abm.mailshake.co/prod/2a7458b7-7294-4ab8-803c-d0843ce9ccec/2e966895-4745-4b89-8760-aaaf0e3c6c87
302 Found 332 B URL HTTP/1.1 abm.mailshake.co/prod/2a7458b7-7294-4ab8-803c-d0843ce9ccec/2e966895-4745-4b89-8760-aaaf0e3c6c87
IP
File type HTML document, ASCII text, with very long lines (332), with no line terminators
Hash f04c5bf07d64e825039296354bc50500
df196133b81df4a08bc69a5af5c20d9e9e2b427a
019a5e7df0483261ecb732ab07d767c6f0454302c97fa75d60b5f52210b2f957
Analyzer Verdict Alert fortinet Phishing
GET /prod/2a7458b7-7294-4ab8-803c-d0843ce9ccec/2e966895-4745-4b89-8760-aaaf0e3c6c87 HTTP/1.1
Host: abm.mailshake.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Thu, 22 Dec 2022 22:44:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 332
Connection: keep-alive
X-Powered-By: Express
Location: https://integrations.api.mailshake.com/beacon/click?emailID=2a7458b7-7294-4ab8-803c-d0843ce9ccec&linkID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Vary: Accept
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13612
Expires: Fri, 23 Dec 2022 02:31:13 GMT
Date: Thu, 22 Dec 2022 22:44:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b8fbcd7ca1a893d05677318a8a198e7a
0851654c21f6e3741887e7deab8098c1dc56f33c
edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6710
Expires: Fri, 23 Dec 2022 00:36:11 GMT
Date: Thu, 22 Dec 2022 22:44:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32167242c3bbe7e45a2a865279df94a6
d03436f418ff77d50a553daa892c05e0725ba908
d5578d537296da18f3f349a98465e9fe930dca60a8ed62c183e9c9f6eb53f493
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5578D537296DA18F3F349A98465E9FE930DCA60A8ED62C183E9C9F6EB53F493"
Last-Modified: Wed, 21 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16620
Expires: Fri, 23 Dec 2022 03:21:21 GMT
Date: Thu, 22 Dec 2022 22:44:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 22 Dec 2022 21:46:04 GMT
content-type: application/json
age: 3497
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aFr5duTXoIPL8Rf9n+QRKx213cLczbS6olO/moY2B3fDaqE5lrRAQROJxPPtLvnX7hsP5prbQzG23KgZhw8Kkg==
x-amz-request-id: 5EBTAPTBQCPMHD8W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Dec 2022 21:53:49 GMT
age: 3032
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Dec 2022 22:44:21 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 47aa1e9a178ae16fe69dd2e5fd7afa64
6ccea7bd1461ccf9e62c773aec4770ecc6fad068
29ea00cd53cd5aee2705be349959b27491b9f43ebad4ba27e74d6dd082935b81
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111904
Date: Thu, 22 Dec 2022 22:44:21 GMT
Etag: "63a3efe5-1d7"
Expires: Sat, 24 Dec 2022 05:49:25 GMT
Last-Modified: Thu, 22 Dec 2022 05:49:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vLICM5ASFD48xkDQFFn9TO_jE1EK_jfpNvR-lDxxjTePavRo7kSODw==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 22 Dec 2022 22:08:02 GMT
age: 2179
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
integrations.api.mailshake.com/beacon/click?emailID=2a7458b7-7294-4ab8-803c-d0843ce9ccec&linkID=2e966895-4745-4b89-8760-aaaf0e3c6c87
302 Found 188 B URL HTTP/2 integrations.api.mailshake.com/beacon/click?emailID=2a7458b7-7294-4ab8-803c-d0843ce9ccec&linkID=2e966895-4745-4b89-8760-aaaf0e3c6c87
IP
File type HTML document, ASCII text, with no line terminators
Hash dc6547baa97a4fc9eedf936418e9227c
b0450db916555e76bca55a7c1e13f0e4d8fdf456
133262d77854eb5ad04b0837256444c9ca434f1a55905db69c29e0e57a29183e
GET /beacon/click?emailID=2a7458b7-7294-4ab8-803c-d0843ce9ccec&linkID=2e966895-4745-4b89-8760-aaaf0e3c6c87 HTTP/1.1
Host: integrations.api.mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 22 Dec 2022 22:44:21 GMT
content-type: text/html; charset=utf-8
content-length: 188
location: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
x-powered-by: Express
vary: Origin, Accept, Accept-Encoding
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 70a7b165f99b2b8fa0dc98318a7158d7
4d924f7febab9c8fe3fe9199e8879fd6ad892575
c5e0e414c34f2f328b487ae72b21a12a1b50d952aa1a31fb6314b4e700d27e05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 82
Cache-Control: max-age=123831
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:21 GMT
Etag: "63a41e2a-1d7"
Expires: Sat, 24 Dec 2022 09:08:12 GMT
Last-Modified: Thu, 22 Dec 2022 09:06:50 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7611ad7254cee4c2af41c4e8d3b542b8
c4c7db6f919e71c6c06016cb045370feabc8139c
1634b0c929a39ba39eef9a8fd37556f431bfffa939bcc78340c065c0086f4313
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 22 Dec 2022 22:44:21 GMT
Etag: "63a42f23-1d7"
Server: ECS (dcb/7F60)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iDDNTIFOEylUITBzk3yiy0mT4szUxQeNYG5lIxzCqV6cHmP7YtsG4A==
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yv8nCncL37eYnMezy8IjwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: st+UESBJC43gwOlvztkuzegTEcU=
mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
200 OK 7.8 kB URL HTTP/2 mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Hash 7f129778e639559b94b19ca4665e3ace
f8a37fce61f3ad0210e1c842f96a6de6222e8202
b230eafcf133052fb63e80aa2472dfc173198d14fca29da45bf427e585817170
GET /academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 7767
date: Thu, 22 Dec 2022 22:44:22 GMT
content-encoding: gzip
server: Microsoft-IIS/10.0
link: <https://mailshake.com/wp-json/>; rel="https://api.w.org/", <https://mailshake.com/wp-json/wp/v2/pages/8622>; rel="alternate"; type="application/json", <https://mailshake.com/?p=8622>; rel=shortlink
x-powered-by: PHP/7.4.29, ASP.NET
vary: Accept-Encoding,Cookie
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sVuWT3pZfpcne9Wx9iI89ZxEbACfxIJWI02Xuv-YBx0l7laP3lXixA==
X-Firefox-Spdy: h2
mailshake.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/2 mailshake.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 217
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 02 Nov 2022 20:01:34 GMT
accept-ranges: bytes
