a92
Sha256: 09972a5d67ebc4679ccaf0a0bdc7b600963861220ce2babf8a44180cdc851b8a
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:10 GMT
Expires: Thu, 15 Feb 2018 09:03:10 GMT
Cache-Control: private, max-age=3600
Etag: 14286873200881294245
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5880
Md5:    a4836aae7a7bfc6b8d00eee50c76fd87
Sha1:   a37301099038879ccaae8958b1b9623c0940953e
Sha256: 4d7dacd3cb441fc31fe25c4692f98c6b8399ed5019c9cd92b8ebfc8a1eeb8cb0
                                        
                                            POST /api/v3/projects/141580/notices?key=9a0a3519e930259f5886a7af53b0ccaa HTTP/1.1 
Host: airbrake.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/json; charset=UTF-8
Referer: https://www.sharefile.com/?src=emailfooter
Content-Length: 1678
Origin: https://www.sharefile.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         52.86.197.152
HTTP/1.1 201 Created
Content-Type: application/json
                                        
Access-Control-Allow-Headers: Accept,Origin,Content-Type,X-Requested-With
Access-Control-Allow-Methods: OPTIONS,GET,PUT,POST
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-RateLimit-Delay
Content-Encoding: gzip
Date: Thu, 15 Feb 2018 09:03:10 GMT
X-Ratelimit-Delay: 50
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9999
Content-Length: 99
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   99
Md5:    e4f494188c783a98e799377e1a3c10bc
Sha1:   1a730282d0fc20edcc87dcff02d0ba200cbf260a
Sha256: 2fe15825f056595bd48e93fbb8b08a5292410ccb737fc57dce5eb733488c10b5
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:10 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    05aaf94f7cbaa4945c8de3ad49c68290
Sha1:   37b36b94b246973f7df6a41276feb814beb717cf
Sha256: 00141b92debb027d6730db4473470f3f6394c03bc46c50c35b29bc48e6cd6f77
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=552101, public, no-transform, must-revalidate
Last-Modified: Wed, 14 Feb 2018 18:20:42 GMT
Expires: Wed, 21 Feb 2018 18:20:42 GMT
Date: Thu, 15 Feb 2018 09:03:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    31fe22864eb0c0aa1fa497ae4f125411
Sha1:   8864faa0caac9e1e153d393a337817f04858eebe
Sha256: 847c375d4a5ace9016189b227f07c8d340d60540e93d6ea543e4ca8aa6d6e3ca
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:11 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=116715, public, no-transform, must-revalidate
Last-Modified: Thu, 15 Feb 2018 07:10:49 GMT
Expires: Fri, 16 Feb 2018 19:10:49 GMT
Etag: "33c220a1b76cea68ceceb7e0f90fead3c605a7aa"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    abf6e56eb898778910656562ff99f0aa
Sha1:   33c220a1b76cea68ceceb7e0f90fead3c605a7aa
Sha256: a6948a5c9e7ec272239fc83d27f1d63af6c84e5abcda71edbf5674518570b29e
                                        
                                            GET /recaptcha/api2/v1517812337239/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 72525
Date: Wed, 14 Feb 2018 21:30:01 GMT
Expires: Thu, 14 Feb 2019 21:30:01 GMT
Last-Modified: Mon, 05 Feb 2018 21:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 41590
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   72525
Md5:    80358084b2e8ae73e1141f036b6d2724
Sha1:   5b4d4467c78ed934f878dcd139161c561b0136fc
Sha256: d006c9a69452c1f2eeb209a630810dc3cfb4e814899185449c0f44e4c922c874
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:11 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    07a799f4823a43702313a46092337ecf
Sha1:   6179e39f5860c21124da0e756b561ad224419d63
Sha256: b4a82306e0ce4d03bb567c61a6a29d58b4d98b9f91334067b6564a0d4d5c9d23
                                        
                                            GET /tracking.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         88.221.72.114
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Last-Modified: Wed, 14 Feb 2018 08:48:47 GMT
Etag: "42083-383d9-565282dea99c0"
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 66181
Vary: Accept-Encoding
Cache-Control: public, max-age=77053
Expires: Fri, 16 Feb 2018 06:27:24 GMT
Date: Thu, 15 Feb 2018 09:03:11 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   66181
Md5:    5cc158f7eb4071470ec1c16ab0fbfae3
Sha1:   d9782f3906e0efad3b3ad784a365202376834be9
Sha256: f527a849ce6f60cf372b178f6d00df5f3ec261cae9a86c9765efd19caa2a42b9
                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=1091277875 HTTP/1.1 
Host: s.ml-attr.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         68.67.153.60
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.11.10
Date: Thu, 15 Feb 2018 09:03:12 GMT
Content-Length: 162
Connection: keep-alive
Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=1091277875


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    54a37e11c7fc29f705d0731a15daf45e
Sha1:   0f8f853c9e3a2900818e7ffb63decbe4a6296526
Sha256: 2dac60eaff7ba11e6d9c5e9165f76d621f0b61b17b45952f702889dde76f4b38
                                        