etag: "d6fd9fe8f5eed81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wBJ6nZEFc7GQQbLna23finz54BSvRsIxabiyNtVysfpaHdozKpBXsA==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/scripts/common.js?ver=6.1.1
200 OK 616 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/scripts/common.js?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash 701b47a596c1aededd79e3862c26f52d
9b66c6ad62ae8a1c042eb4a6d0c0f14b1c5105a8
79f1d2dae46fc2df6a5c6bce2029348f536191dc13e3c892fa7865e1694d587b
GET /wp-content/themes/mailshake/assets/scripts/common.js?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 616
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "a13f9c26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bKq4qQx-VDCazrVcpL07bBND4lMnoQfnoYUfUa3zOtP7QBPAm3TB0Q==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/images/mailshake-logo.png
200 OK 13 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/images/mailshake-logo.png
IP
File type PNG image data, 276 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash aa78b3cbe5fdc64826611386b27eee0c
5a1710b60b7adcb28e9983283caad7adf099a20e
078ce9264d05d8bad9f1da1ba842f7105f64e8961774f0417b5a99fa446d3c95
GET /wp-content/themes/mailshake/assets/images/mailshake-logo.png HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 13066
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "a13f9c26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NX94WOv3dOUFJnvjIL1ZaydnaV0rB2Vzm6ca2l18TE8SvW7hvLcPqg==
X-Firefox-Spdy: h2
mailshake.com/wp-content/uploads/2021/09/academy-hero.png
200 OK 3.2 kB URL HTTP/2 mailshake.com/wp-content/uploads/2021/09/academy-hero.png
IP
File type PNG image data, 370 x 283, 8-bit colormap, non-interlaced\012- data
Hash bc5d4d55cd37b85d8c7d49e0c84dc592
99cad30a62d8caf49ff22522014126af0afc2534
59a71fa5c7429de7b9941dc0f82e1e5ae416e6bdf12b32a071cdab0d599e7881
GET /wp-content/uploads/2021/09/academy-hero.png HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3160
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 22 Sep 2021 14:38:26 GMT
accept-ranges: bytes
etag: "4c62df80bfafd71:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5qUVLhJYH89cCbG6i1KVEoIEY9brCOGCyAh1clQHA89tlIm4fbaLyw==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/scripts/header.js?ver=6.1.1
200 OK 653 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/scripts/header.js?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash 53d75531ed25267450ccfda74b3e2fc2
b8528eba254e4b8e3c0eb5bc1fb7c4dbca87d8c3
d7228dbc8f02331f0d679c4d437f504b7f5dcba67db8c7dbad90f0e3c718c43b
GET /wp-content/themes/mailshake/assets/scripts/header.js?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 653
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "a13f9c26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gT4g8MOU7B-1na8j7divClLQB2FMryQdx5F7VRxNcF7v3Va9LafcEg==
X-Firefox-Spdy: h2
mailshake.com/wp-content/uploads/2021/09/academy-logo-mailshake.png
200 OK 4.4 kB URL HTTP/2 mailshake.com/wp-content/uploads/2021/09/academy-logo-mailshake.png
IP
File type PNG image data, 276 x 72, 8-bit colormap, non-interlaced\012- data
Hash f74cef7b6dbff683d3fbf653dc180ce4
a5c19f2c849dfac68ce89dac991a666073651681
0a09cf204280be0571af2257d8ec4df6c17f2aeb0d194baf89cbc0b21876606f
GET /wp-content/uploads/2021/09/academy-logo-mailshake.png HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4405
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 22 Sep 2021 14:38:32 GMT
accept-ranges: bytes
etag: "d15f4a84bfafd71:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2Nnz2yJcx4xnSQVZnD_0Tp4CpXbtu2ahq6h97AUNodYsP1c-JBYSNg==
X-Firefox-Spdy: h2
mailshake.com/wp-content/uploads/2021/09/academy-logo-inboxattack.png
200 OK 5.7 kB URL HTTP/2 mailshake.com/wp-content/uploads/2021/09/academy-logo-inboxattack.png
IP
File type PNG image data, 219 x 72, 8-bit colormap, non-interlaced\012- data
Hash c9a8c845b47006d4112df62b186690b8
4777344f0fc7efd46300c50b622cc198e3b85a47
61e96c1a65d2c1113ed5524955665d39137cf759aa31344eb91981681555085c
GET /wp-content/uploads/2021/09/academy-logo-inboxattack.png HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5732
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 22 Sep 2021 14:38:29 GMT
accept-ranges: bytes
etag: "6bd89a82bfafd71:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CsHwJgW3fOhTmOgtHSS2_dcN5ykoy2gTwsBmyLddzbxVXSuIckjBSg==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4064cd37eb4b1ac411189b0a7427ab4
23d775267bf9350ab08b1b28580ee5593b146d61
dc9c41cc8379d77eaba4bccb038ccd4e3b9cde1571cfe0e102c91b01881e239f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mailshake.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 104 kB URL HTTP/2 mailshake.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
Size 104 kB (104073 bytes)
Hash 8744c4bbd96f7610ef73dbbfcfa7f24e
8c30282fe7973a650d218a41107c0a915d88b842
145492d43f05bbb6ac2aff98572b773ebc73e5417437626d58da517c3ce3285d
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Fri, 18 Nov 2022 13:41:41 GMT
etag: W/"4e7fae7d53fbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qajGB-M30jXodX3jO5fDxJ6xMzen-cLsvutcOdN5iYLpWgZfkLxMJg==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/external/bootstrap/css/bootstrap.min.css?ver=6.1.1
200 OK 114 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/external/bootstrap/css/bootstrap.min.css?ver=6.1.1
IP
Size 114 kB (113970 bytes)
Hash 692a1ce54b65dd168ad322e647e35256
53081885ec20d490d7d32b9d7952a358bb7cebaa
b8fbe4d3e0ee5d3a1ffa124e2f1e46c4e6e39e0c71b9761c2009176abb92e6e7
GET /wp-content/themes/mailshake/assets/external/bootstrap/css/bootstrap.min.css?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
etag: W/"ea58226a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9gCUYl3hLq1WLFNoCVjPzlsaQDh7Q1NFbYX8LnK2tB39VunpQE2aDA==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Regular.woff
200 OK 60 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Regular.woff
IP
File type Web Open Font Format, TrueType, length 59624, version 0.0\012- data
Hash fb08ccac68510d2f7a8d1a6ea5680d11
5c6ed31c7bccca3248b81426591450c5ca2eea36
d48f16da3a7c0d0c5b9e1153480cd39a54874bfbfa9038d8830071e719734ca3
GET /wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Regular.woff HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mailshake.com/wp-content/themes/mailshake/assets/styles/main.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 59624
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "95189526a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j1GQ_8D-ZUOr7nmbMdq4XV9v6BDcqfZ1iIMmScT737-awjJVenKYgQ==
X-Firefox-Spdy: h2
public.profitwell.com/js/profitwell.js?auth=b1f02631f1b7365f964f5c706865d20e
200 OK 9.2 kB URL HTTP/2 public.profitwell.com/js/profitwell.js?auth=b1f02631f1b7365f964f5c706865d20e
IP
Hash 1a13104b113063891530217a6fc4fe3a
0e23096504fd0d6be40fa8c4ae494491edb3f041
c9db8a5cc49b94b560d985cb90cfb271493240ca26aebf7a2400ad4ef7797a59
GET /js/profitwell.js?auth=b1f02631f1b7365f964f5c706865d20e HTTP/1.1
Host: public.profitwell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Tue, 28 Jun 2022 18:43:42 GMT
x-amz-version-id: Wa8rEL0sgfJJ468C6RWZ8GSg57cuV9EE
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Dec 2022 00:57:06 GMT
cache-control: public,max-age=86400
etag: W/"f3710cf44008e9509cf9d74fde8cff1f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F7m9Oapyhkuh-pmcArDXzTWfHuRnpj2ulVZTyRuFUeBtQU-IKaeyJA==
age: 78437
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Bold.woff
200 OK 62 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Bold.woff
IP
File type Web Open Font Format, TrueType, length 62240, version 0.0\012- data
Hash 21c73f7c52ca28652c5ac8571764b2d6
cbaf3997c8b461fcca56eb6138ff7f81e9df1d14
0703c2bfe5a2908d63ce746789762eaef8b19bd008e0db521529e3567388fe86
GET /wp-content/themes/mailshake/assets/fonts/OpenSans/OpenSans-Bold.woff HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mailshake.com/wp-content/themes/mailshake/assets/styles/main.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 62240
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "26b69226a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mbOiH8DxT_Lv0A6cGcI4s9O7VbF6O0H1Sfm2BiEb5f47_r5wkyYHIQ==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/external/fontawesome/webfonts/fa-duotone-900.woff2
200 OK 182 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/external/fontawesome/webfonts/fa-duotone-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 182080, version 331.-31196\012- data
Size 182 kB (182080 bytes)
Hash 923bc494d832c471ee7b45ba38205fb9
558c7db7ab18d197eeba1e911bdde4e25dd821b0
84f582c87b5a6f8a98b40aa9fba6bf25375f68f264ba921ab315c85976eda547
GET /wp-content/themes/mailshake/assets/external/fontawesome/webfonts/fa-duotone-900.woff2 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mailshake.com/wp-content/themes/mailshake/assets/external/fontawesome/css/all.min.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 182080
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "438f8b26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: __b0ujzombHQR_ai1Xkeur9lJc4kk_sfNv5wUDcaF9_MJC639mSPeg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0fc5f0a0b4fb8baea8b90cadacc08b0a
7545db9b2f1f3d00f573a138c928524fab514c46
300b03e5d71650e2a7dd25d1d7d8421af75111ca9ad9c8877eec37f2a536d99a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103060
Date: Thu, 22 Dec 2022 22:44:22 GMT
Etag: "63a3b622-1d7"
Expires: Sat, 24 Dec 2022 03:22:02 GMT
Last-Modified: Thu, 22 Dec 2022 01:42:58 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KTE89ssPT-EpUTAtRFHB9u5U1pDf8Ch6RXiwe9BDB11J3zge2jDUdw==
Age: 5945
ocsp.digicert.com/
200 OK 279 B IP
Hash 6f17a4b95f12b57ef7e15d17f83ae184
69f49c7f083c8e8f72bda6bc6d73850c1e20efc3
c2f1dee45744c89ef057981e5410cd666d75880332539b0417046684e0ffbce9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5183
Cache-Control: max-age=148362
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:22 GMT
Etag: "63a46a11-117"
Expires: Sat, 24 Dec 2022 15:57:04 GMT
Last-Modified: Thu, 22 Dec 2022 14:30:41 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
www.googleoptimize.com/optimize.js?id=GTM-K85PF67
200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=GTM-K85PF67
IP
File type ASCII text, with very long lines (1921)
Hash 3f2710d49810e3519715c82004754acd
a9f79225e30cd0e81a7f0ed8c0aded9b35eaa7b1
32da8bbcc67293606c6394f8665a6e5891d825df142feaf9455903d999691c56
GET /optimize.js?id=GTM-K85PF67 HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 22 Dec 2022 22:44:22 GMT
expires: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: private, max-age=900
last-modified: Thu, 22 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
assets.mailshake.com/wp-content/uploads/2021/09/26111633/academy-prologue.png
200 OK 6.7 kB URL HTTP/2 assets.mailshake.com/wp-content/uploads/2021/09/26111633/academy-prologue.png
IP
File type PNG image data, 331 x 414, 8-bit colormap, non-interlaced\012- data
Hash 6102945e2bf10e865323e4fd97661602
1e628a5fd2a594eaaf470736293349bb5f42bb22
30a46af10b77f210d5e35187c60ffdd7b197273561a1e03282f3c5726bf9f494
GET /wp-content/uploads/2021/09/26111633/academy-prologue.png HTTP/1.1
Host: assets.mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/png
content-length: 6726
date: Thu, 22 Dec 2022 11:41:02 GMT
last-modified: Sun, 26 Sep 2021 16:16:34 GMT
etag: "6102945e2bf10e865323e4fd97661602"
cache-control: max-age=31536000
expires: Mon, 26 Sep 2022 16:16:33 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0hhGBgeaUaOC-iasBhCJ76kFvLsmVam1lOfalp9IKWX8J72evJdgFg==
age: 39801
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8ae24e08c3126393a0555debf6fcc1d1
b5ca4295368cba9a81fb19783d2dcc2762ea698f
abbcc4598b68e21e549e2fbb6dbe87da4f9159fab16849ed0fc6083edf85f6a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1582
Cache-Control: max-age=148766
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a479b7-117"
Expires: Sat, 24 Dec 2022 16:03:49 GMT