                                            GET /activityi;src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter? HTTP/1.1 
Host: 3845646.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:10 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Strict-Transport-Security: max-age=21600
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 15-Feb-2018 09:18:10 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   348
Md5:    9eca07c6171c9483fd5c9fa151d8f182
Sha1:   3b0f378dfec80466bbb2185ef7e3d85f56fd7bb6
Sha256: 9e537ac26f03ac99d2196f7d01831f444f94d1c88b11df0ae5528d394d100800
                                        
                                            GET /etc/designs/sf/css/static/images/favicon.ico HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "520071-47e-56400a4f8bb7d"
Last-Modified: Tue, 30 Jan 2018 16:13:34 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:12 GMT
Date: Thu, 15 Feb 2018 09:03:12 GMT
Content-Length: 947
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   947
Md5:    efdf11bdc9f0ac6d59bc5a4a0a2fc3e2
Sha1:   5a045c4de00224a5c1ab889a79ea151d1cbc6b2f
Sha256: 81cf3e96bc93a7de56099b5abcb74d8d777264d3b0bba9d4898b2d9fa1450cb4
                                        
                                            GET /etc/designs/sf/css/static/fonts/citrixsans-regular.woff HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/etc/designs/sf/css/app.css
Cookie: HttpOnly; HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Etag: "5200a5-668a-56400a8b7e81b:dtagent10135180105125946gaG8"
Last-Modified: Tue, 30 Jan 2018 16:14:35 GMT
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 26250
Cache-Control: public, max-age=86400
Expires: Fri, 16 Feb 2018 09:03:09 GMT
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   26250
Md5:    c8f2d5dc26ba3252f4e855c999550e69
Sha1:   7d53a7281e03d51c25039ab8ec5acd21eefc7eaf
Sha256: a1b0fdd10238a985ee45a051159dcba0f296b7f468213a31fb32d50e74ecfe18
                                        
                                            GET /recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1517812337239&theme=light&size=normal&cb=snwlhoomz6h4 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 15 Feb 2018 09:03:12 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   9635
Md5:    e8c4b73e2cf926127e4235ef5f3b968a
Sha1:   431b743a036b894a42e016e717931701d7ee7345
Sha256: 3208325ddd93a33363c5cc8b455651d0903641b7e01310480c2171eb175f5dbf
                                        
                                            GET /js/geo2.js HTTP/1.1 
Host: cdn3.optimizely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         88.221.73.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: AmazonS3
Content-Length: 286
x-amz-id-2: in0ReGG4yvS2yKdq2QuUvf1uwBW2pwADW+Id+hmjmCbTXY6wHTR6yHXdhtT7TpldL54KCC52xmw=
x-amz-version-id: Y1BKPK.c9lIaZx2uYj8JMWZye_vJfrh9
Etag: "adadfc5d7afd13e353d9d52cec1c7827"
x-amz-request-id: D680776D6C07B8BC
Cache-Control: max-age=28166
Date: Thu, 15 Feb 2018 09:03:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   286
Md5:    f915d3de6ec19814c490d863512e1c00
Sha1:   ed496d06ef124156a3cbc8f0a8b0e4f23812e05f
Sha256: 5795f31cf669ef422d9b6454237d757e88b329b0c1f0c4709859e34486b63b72
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 07:28:22 GMT
Expires: Thu, 15 Feb 2018 09:28:22 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 5690
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /webevents/visitWebPage?_mchNc=1518685390053&_mchCn=&_mchId=027-LMP-993&_mchTk=_mch-sharefile.com-1518685390052-30412&_mchHo=www.sharefile.com&_mchPo=&_mchRu=%2F&_mchPc=https%3A&_mchVr=151&_mchHa=&_mchRe=&_mchQp=src%3Demailfooter HTTP/1.1 
Host: 027-lmp-993.mktoresp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Origin: https://www.sharefile.com

                                         
                                         199.15.215.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Feb 2018 09:03:12 GMT
Server: Apache
Content-Length: 43
Access-Control-Allow-Origin: *
Last-Modified: Thu, 15 Feb 2018 03:03:12 -0600
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Set-Cookie: BIGipServersjpweb-mch_https=!sazw77CAAajFVW1XoVZ+rvKZImqoZKhQa4luh8b8CA7lBe8p8unJms5BfVvtOngrQ+N2vbYfq/qnXCM=; path=/; Httponly; Secure


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    7e1a751d6f8efada000e3df3aac35514
Sha1:   4c73d56e1221bcee6aca2e954b71b9d6216de36e
Sha256: cbbd42bb1d88693e6805bd9d676840424af5ecf3e13d874fd06e6b57d53d8d40
                                        
                                            GET /ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/activityi;src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter?