Last-Modified: Thu, 22 Dec 2022 15:37:27 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
tr-rc.lfeeder.com/?sid=p1e024BPOlW8GB6d&data=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
200 OK 43 B URL HTTP/2 tr-rc.lfeeder.com/?sid=p1e024BPOlW8GB6d&data=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
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /?sid=p1e024BPOlW8GB6d&data=eyJnYVRyYWNraW5nSWRzIjpbXSwiZ2FNZWFzdXJlbWVudElkcyI6W10sImdhQ2xpZW50SWRzIjpbXSwiY29udGV4dCI6eyJsaWJyYXJ5Ijp7Im5hbWUiOiJsZnRyYWNrZXIiLCJ2ZXJzaW9uIjoiMi41OC4wIn0sInBhZ2VVcmwiOiJodHRwczovL21haWxzaGFrZS5jb20vYWNhZGVteS8/bXNJRD0yZTk2Njg5NS00NzQ1LTRiODktODc2MC1hYWFmMGUzYzZjODciLCJwYWdlVGl0bGUiOiJDb2xkIEVtYWlsIEFjYWRlbXkgYnkgTWFpbHNoYWtlIiwicmVmZXJyZXIiOiIifSwiZXZlbnQiOiJ0cmFja2luZy1ldmVudCIsImNsaWVudEV2ZW50SWQiOiJkZWM5OTZjYmIyMWYyMGYyIiwic2NyaXB0SWQiOiJwMWUwMjRCUE9sVzhHQjZkIiwiY29va2llc0VuYWJsZWQiOnRydWUsImNvbnNlbnRMZXZlbCI6Im5vbmUiLCJhbm9ueW1pemVJcCI6ZmFsc2UsImxmQ2xpZW50SWQiOiJMRjEuMS5jMGNjMDc5YTk1MTliMTIyLjE2NzE3NDkwNjIyOTMiLCJmb3JlaWduQ29va2llcyI6W10sInByb3BlcnRpZXMiOnt9LCJhdXRvVHJhY2tpbmdFbmFibGVkIjp0cnVlLCJhdXRvVHJhY2tpbmdNb2RlIjoib25fc2NyaXB0X2xvYWQifQ== HTTP/1.1
Host: tr-rc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
server: CloudFront
date: Thu, 22 Dec 2022 22:44:23 GMT
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VjBx1ZR45kfjWsw83fz2_VzJIY2N56XvWbWTYQdMGC72LXSl1EsGhg==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 9b1a6c18ccac0a8787b976058a735fc7
03566144b663d9e3b605fbfbf3f68d4d06f692a8
82aafc3d1e4fa6da88fbeb682a9eea9164de6bee388e9f795d0ed7c42e626700
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5320
Cache-Control: max-age=120096
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a3fb1f-117"
Expires: Sat, 24 Dec 2022 08:05:59 GMT
Last-Modified: Thu, 22 Dec 2022 06:37:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a472df56ce2714af196767cd018c19a3
1ce4d30421d93abe4feb02da892e7c8317efb6da
00ce47b21352f3bfb48c6dceb890ea8db6c0af18f03ed70392c3b6072d3a775c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2943
Cache-Control: max-age=165930
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a4b772-117"
Expires: Sat, 24 Dec 2022 20:49:53 GMT
Last-Modified: Thu, 22 Dec 2022 20:00:50 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 902a63dd2e3c9a8162a78999a9873e42
372c6f693c24861dfefb00b9fe1e6b65caacb226
f11d9aa436b73c309fce8668f7b83257a45c058ab3280c8efd7b8c7144a5c2ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3668
Cache-Control: max-age=87077
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a38098-116"
Expires: Fri, 23 Dec 2022 22:55:40 GMT
Last-Modified: Wed, 21 Dec 2022 21:54:32 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
js.usemessages.com/conversations-embed.js
200 OK 21 kB URL HTTP/2 js.usemessages.com/conversations-embed.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash e160033bdb0083af3501c27e4a0904ad
b843fc995dde1a5cc1e549ff3fa2c013399bc092
093556244f498614c786a41fcc8dd9b294aa10446cfe0c7ff7f22d9c358cbace
GET /conversations-embed.js HTTP/1.1
Host: js.usemessages.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Dec 2022 07:38:59 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: zFL9ePVKol2FHiQyTIIp8GqFQtgXkdvq
etag: W/"3f8937b5e0033972ae4f0d4dcf06cffa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4eed67f4be7da2537d3407735b8962a8.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD55-P4
x-amz-cf-id: bY24ppv8XsYBxdAQoxtTMzflLfercGUW9pb9dVkbXVyRlowRdsClwQ==
age: 587
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=conversations-embed/static-1.11564/bundles/project.js&cfRay=77a5f995bbd10b41-IAD
x-hs-target-asset: conversations-embed/static-1.11564/bundles/project.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 77dc61bdb97cb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7176
Expires: Fri, 23 Dec 2022 00:43:59 GMT
Date: Thu, 22 Dec 2022 22:44:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef779b-50c4-426a-bb0e-48c0920e42f4.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef779b-50c4-426a-bb0e-48c0920e42f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcdd5fc33823bcbfee082a3c0f2b083a
ed38fa97bee58621ef44a2ea6fbe4c291a12e12e
0ef1916483458d2c629077614f5ba5ea268c85679e60e8e14c7d4ca4993b674a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ef779b-50c4-426a-bb0e-48c0920e42f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5642
x-amzn-requestid: e4e58ace-9158-4419-b3da-ed0e5502fdd7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dVJviFUAoAMFifg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ebcc9-1c38199e663a289b775de5df;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 07:10:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mrKTso9Ew9gzmJSilPJfvh1VkrxZyoDiTvakJOn7exvwnhfXHd_Srw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 06:14:29 GMT
age: 59394
etag: "ed38fa97bee58621ef44a2ea6fbe4c291a12e12e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7176
Expires: Fri, 23 Dec 2022 00:43:59 GMT
Date: Thu, 22 Dec 2022 22:44:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ffb967e4a17a62d69fb6e577008aced4
a5116ef33af92801bc69df993766728ed542f8c9
cdebb706520519c46b62bdcbfacea7e5c041201a2895d15bed61339630578a8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CDEBB706520519C46B62BDCBFACEA7E5C041201A2895D15BED61339630578A8D"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18910
Expires: Fri, 23 Dec 2022 03:59:33 GMT
Date: Thu, 22 Dec 2022 22:44:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F636d561f-4cac-46b6-9b12-799eb03be3f7.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F636d561f-4cac-46b6-9b12-799eb03be3f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5aee260508b4a6317aa74cfa263fcf0f
0268b809b07f0126ae1c707f0a72cbf2c5ee5dde
b43410a5b53d6318d13a1b6cac311beaff9aaf2b21a6d68420ec7e3291ce44b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F636d561f-4cac-46b6-9b12-799eb03be3f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8103
x-amzn-requestid: 1dec4794-e477-4587-a919-10fed7e06f73
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: degIwFtioAMFZoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a27a37-2088c1ec6c0d3158153e907b;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 03:15:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AGI9___39fqK5XMr0S4ambwT-62kOatnW3udg1VA2JqppxIUthagMA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 07:25:49 GMT
age: 55114
etag: "0268b809b07f0126ae1c707f0a72cbf2c5ee5dde"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 244b2a2a5b176fb3117248a872e2a37a
f451963e96d330a8dcd28ebcf5e63791e90b75ba
c01075e3836684e57b87d1feaf148e5c0dc35e273b8519c342c90e44dfc1e54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12054
x-amzn-requestid: 0bc40c79-d44a-40eb-86e8-7cd0af85f5f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dR25eHSNoAMF3_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639d6b6f-5a9931874f56d4e11a4c0544;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 07:10:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: erfUxHctFpr6wTJ6NtNnPGXP0mAT4K-2UJuwA1i5ODBX36gqc_45DQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 21:52:42 GMT
age: 3101
etag: "f451963e96d330a8dcd28ebcf5e63791e90b75ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7176
Expires: Fri, 23 Dec 2022 00:43:59 GMT
Date: Thu, 22 Dec 2022 22:44:23 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d3c752734ee3e3f2d816bd5132ebcbb
9dec531fe7702207d7fffe62f39598e50dfc1b14
1988ca4e9ff5407a5ec4b09c73defddaf981ee9f9dd9446ccd8fc8e652b9ee4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5486
Cache-Control: max-age=160592
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a498a9-117"
Expires: Sat, 24 Dec 2022 19:20:55 GMT
Last-Modified: Thu, 22 Dec 2022 17:49:29 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d3c752734ee3e3f2d816bd5132ebcbb
9dec531fe7702207d7fffe62f39598e50dfc1b14
1988ca4e9ff5407a5ec4b09c73defddaf981ee9f9dd9446ccd8fc8e652b9ee4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2943
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Last-Modified: Thu, 22 Dec 2022 21:55:21 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3928383c-cf5a-464c-89b1-7e655cdac6a9.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3928383c-cf5a-464c-89b1-7e655cdac6a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0bcde39691c9f7ffe3c4a31d919394a
9ab1417dd6266da8da799ebc8bdd3dc869b85ef9
557ab2dd06a693547e7b41cdc2463b304692d41bf3ea3ede1dbe11e9652bd0a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3928383c-cf5a-464c-89b1-7e655cdac6a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7521
x-amzn-requestid: ac46341b-883e-496b-9dee-32638a723504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhc9IHKGIAMFwfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3a853-146ab5f27dc7057876d81fa5;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 00:44:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tHydK_kkMFG63be5bXiK9SZPFvtsy-UXzfEzxPvu6ZFDyEMOFJ22bg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 19:40:50 GMT
age: 11013
etag: "9ab1417dd6266da8da799ebc8bdd3dc869b85ef9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a1fb1-c604-4ebe-a587-c6a7bfc6e13d.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a1fb1-c604-4ebe-a587-c6a7bfc6e13d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7bbccd71cd7292dea16d1840b36b49ad
ae5e12eb73e85cc334ce5fba454fcd61e0065da4
9d622628cb3a9658be54adbc1b3e7d7c4e1c41c5468c23109dae021b63001b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a1fb1-c604-4ebe-a587-c6a7bfc6e13d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3963
x-amzn-requestid: e92dc9ff-ebf1-4fde-b6a0-8e6e3828fcb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dUm_zEO9oAMF5IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e8531-1ff86cf3152fcd2109a5bbf9;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 03:12:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: L3TL5ZZUrMEdyxWBi_WmnY6gHDDW5DQilhpomXexCIyUpM6FTVglSA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 05:38:52 GMT
age: 61531
etag: "ae5e12eb73e85cc334ce5fba454fcd61e0065da4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d5629e-fad4-47f4-b056-10a0b49847bf.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d5629e-fad4-47f4-b056-10a0b49847bf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2bbbb7eaaa4b72573f00472962e147b9
617524daae76010761f7c1a91ef7d820f3bfa18d
8bd70123b979f4fa9b0dfaac49a8fe5a13b7f61ea1b3355b66c2f4b9450f42ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d5629e-fad4-47f4-b056-10a0b49847bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7938
x-amzn-requestid: 3e94e5ff-c053-410e-bd1a-b0b0fed79b38
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dh-a8Ga9IAMF61A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3dddf-60d3dc124de205da4e1267d0;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 04:32:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iPaIFw4FHSeRvK4jrofKgNjny_Y9Q0G4zgoDg6KF-nmyqiH8kzH_zw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 08:08:03 GMT
age: 52580
etag: "617524daae76010761f7c1a91ef7d820f3bfa18d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
loginchecker.rightmessage.com/
200 OK 42 B URL HTTP/2 loginchecker.rightmessage.com/
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with no line terminators
Hash c32f8cdb6de7567d888b0b1ee6f587a6
05d1b223b487a059fbd7e668b8f25e4cb6e5bf42
934f698a5d9bf3255ffea47e88e2bf86013890ce810a31d82c31b520c75453fd
GET / HTTP/1.1
Host: loginchecker.rightmessage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.13.6
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 42
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.hubspot.com/livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e
200 OK 18 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e
IP
File type ASCII text, with no line terminators