                                         
                                         172.217.21.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:12 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   350
Md5:    f7427ff7315f2b3bf3a86c9975ec807f
Sha1:   5e18d7ac0a2ba5836de5b74d801ea9fcab437105
Sha256: f30c60b7ae233424cb9e0f0844ff99c5832ac2050ea072d460109b3759a863aa
                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dsharefile.com%26pId%3d%24UID&gtmcb=1091277875 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         185.33.223.198
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 15 Feb 2018 09:03:14 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dsharefile.com%2526pId%253d%2524UID%26gtmcb%3D1091277875
AN-X-Request-Uuid: 0639a1f4-0747-429e-9314-48c1a2e61eb6
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 16-Feb-2018 09:03:14 GMT; Domain=.adnxs.com; HttpOnly uuid2=4583486350996656689; Path=/; Max-Age=7776000; Expires=Wed, 16-May-2018 09:03:14 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 310.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.246:80


--- Additional Info ---
                                        
                                            GET /recaptcha/api2/v1517812337239/styles__ltr.css HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1517812337239&theme=light&size=normal&cb=snwlhoomz6h4

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 90709
Date: Thu, 15 Feb 2018 07:03:35 GMT
Expires: Fri, 15 Feb 2019 07:03:35 GMT
Last-Modified: Mon, 05 Feb 2018 21:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 7177
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   90709
Md5:    914854346a895867b24c9c07317b5afc
Sha1:   2337b08a0f45f64d542aee2846aa6376f56753aa
Sha256: 758d4ff3005cb5837802b06b502f51f8aabe26c143c8ea17aef958c5dc441cce
                                        
                                            GET /ads/user-lists/1068539930/?random=1518685390343&cv=9&fst=1518685200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=1199508179&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.207.196
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.no/ads/user-lists/1068539930/?random=1518685390343&cv=9&fst=1518685200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=1199508179&resp=GooglemKTybQhCsO&ipr=y&ulfeg=n
Cache-Control: private, max-age=43200
Date: Thu, 15 Feb 2018 09:03:12 GMT
Expires: Thu, 15 Feb 2018 09:03:12 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 724
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   724
Md5:    f63fde231509369ac3f180b4a0c83b48
Sha1:   3b27a262a0a2b825f92062f5bb5a3becb31b748d
Sha256: c1941a8e6d962bfc06c8a4679a3ec5295ca5cc8b1d7ff00d00f1d98c08d19248
                                        
                                            GET /plugins/ua/linkid.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 856
Date: Thu, 15 Feb 2018 08:21:44 GMT
Expires: Thu, 15 Feb 2018 09:21:44 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 2488
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   856
Md5:    99103567b5f940f76e050fa08e175ab0
Sha1:   5a7462a01efb639b746f31cddd46af6fa8e21567
Sha256: 3fac730f3740ba563c83c99c28f49ebd79e72d180b8bad22f8b546781716f974
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b899f65a96df5993811dab574d96a9a7
Sha1:   faf0e79dae7383d724ee4429ce347b2ac05d4685
Sha256: ac2451bddbe80d5731f69eb352bb38c6c26f882a41f0389b0f3a9132a8d3bdfa
                                        
                                            GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dsharefile.com%2526pId%253d%2524UID%26gtmcb%3D1091277875 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: sess=1; uuid2=4583486350996656689

                                         
                                         185.33.223.198
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 15 Feb 2018 09:03:14 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://attr.ml-api.io/?domain=sharefile.com&pId=4583486350996656689&gtmcb=1091277875
AN-X-Request-Uuid: 1acfad3b-deae-42bd-819c-f77338f7126c
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 16-Feb-2018 09:03:14 GMT; Domain=.adnxs.com; HttpOnly uuid2=4583486350996656689; Path=/; Max-Age=7776000; Expires=Wed, 16-May-2018 09:03:14 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 310.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.55:80


--- Additional Info ---
                                        
                                            GET /collect?v=1&_v=j66&a=951462617&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&ul=en-us&de=UTF-8&dt=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=aGBAgEQi~&jid=178646953&gjid=1912921722&cid=1704250082.1518685393&uid=1524932492178o0toTOy&tid=UA-142592-2&_gid=1630336267.1518685393&z=145595600 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 15 Feb 2018 07:03:28 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 7185
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adservice.google.com/ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /s/roboto/v18/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1517812337239&theme=light&size=normal&cb=snwlhoomz6h4
Origin: https://www.google.com