Hash cc7fd95a87ea3721ce1853bf3c4dd75e
7f687f7881adf0fc407378d375a61b8f198c0912
0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-hubspot-messages-uri
Referer: https://mailshake.com/
Origin: https://mailshake.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: text/plain; charset=utf-8
content-length: 18
cf-ray: 77dc61be7b62b506-OSL
access-control-allow-origin: https://mailshake.com
allow: HEAD,GET,OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: e08d89f1-6bbe-452d-b33c-0d4e0805786c
x-trace: 2BC1BC8DA527A4F83CC614428959BE08D6F9306F55000000000000000000
set-cookie: __cf_bm=V1QiiueW4SOJjC7_CHgd826w1ntpGtqrBJEJrO8Y1uQ-1671749063-0-AVVGOojniNZz5t7YGqHr+8qpBDtx1J0vVhDTquZ4gYb93HBNZ1T0B/vzD798l4vUcq3G+DW4CpUkCPwdykw/LF8=; path=/; expires=Thu, 22-Dec-22 23:14:23 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2FCFT82bcxhQ7xTeDt3cL%2B5HtqZW0d%2B0KiFN2sjf%2FMCMyMLHcAWtxPLeFXEXgwpqaY%2BVi2NYx8rFr3FvSEw38PisY6Xpj8iYjrF7dodmk0wYQSuntTge7YA8hpySvojJDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d3c752734ee3e3f2d816bd5132ebcbb
9dec531fe7702207d7fffe62f39598e50dfc1b14
1988ca4e9ff5407a5ec4b09c73defddaf981ee9f9dd9446ccd8fc8e652b9ee4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5486
Cache-Control: max-age=160592
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:23 GMT
Etag: "63a498a9-117"
Expires: Sat, 24 Dec 2022 19:20:55 GMT
Last-Modified: Thu, 22 Dec 2022 17:49:29 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
api.hubspot.com/livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e
200 OK 247 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e
IP
File type JSON data\012- , ASCII text, with very long lines (306), with no line terminators
Hash f0ff6489609769e736bd624925612650
5d217ea282471287045f034923c5db1c391b00dd
6644a4fd2842f10e6b7a3b76cfc53cc793b186ec4d6c10f21c8218bbdd4f5d8d
GET /livechat-public/v1/message/public?portalId=9347247&conversations-embed=static-1.11564&mobile=false&messagesUtk=f6939d8099174c7c930e29bf4ad21a3e&traceId=f6939d8099174c7c930e29bf4ad21a3e HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-HubSpot-Messages-Uri: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/json;charset=utf-8
content-length: 247
cf-ray: 77dc61bf4c6eb506-OSL
access-control-allow-origin: https://mailshake.com
cache-control: no-cache, no-store, no-transform, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 0825e750-2b8f-4c1b-92f0-65895bfdcadc
x-trace: 2BEA877081A4AF43DB2EFCB0FAC0DB6656E7C67912000000000000000000
set-cookie: __cf_bm=t3sugNTLOS462kH2wsMjRSjpFZQforL7kMv.lbmcd1M-1671749063-0-AZ/sbQ6lk994beiq2e8EYw4qelITL+cY+N3ZthTbz3qGxgFsJxJD9gXgtwtXuM+MlZ2Wp/ug2kkkCbyBmRhOJXA=; path=/; expires=Thu, 22-Dec-22 23:14:23 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TPo6xcYq%2BYI4rI6N%2FZBHLS%2B3AfL%2FaQU8nMYn%2BjuUkrxFq4YOIVaxNsndvxKNIaZxI%2Fj9pB4vghM7OJmDHKafBKrFycorJdR16p5jiUvPFv3nlYjP271fEcF9hdZpv9U6BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
assets.mailshake.com/wp-content/uploads/2016/11/26112803/cropped-milkshakeio_mark-192x192.png
200 OK 12 kB URL HTTP/2 assets.mailshake.com/wp-content/uploads/2016/11/26112803/cropped-milkshakeio_mark-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f72edcfa3edb9054da47a852d4f61e5
b4a6ad8d691603fdee0b0421812318c022186f57
f3bfee7ae466321567e97c88b2e92f38bedcfd468840ed386f1558fd35256aa5
GET /wp-content/uploads/2016/11/26112803/cropped-milkshakeio_mark-192x192.png HTTP/1.1
Host: assets.mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Cookie: _lfa=LF1.1.c0cc079a9519b122.1671749062293
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12504
date: Thu, 01 Dec 2022 07:12:50 GMT
last-modified: Sun, 26 Sep 2021 16:28:04 GMT
etag: "6f72edcfa3edb9054da47a852d4f61e5"
cache-control: max-age=31536000
expires: Mon, 26 Sep 2022 16:28:03 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5YsxEAHTgQLks1v8DdeMjlIwcw1ydcC17bjiRMGwPBK7A6G8ZURMmQ==
age: 1870293
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=11149
date: Thu, 22 Dec 2022 22:44:24 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash de4c84a41f3abe9c29f69ee31836c9f8
0d5fa8e309ef611af435a790533f81ca718d47db
32e3a965ec5d033707e138d70769600caaefe1926437cdbc2d92668500178644
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5768
Cache-Control: max-age=92462
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:24 GMT
Etag: "63a38d6e-117"
Expires: Sat, 24 Dec 2022 00:25:26 GMT
Last-Modified: Wed, 21 Dec 2022 22:49:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash c5d392f16d6f3348bd707afe72f37382
f61824a383d18b9d9da451f63ce9a4068f2d1030
bde34b0a32333f86fa6e508a7177a2d231afedbca18febbfd5a0d56dab618d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3871
Cache-Control: max-age=159648
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:24 GMT
Etag: "63a49b49-1d7"
Expires: Sat, 24 Dec 2022 19:05:12 GMT
Last-Modified: Thu, 22 Dec 2022 18:00:41 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 22 Dec 2022 22:41:11 GMT
expires: Fri, 23 Dec 2022 00:41:11 GMT
cache-control: public, max-age=7200
age: 193
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: L2vBLwEfYq98wlEWQeaFlGydn9XTUYHnlBzsWovxyIfl8wNAjKnC6SvjhiBQI/59sEFjXbr9qky/9ju4SHZUTQ==
priority: u=3,i
content-length: 27298
x-fb-trip-id: 1904183273
date: Thu, 22 Dec 2022 22:44:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j98&a=2076171905&t=pageview&_s=1&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&ul=en-us&de=UTF-8&dt=Cold%20Email%20Academy%20by%20Mailshake&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEABQAAAAAAAIC~&jid=1332993894&gjid=340475735&cid=1997056677.1671749063&tid=UA-55712875-9&_gid=1481449235.1671749063>m=2wgbu0MHP2MMG&z=1682631893
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j98&a=2076171905&t=pageview&_s=1&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&ul=en-us&de=UTF-8&dt=Cold%20Email%20Academy%20by%20Mailshake&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEABQAAAAAAAIC~&jid=1332993894&gjid=340475735&cid=1997056677.1671749063&tid=UA-55712875-9&_gid=1481449235.1671749063>m=2wgbu0MHP2MMG&z=1682631893
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j98&a=2076171905&t=pageview&_s=1&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&ul=en-us&de=UTF-8&dt=Cold%20Email%20Academy%20by%20Mailshake&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgEABQAAAAAAAIC~&jid=1332993894&gjid=340475735&cid=1997056677.1671749063&tid=UA-55712875-9&_gid=1481449235.1671749063>m=2wgbu0MHP2MMG&z=1682631893 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Thu, 22 Dec 2022 04:28:00 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 65784
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/icon/favicon-16x16.png
200 OK 1.2 kB URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/icon/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 2cddc7c6237d35534fe07ec7239ea429
894580b2518898d65563789fae543b1d5e22327e
be94528a547220be38d184af13951a77716c6cd55609705f8d7305b574beaccf
GET /wp-content/themes/mailshake/assets/icon/favicon-16x16.png HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Cookie: _lfa=LF1.1.c0cc079a9519b122.1671749062293
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1219
date: Thu, 22 Dec 2022 22:44:24 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
accept-ranges: bytes
etag: "127b9726a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: au_XvLYiIJ0NPynX6TN0UNgfnq2odqCt0voJ-l0k5MENixZzNDec7w==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c5d392f16d6f3348bd707afe72f37382
f61824a383d18b9d9da451f63ce9a4068f2d1030
bde34b0a32333f86fa6e508a7177a2d231afedbca18febbfd5a0d56dab618d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1156
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:24 GMT
Last-Modified: Thu, 22 Dec 2022 22:25:08 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-55712875-9&cid=1997056677.1671749063&jid=1332993894&gjid=340475735&_gid=1481449235.1671749063&_u=YGBAgEABQAAAAEAAIC~&z=2042567380
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-55712875-9&cid=1997056677.1671749063&jid=1332993894&gjid=340475735&_gid=1481449235.1671749063&_u=YGBAgEABQAAAAEAAIC~&z=2042567380
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-55712875-9&cid=1997056677.1671749063&jid=1332993894&gjid=340475735&_gid=1481449235.1671749063&_u=YGBAgEABQAAAAEAAIC~&z=2042567380 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://mailshake.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 22 Dec 2022 22:44:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/1309066/domain/mailshake.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/1309066/domain/mailshake.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/1309066/domain/mailshake.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://mailshake.com/
Origin: https://mailshake.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Thu, 22 Dec 2022 06:31:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AkTNAK0XeuJ38ALSarV8yF16XivfMbskdhlZ1KfJUEBHJ_1dry4jrA==
age: 58361
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 22:44:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=1309066&time=1671749063251&url=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=1309066&time=1671749063251&url=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=1309066&time=1671749063251&url=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1309066%26time%3D1671749063251%26url%3Dhttps%253A%252F%252Fmailshake.com%252Facademy%252F%253FmsID%253D2e966895-4745-4b89-8760-aaaf0e3c6c87%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLUyVBVl1kIlgAAAYU8AlYbUoS-sQRf9hZuMRhY4vdZO7Xv0ZVPqXfxMLAbzx4t8xhpO-WoBO-hhg; Max-Age=2592000; Expires=Sat, 21 Jan 2023 22:44:24 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKFqMXvqjMyCAAAAYU8AlYbEsEHkMXOmvz4VYw2I-JHOTHND730rWZz0TfWZaoyMXBRRHeMlbmnK1imd2IPog; Max-Age=2592000; Expires=Sat, 21 Jan 2023 22:44:24 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&5a0baf9b-593e-4af1-8e52-28526be39fa5"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 22-Dec-2023 22:44:24 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1671749064:t=1671835464:v=2:sig=AQFEDrJ2MR2pQBw97UlxEHJ9U-cLHtVz"; Expires=Fri, 23 Dec 2022 22:44:24 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXwcmkgPm+vjff3n8mpzQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2A9389BE7F844E23967F7166803E79BA Ref B: OSL30EDGE0412 Ref C: 2022-12-22T22:44:24Z
date: Thu, 22 Dec 2022 22:44:23 GMT
content-length: 0
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1309066%26time%3D1671749063251%26url%3Dhttps%253A%252F%252Fmailshake.com%252Facademy%252F%253FmsID%253D2e966895-4745-4b89-8760-aaaf0e3c6c87%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1309066%26time%3D1671749063251%26url%3Dhttps%253A%252F%252Fmailshake.com%252Facademy%252F%253FmsID%253D2e966895-4745-4b89-8760-aaaf0e3c6c87%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1309066%26time%3D1671749063251%26url%3Dhttps%253A%252F%252Fmailshake.com%252Facademy%252F%253FmsID%253D2e966895-4745-4b89-8760-aaaf0e3c6c87%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mailshake.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=1309066&time=1671749063251&url=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&ad96b3c3-f32b-4641-8bd3-20de39675037"; Domain=.linkedin.com; Expires=Fri, 22-Dec-2023 22:44:24 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202212222244240f92ac2c-4b93-44ac-8349-974da1d30b53AQF5qHTR6lCKFuXjhi19ucjxJYcmgpKX"; Domain=.www.linkedin.com; Expires=Fri, 22-Dec-2023 22:44:24 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzE3NDkwNjQ7MjswMjHiAnz+kAGkdAqp7zhWYgA8A4CCimRoLSRdXxM+YluVKQ==; Domain=.linkedin.com; Expires=Tue, 20 Jun 2023 22:44:24 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2461:u=1:x=1:i=1671749064:t=1671835464:v=2:sig=AQH8wFwN-ROhOuntM5GhyGCu2pc7btzF"; Expires=Fri, 23 Dec 2022 22:44:24 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXwcmki2LFxlZ63JlWMXw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 64D1A4373F204877B115B2CF50FC544D Ref B: OSL30EDGE0412 Ref C: 2022-12-22T22:44:24Z