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19824
Date: Mon, 12 Feb 2018 19:00:47 GMT
Expires: Tue, 12 Feb 2019 19:00:47 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 223346
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            GET /recaptcha/api2/bframe?hl=en&v=v1517812337239&k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&cb=sgo4cq8cupk7 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 15 Feb 2018 09:03:13 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   706
Md5:    126e7ae1839aaf53a5f0432c65e5d6b3
Sha1:   999f0774a61ad97d4ed46a81e498d3af5384e74f
Sha256: 75364a02e578e970a3bdbd58fc87a9a28b99c628f07aae86f70bb5bba50ca974
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:13 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 03:21:16 GMT
Expires: Mon, 19 Feb 2018 03:21:16 GMT
Etag: D102FDEE319F6D8CC9E8A9FDF0F40A89ADFD03B9
Cache-Control: max-age=324482,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    cd64143b4bad7a6c1f56c7af2327eb65
Sha1:   d102fdee319f6d8cc9e8a9fdf0f40a89adfd03b9
Sha256: 059ddd15ff4941b16c36c431680aae1aa357b83b54004d7b45a2e91f3193bdb0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:14 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: C145ECF13A6794096B64D7A14DD896111891AB21
Cache-Control: max-age=353858,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp17
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    c447c5169c7b08fa61a92268aa1833cd
Sha1:   c145ecf13a6794096b64d7a14dd896111891ab21
Sha256: be4e291ac5e594e5dc2df2892e833d7f668f5623daaab67cbb1b116543f1d89a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:14 GMT
Server: Apache
Last-Modified: Mon, 12 Feb 2018 11:30:53 GMT
Expires: Mon, 19 Feb 2018 11:30:53 GMT
Etag: A32733318C0757E7E15BCFE416EE0611FBC2B84D
Cache-Control: max-age=353858,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp20
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7f5c6479a459bb50ceaa9705d300762b
Sha1:   a32733318c0757e7e15bcfe416ee0611fbc2b84d
Sha256: 2b27b2dd62db5b06bcdf8ecedeab57fb595b54ae7ec58e7be99923c30b442886
                                        
                                            GET /ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter HTTP/1.1 
Host: 3845646.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adservice.google.com/ddm/fls/i/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=1;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:13 GMT
Expires: Thu, 15 Feb 2018 09:03:13 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmOZnvWF0mYbwlrRCEWFpv0K_wvUstSg2IsPXBuFEmMFrCEm9FDb86ajhRW; expires=Sat, 15-Feb-2020 09:03:13 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   326
Md5:    f99636ac48cf65b12330f3f576d5ad60
Sha1:   eb5790e9ac4f962e6c9835fd11a4d7031da1b1d1
Sha256: 3024abcf23d9141a0dd534caca9de494a813d1e19aaa3c52b9adf85f27ccc23f
                                        
                                            GET /js/bg/nKRjRc4YcECnyiAI_hQFBwsynTqGTfSrkSzGChWXm_o.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?k=6LdRBigTAAAAAB3JGiBY5VmyD1sdwSDToflcr6Gi&co=aHR0cHM6Ly93d3cuc2hhcmVmaWxlLmNvbTo0NDM.&hl=en&v=v1517812337239&theme=light&size=normal&cb=snwlhoomz6h4

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4986
Date: Wed, 07 Feb 2018 15:58:46 GMT
Expires: Thu, 07 Feb 2019 15:58:46 GMT
Last-Modified: Mon, 05 Feb 2018 09:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 666267
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4986
Md5:    78699887925c85b7d9b676d5e09fc65e
Sha1:   d58e5d86213665d497cc87e4d69169119b8edabd
Sha256: bb6015c535a57082207d71ae910b32b74aec80ddc3fc008df049265b63716137
                                        
                                            GET /recaptcha/api2/logo_48.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/api2/v1517812337239/styles__ltr.css

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 2228
Date: Thu, 15 Feb 2018 07:03:36 GMT
Expires: Thu, 22 Feb 2018 07:03:36 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 7177
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   2228
Md5:    ef9941290c50cd3866e2ba6b793f010d
Sha1:   4736508c795667dcea21f8d864233031223b7832
Sha256: 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
                                        
                                            GET /ads/user-lists/1068539930/?random=1518685390343&cv=9&fst=1518685200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=1199508179&resp=GooglemKTybQhCsO&ipr=y&ulfeg=n HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Feb 2018 09:03:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /recaptcha/api2/webworker.js?hl=en&v=v1517812337239 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Thu, 15 Feb 2018 09:03:13 GMT
Date: Thu, 15 Feb 2018 09:03:13 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   98
Md5:    2e507824b24e6f1ae2fa07dbcd3d685f
Sha1:   07bb0dc156d879179b8c81e050eabb5697da8aa6
Sha256: eea6752f50ad9720c4f1b690aa6dd8e762a0d707c80fa650450fb4cb8a90e7a1
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j66&tid=UA-142592-2&cid=1704250082.1518685393&jid=178646953&uid=1524932492178o0toTOy&gjid=1912921722&_gid=1630336267.1518685393&_u=aGBAgEQi~&z=1811182320 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: test_cookie=CheckForPermission

                                         
                                         209.85.233.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=1704250082.1518685393&jid=178646953&_v=j66&z=1811182320
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 15 Feb 2018 09:03:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 364
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   364
Md5:    dfd60c8f49272f68377f2e21841b75e5
Sha1:   9547afd023692e2c146b8c2ee52ad5646ab53229
Sha256: 5e659b0e1434df44e8138a00556bae131ba153c7caf3e1cf0bab191976c096f2
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=1704250082.1518685393&jid=178646953&_v=j66&z=1811182320 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         216.58.207.196
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=1704250082.1518685393&jid=178646953&_v=j66&z=1811182320&slf_rd=1&random=2035414857
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-142592-2&cid=1704250082.1518685393&jid=178646953&_v=j66&z=1811182320&slf_rd=1&random=2035414857 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:14 GMT
Etag: "5a850e03-1d7"
Expires: Sat, 17 Feb 2018 09:03:14 GMT
Last-Modified: Thu, 15 Feb 2018 04:35:15 GMT
Server: ECS (arn/4691)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b52f288bfd31edb06dc8d4ec66a573ca
Sha1:   bb7894c8c74cea560f54e3068623fab3f2b24727
Sha256: 7c39b0ff2924f4e8a9b62e9c94a3fe58f8aea2362b71591302d18d3f43c71d1c
                                        
                                            GET /?domain=sharefile.com&pId=4583486350996656689&gtmcb=1091277875 HTTP/1.1 
Host: attr.ml-api.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         52.85.240.84
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 4
Connection: keep-alive
Date: Thu, 15 Feb 2018 09:03:14 GMT
x-amzn-RequestId: 0e3b72cb-122f-11e8-93f4-a1ac8b4bf5a1
X-Amzn-Trace-Id: sampled=0;root=1-5a854cd2-99936df0be105e17b72ab223
X-Cache: Miss from cloudfront
Via: 1.1 1cc4305a3ce000ca199328864ca1c98e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 8SrQyqp6Y3lQ1nPAFBesDqg2-PjNrIuLpi6ulgBYaVWK6SkqRViUHA==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    37a6259cc0c1dae299a7866489dff0bd
Sha1:   2be88ca4242c76e8253ac62474851065032d6833
Sha256: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
                                        
                                            GET /16637/pix.js?t=r&for=Sharefile HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         52.45.11.188
HTTP/1.1 302 FOUND
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Date: Thu, 15 Feb 2018 09:03:14 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Location: https://magnetic.t.domdex.com/16637/pix.js?t=r&for=Sharefile&cc=1
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Set-Cookie: cc=1; Domain=.domdex.com; Path=/ PAD=6b3951975a3d463281479ecfac8d0a7f; Domain=.domdex.com; expires=Fri, 15-Feb-2019 09:03:14 GMT; Max-Age=31536000; Path=/
Content-Length: 353
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   353
Md5:    73045eeb1e1059fdb01426ef84337e87
Sha1:   15276dad911d0220f322b5b7db93a0848a9fc719
Sha256: baaaafeec81ec367af54d67abaea596db15dfbfafd04dd0ffef3249aff0c1367
                                        
                                            GET /16637/pix.js?t=r&for=Sharefile&cc=1 HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: cc=1; PAD=6b3951975a3d463281479ecfac8d0a7f

                                         
                                         52.45.11.188
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Content-Encoding: gzip
Date: Thu, 15 Feb 2018 09:03:15 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Set-Cookie: PIXELtbbtyr=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELnccarkhf=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELehovpba=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELrkryngr=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELgncnq=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELpbagrkgjro=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELpnfnyr=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/ PIXELthzthz=1; Domain=.domdex.com; expires=Thu, 22-Feb-2018 09:03:15 GMT; Max-Age=604800; Path=/
Content-Length: 770
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   770
Md5:    04dd4fbb85c3ee69c87246c520966604
Sha1:   1c4281fa5691e9be20cdc94a1f68141cb4483963
Sha256: 0cf5da7cf1a12f06a2201dfee62a428dff27016bf82598dc5efdb351f16f07f3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:15 GMT
Etag: "5a84e87b-1d7"
Expires: Sat, 17 Feb 2018 09:03:15 GMT
Last-Modified: Thu, 15 Feb 2018 01:55:07 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    25dc65bb92480773d20effe4587dfd92
Sha1:   83c09b6e84e4923f07201589ed181c412ec9b671
Sha256: a977fab59ff95845ba92e027c72c835db01006dd83ea442dd392f53cfb412ff3
                                        
                                            GET /pxj?bidder=143&seg=530156&action=setuid(%226b3951975a3d463281479ecfac8d0a7f%22) HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: sess=1; uuid2=4583486350996656689

                                         
                                         185.33.223.198
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 15 Feb 2018 09:03:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 2597360f-e3ca-41a5-b3c5-9a5ed8330b4f
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 310.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.223.244:80


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 15 Feb 2018 09:03:15 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=120041, public, no-transform, must-revalidate
Last-Modified: Thu, 15 Feb 2018 08:09:14 GMT
Expires: Fri, 16 Feb 2018 20:09:14 GMT
Etag: "f378e776d742117a39082350527f9777fe909f8d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    fb41a15f961bb446be360bf9c58d0b95
Sha1:   f378e776d742117a39082350527f9777fe909f8d
Sha256: 48100f7ad02afaa317512d1e5060a310ed90175628dad57388d6fe7d880eb60d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:15 GMT
Etag: "5a84f560-139"
Expires: Sat, 17 Feb 2018 09:03:15 GMT
Last-Modified: Thu, 15 Feb 2018 02:50:08 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 313


--- Additional Info ---
Magic:  data
Size:   313
Md5:    3d2dbc684e813ffed37cf18239efa8f8
Sha1:   1b65c27aab47d41091cc4db77351b371a9d89c11
Sha256: 30c7a9701bf8f0aed9ab88c575838c76d2fe1b41898743a6debb99ea205caabb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:15 GMT
Etag: "5a851f8c-1d7"
Expires: Sat, 17 Feb 2018 09:03:15 GMT
Last-Modified: Thu, 15 Feb 2018 05:50:04 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0aa207134030f98f9a52d54e1be576d4
Sha1:   2550abedd79428cb657000f4cc8bb2d4ce87edb1
Sha256: f3af1d3d9e9685d4a280f7ae64e1d3c55fd437b3ad084dbbda275c28cd0c1193
                                        
                                            GET /pixel?google_nid=magnetic&google_cm&google_sc&google_hm=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: IDE=AHWqTUmOZnvWF0mYbwlrRCEWFpv0K_wvUstSg2IsPXBuFEmMFrCEm9FDb86ajhRW

                                         
                                         216.58.211.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://magnetic.t.domdex.com/return/google?google_gid=CAESENnu_ETk6u9U5OoF-L6EzIQ&google_cver=1
Date: Thu, 15 Feb 2018 09:03:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 297
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   297
Md5:    74a206614fc3e1d85b9523602d6c5f18
Sha1:   750f6e7f92252f0ee034c4b33a6f961589b71583
Sha256: cd2d208ed556798db25585c912f139bde65dc694898c0abba9914ef11cc92858
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:15 GMT
Etag: "5a84eacf-1d7"
Expires: Sat, 17 Feb 2018 09:03:15 GMT
Last-Modified: Thu, 15 Feb 2018 02:05:03 GMT
Server: ECS (arn/4691)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d2c18dcae770274e40899f30fab8679e
Sha1:   c39e5f23ab11f8ae0eed5d9dd725c8ddd6726300
Sha256: cd69720bd1b6130d63c2e2bd5202973c8fd86a53c8a2f35f0fe81aa6c3bb232d
                                        
                                            GET /bh/rtset?do=add&pid=548607&ev=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: bh.contextweb.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         151.101.128.166
HTTP/1.1 200 OK
Content-Type: image/gif;charset=iso-8859-1
                                        
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Set-Cookie: V=GbxBsNDzNV1p;Path=/;Domain=.contextweb.com;Expires=Sun, 10-Feb-2019 09:03:15 GMT;Max-Age=31104000 pb_rtb_ev=3-l4s|4Ec.0.6b3951975a3d463281479ecfac8d0a7f;Path=/;Domain=.contextweb.com;Expires=Fri, 15-Feb-2019 09:03:15 GMT;Max-Age=31536000 sto-id-20480-bh=DHANNMAKJCBP; Domain=contextweb.com; Expires=Thu, 15-Feb-2018 09:18:15 GMT; Path=/
Expires: -1
CW-Server: ams-bh00
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Server: Jetty(9.4.6.v20170531)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Thu, 15 Feb 2018 09:03:15 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-fra19141-FRA
X-Cache: MISS
X-Cache-Hits: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    889bc1fffc025af4685839fb516a0b8b
Sha1:   7f105137a4eafe93213ecd8cc34dd907c340467c
Sha256: d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         13.32.218.34
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 15 Feb 2018 09:03:16 GMT
Etag: "5a850378-1d7"
Expires: Sat, 17 Feb 2018 09:03:16 GMT
Last-Modified: Thu, 15 Feb 2018 03:50:16 GMT
Server: ECS (lga/1390)
X-Cache: Miss from cloudfront
Via: 1.1 2fe707f3cc1dc569687bcdf81697e284.cloudfront.net (CloudFront)
X-Amz-Cf-Id: qKjV6tGRJm5n89UQoqFU2EPlJrwxYREiNU-24YP9I9TCoBH3k7ceHg==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f1646b8cda96f8e6ea406d65702f0c53
Sha1:   736dc34ec26f1bd040002244185be9033314d6a3
Sha256: 7c4aaeed4f671e7f671b5de7c12da6556e6cf8ced776e300aafa6a0984f0a0b5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         52.85.243.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Thu, 15 Feb 2018 09:03:16 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.1/2016-04-26)
X-Cache: Miss from cloudfront
Via: 1.1 23c0f38b3232ce0b791a0dc79e0ef643.cloudfront.net (CloudFront)
X-Amz-Cf-Id: O3KGuvyEM7XwdiX0FhxwwiEaOiGBDTof87HmVNlO_OJ8mb4v9Ao_oA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    c769ee99e5bef4a081286e585d4819d9
Sha1:   388ca8ba919bfdbf56ccb1e2f145d5109dc9582b
Sha256: 132cfa16261d6ddb6af975313d88c8bb73d3beb52cc09d6c303e92779e0fde44
                                        
                                            GET /tapestry/1?ta_partner_id=1032&ta_partner_did=6b3951975a3d463281479ecfac8d0a7f&ta_format=png HTTP/1.1 
Host: tapestry.tapad.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         185.57.60.185
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.11.3
Date: Thu, 15 Feb 2018 09:03:16 GMT
Content-Length: 95
Connection: keep-alive
Set-Cookie: TapAd_TS=1518685396082;Expires=Mon, 16 Apr 2018 09:03:16 GMT;Path=/;Domain=.tapad.com TapAd_DID=0f186526-122f-11e8-b1e1-0242ac110004;Expires=Mon, 16 Apr 2018 09:03:16 GMT;Path=/;Domain=.tapad.com
P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 1-bit colormap, non-interlaced
Size:   95
Md5:    71a50dbba44c78128b221b7df7bb51f1
Sha1:   0ec63b140374ba704a58fa0c743cb357683313dd
Sha256: 3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1416
Content-Transfer-Encoding: binary
Cache-Control: max-age=313137, public, no-transform, must-revalidate
Last-Modified: Mon, 12 Feb 2018 00:00:38 GMT
Expires: Mon, 19 Feb 2018 00:00:38 GMT
Date: Thu, 15 Feb 2018 09:03:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1416
Md5:    246ba6684916d0dc95a43b5e1cdbcd70
Sha1:   2e164e4435284a3847dbcda452572cf23eeb8094
Sha256: 8dc2ad95736442f6519e3f84c91e7184e78b16af567be499aaee58f9586669d9
                                        
                                            GET /load/?p=204&g=1103&buid=6b3951975a3d463281479ecfac8d0a7f&j=0 HTTP/1.1 
Host: loadm.exelator.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         216.52.1.12
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Thu, 15 Feb 2018 09:03:15 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache
X-Powered-By: Undertow/1
P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
Location: https://load77.exelator.com/pixel.gif
Access-Control-Allow-Credentials: true


--- Additional Info ---
                                        
                                            GET /tap.php?v=14256&nid=2682&expires=30&put=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         213.19.162.90
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=14256&nid=2682&expires=30&put=6b3951975a3d463281479ecfac8d0a7f
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 15 Feb 2018 09:03:15 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /usersync?b=mag&i=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: rtb.gumgum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         54.154.124.36
HTTP/1.1 200 OK
Content-Type: image/gif;charset=UTF-8
                                        
Date: Thu, 15 Feb 2018 09:03:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
P3P: CP="This is not a P3P policy"
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    cb4a250eaa01b7a9c7ba08ff8f03cdc8
Sha1:   b6ea87c61df363b0e9dffd790563bb07e7d14bf0
Sha256: ad1eaeafde714b48cb15678bf92e82cdcb0ba1ca559b69e376639dfbe916fd2e
                                        
                                            GET /rum?cm_dsp_id=48&external_user_id=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         88.221.73.188
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=48&external_user_id=6b3951975a3d463281479ecfac8d0a7f&C=1
Content-Length: 295
Expires: Thu, 15 Feb 2018 09:03:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 15 Feb 2018 09:03:16 GMT
Connection: keep-alive
Set-Cookie: CMID=WoVM1LlQJuQAACOAiIsAAABc;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2019 09:03:16 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Wed, 16 May 2018 09:03:16 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   295
Md5:    b1c0dbbb17d3fe316c9727e399a13627
Sha1:   e53e21d3ad1ce76ea00a75c4f08c25af03560e5d
Sha256: ab929438196a946f61b18941f1e3765843600be75c9433d58c11015f99105bbe
                                        
                                            GET /tap.php?cookie_redirect=1&v=14256&nid=2682&expires=30&put=6b3951975a3d463281479ecfac8d0a7f HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: c=1

                                         
                                         213.19.162.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: NLdOxl8o66jT5BPT7vz1iA
Set-Cookie: rpb=14256%3D1; Domain=.rubiconproject.com; Expires=Sat, 17-Mar-2018 09:03:16 GMT; Path=/ put_2682=6b3951975a3d463281479ecfac8d0a7f; Domain=.rubiconproject.com; Expires=Sat, 17-Mar-2018 09:03:16 GMT; Path=/ rpx=14256%3D71209%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Sat, 17-Mar-2018 09:03:16 GMT; Path=/ khaos=JDOA2NO8-1L-1FT0; Domain=.rubiconproject.com; Expires=Thu, 16-Aug-2018 21:03:16 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Thu, 15 Feb 2018 09:03:15 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "36792368E043C7955475271D67E882DAD9732FE52BFF0335416B90D2DC4A1D5B"
Last-Modified: Mon, 12 Feb 2018 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6061
Expires: Thu, 15 Feb 2018 10:44:17 GMT
Date: Thu, 15 Feb 2018 09:03:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    f69ef0928fa82116639fd2b5866a56c8
Sha1:   be14c8f595eab7a072c5b74dcd8d62bc4550d4e7
Sha256: 36792368e043c7955475271d67e882dad9732fe52bff0335416b90d2dc4a1d5b
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 14 Feb 2018 22:32:50 GMT
Etag: "e530114b17df1959a53015d8cdcb357f8b760f45"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=35260
Expires: Thu, 15 Feb 2018 18:50:56 GMT
Date: Thu, 15 Feb 2018 09:03:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    7e4a8ac7d6ef61fb5551f6f46edc536a
Sha1:   e530114b17df1959a53015d8cdcb357f8b760f45
Sha256: c1b733e0398c15907e39caf4355c2968e023dbaa430d7166efcbc848a58af66e
                                        
                                            GET /rum?cm_dsp_id=48&external_user_id=6b3951975a3d463281479ecfac8d0a7f&C=1 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: CMID=WoVM1LlQJuQAACOAiIsAAABc; CMPS=3259

                                         
                                         88.221.73.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Expires: Thu, 15 Feb 2018 09:03:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 15 Feb 2018 09:03:16 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=WoVM1LlQJuQAACOAiIsAAABc;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2019 09:03:16 GMT CMPS=3259;domain=casalemedia.com;path=/;expires=Wed, 16 May 2018 09:03:16 GMT CMPRO=1107;domain=casalemedia.com;path=/;expires=Wed, 16 May 2018 09:03:16 GMT CMST=WoVM1FqFTNQA;domain=casalemedia.com;path=/;expires=Fri, 16 Feb 2018 09:03:16 GMT CMDD=;domain=casalemedia.com;path=/;expires=Fri, 16 Feb 2018 09:03:16 GMT CMRUM3=305a854cd427606b3951975a3d463281479ecfac8d0a7f;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2019 09:03:16 GMT CMSC=WoVM1A**;domain=casalemedia.com;path=/;


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /return/google?google_gid=CAESENnu_ETk6u9U5OoF-L6EzIQ&google_cver=1 HTTP/1.1 
Host: magnetic.t.domdex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter
Cookie: cc=1; PAD=6b3951975a3d463281479ecfac8d0a7f; PIXELtbbtyr=1; PIXELnccarkhf=1; PIXELehovpba=1; PIXELrkryngr=1; PIXELgncnq=1; PIXELpbagrkgjro=1; PIXELpnfnyr=1; PIXELthzthz=1

                                         
                                         52.45.11.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Date: Thu, 15 Feb 2018 09:03:16 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
P3P: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: nginx/1.12.2
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    4bd992dae2dbbe35b4ec51458103f729
Sha1:   64cd0b1d593d4ca9745db50a88d1047a7c8cd154
Sha256: db5d64a9ea32ed3abb874f295003ef2465cecc2f669efe951930e182c34a5013
                                        
                                            GET /pixel.gif HTTP/1.1 
Host: load77.exelator.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3845646.fls.doubleclick.net/ddm/fls/r/src=3845646;type=landi0;cat=sfhp;ord=1;num=2565362585916;gtm=G2d;_dc_1=3;~oref=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter

                                         
                                         185.76.9.19
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Feb 2018 09:03:16 GMT
Content-Length: 43
Connection: keep-alive
Last-Modified: Wed, 25 Oct 2017 17:03:56 GMT
Etag: "59f0c3fc-2b"
Access-Control-Allow-Origin: *
Server: CDN77-Turbo
X-Edge-IP: 185.76.9.10
X-Edge-Location: stockholmSE
X-Cache: HIT
X-Age: 837678
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /?src=emailfooter HTTP/1.1 
Host: www.sharefile.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter
Cookie: HttpOnly; optimizelyEndUserId=oeu1518685383156r0.399457022848144; optimizelySegments=%7B%22175091490%22%3A%22direct%22%2C%226781623442%22%3A%22true%22%2C%22245471469%22%3A%22none%22%2C%22174979504%22%3A%22ff%22%2C%22175094193%22%3A%22false%22%7D; optimizelyBuckets=%7B%7D; optimizelyPendingLogEvents=%5B%22n%3Dhttps%253A%252F%252Fwww.sharefile.com%252F%253Fsrc%253Demailfooter%26u%3Doeu1518685383156r0.399457022848144%26wxhr%3Dtrue%26time%3D1518685383.185%26f%3D8319120065%2C8513231905%2C10238430889%2C8514252506%2C8546741223%2C8607550983%2C9738173321%2C8545661644%2C8573102023%2C9189590451%2C6257010330%2C8561015617%2C8360262622%26g%3D%22%5D

                                         
                                         104.123.137.58
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: Apache
Web-Mar-Node: redpshf502
Web-Mar-Region: red
X-OneAgent-JS-Injection: true
X-UA-Compatible: IE=EmulateIE8
Content-Length: 18950
Cache-Control: public, max-age=0
Expires: Thu, 15 Feb 2018 09:03:08 GMT
Date: Thu, 15 Feb 2018 09:03:08 GMT
Connection: keep-alive
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31449600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
                                        
                                            GET /pagead/viewthroughconversion/1068539930/?random=1518685390343&cv=9&fst=1518685390343&num=1&fmt=3&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=G2d&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.sharefile.com/?src=emailfooter

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 15 Feb 2018 09:03:12 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1068539930/?random=1518685390343&cv=9&fst=1518685200000&num=1&fmt=3&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=https%3A%2F%2Fwww.sharefile.com%2F%3Fsrc%3Demailfooter&tiba=Citrix%20ShareFile%3A%20Securely%20Sync%2C%20Store%20and%20Share%20Files&async=1&cdct=2&is_vtc=1&random=1199508179&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 15-Feb-2018 09:18:12 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---