date: Thu, 22 Dec 2022 22:44:24 GMT
content-length: 0
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/1309066/domain/mailshake.com/token
200 OK 62 B URL HTTP/2 cdn.linkedin.oribi.io/partner/1309066/domain/mailshake.com/token
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d39abb34da93ec5faa48669ac4788977
cc2627a86b99e91540251b6fb7e17a9b1faa1ee7
b329d16bd7e06de93beac4a9e4d67b8be6d1c944b7b8e398b929460f73b7c4ce
GET /partner/1309066/domain/mailshake.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Thu, 22 Dec 2022 22:42:06 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aoeNC-4kDoyJ0WyWNJQ_tfvktQ3eW_PqMdIsYZjdSjJW5yoY7rgnfA==
age: 138
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=108927349670760&ev=PageView&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&rl=&if=false&ts=1671749063836&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671749063834.152911653&it=1671749063308&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=108927349670760&ev=PageView&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&rl=&if=false&ts=1671749063836&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671749063834.152911653&it=1671749063308&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=108927349670760&ev=PageView&dl=https%3A%2F%2Fmailshake.com%2Facademy%2F%3FmsID%3D2e966895-4745-4b89-8760-aaaf0e3c6c87&rl=&if=false&ts=1671749063836&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671749063834.152911653&it=1671749063308&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 22 Dec 2022 22:44:24 GMT
X-Firefox-Spdy: h2
dmm.rightmessage.com/1122267558/hubspot/21c20823b0d7ad7cc2cf477eedce1832
200 OK 16 B URL HTTP/2 dmm.rightmessage.com/1122267558/hubspot/21c20823b0d7ad7cc2cf477eedce1832
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ecf17143bf4d4d82fbb37e3e0d459fb8
c080905a75dba7c861f31fa1ca2ee1a9c65bd2b4
daca2b8362fc2c7335249da7134b9a71daa22d22adbc2d710fdb56739fbf9c01
GET /1122267558/hubspot/21c20823b0d7ad7cc2cf477eedce1832 HTTP/1.1
Host: dmm.rightmessage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:24 GMT
content-type: application/json; charset=utf-8
content-length: 16
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
etag: W/"10-wICQWnXbp8hh8x+hyi7hqcZb0rQ"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7OT%2FsPs35MrlbpXxusdH4B8z8A9pOB202WQkPgnJA7JCr4QPdeg27eCQJOT%2FLviD%2BtrMaStYOBKDjOd3YPpNRSNRHRaOeeqKTpTJ2KixpkKurg3kOxKAsKgfomC1d%2FOWD2mIvSKtOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77dc61c6da74b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 82982684e9d6ce0649a0f6e557ab0a00
77c1f2f27db56bc78a85fd3c60d5a33d76ca30db
6e60b1ae8cd531c7e52e5c993aca1e8c7e919d4de2437254b1c1ec7796604fa2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "6E60B1AE8CD531C7E52E5C993ACA1E8C7E919D4DE2437254B1C1EC7796604FA2"
Last-Modified: Wed, 21 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10018
Expires: Fri, 23 Dec 2022 01:31:23 GMT
Date: Thu, 22 Dec 2022 22:44:25 GMT
Connection: keep-alive
rmbutterfly.com/1122267558/events/monthly_visitors?a=eyJpZCI6ImU3OTg4ZmYxZjUxYTQzNTM4Y2EwZTczMmZkODRiOTZjIiwidGVhbVBpZCI6IjExMjIyNjc1NTgiLCJ2aXNpdG9yIjp7ImlkIjoiNDQzMTRjNzFkNGI1NGZmZWFjMGJkNzdmYjc3ZWMxZDkifSwia2VlbiI6eyJ0aW1lc3RhbXAiOiIyMDIyLTEyLTIyVDIyOjQ0OjI0LjE5MFoifX0%3D
204 No Content 0 B URL HTTP/1.1 rmbutterfly.com/1122267558/events/monthly_visitors?a=eyJpZCI6ImU3OTg4ZmYxZjUxYTQzNTM4Y2EwZTczMmZkODRiOTZjIiwidGVhbVBpZCI6IjExMjIyNjc1NTgiLCJ2aXNpdG9yIjp7ImlkIjoiNDQzMTRjNzFkNGI1NGZmZWFjMGJkNzdmYjc3ZWMxZDkifSwia2VlbiI6eyJ0aW1lc3RhbXAiOiIyMDIyLTEyLTIyVDIyOjQ0OjI0LjE5MFoifX0%3D
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1122267558/events/monthly_visitors?a=eyJpZCI6ImU3OTg4ZmYxZjUxYTQzNTM4Y2EwZTczMmZkODRiOTZjIiwidGVhbVBpZCI6IjExMjIyNjc1NTgiLCJ2aXNpdG9yIjp7ImlkIjoiNDQzMTRjNzFkNGI1NGZmZWFjMGJkNzdmYjc3ZWMxZDkifSwia2VlbiI6eyJ0aW1lc3RhbXAiOiIyMDIyLTEyLTIyVDIyOjQ0OjI0LjE5MFoifX0%3D HTTP/1.1
Host: rmbutterfly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
server: nginx/1.15.8
date: Thu, 22 Dec 2022 22:44:25 GMT
x-powered-by: Express
access-control-allow-origin: *
etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
script.tapfiliate.com/tapfiliate.js
200 OK 0 B URL HTTP/2 script.tapfiliate.com/tapfiliate.js
IP
GET /tapfiliate.js HTTP/1.1
Host: script.tapfiliate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 12 Oct 2022 12:34:24 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Dec 2022 23:48:34 GMT
etag: W/"ddbb39a9e8e67d5067145f8aa76b938d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8_7Khey8SBmYI1N0TVzFBCOoOkAeALMPTPGd20TJyOHvFAyuvtPofw==
age: 82548
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/external/bootstrap/js/bootstrap.min.js?ver=6.1.1
200 OK 0 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/external/bootstrap/js/bootstrap.min.js?ver=6.1.1
IP
GET /wp-content/themes/mailshake/assets/external/bootstrap/js/bootstrap.min.js?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
etag: W/"ac688426a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KBrBN3r0RpDQUwIF9pYZ7wQwsSZ0LqLWJ9rg8aSU8tl_xOUpDNJotg==
X-Firefox-Spdy: h2
mailshake.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 mailshake.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
etag: W/"05317c8abdd61:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HhinxneDxZMtkBV_ObSxgphN4QsriYT7vjHh9NF_kd7u1OZvpbdpeQ==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/external/fontawesome/css/all.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/external/fontawesome/css/all.min.css?ver=6.1.1
IP
GET /wp-content/themes/mailshake/assets/external/fontawesome/css/all.min.css?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
etag: W/"85ca8626a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TydSv78YRL0pYQ_qfNs-FcGIoB_K6Qszd5VBW2rzR1Jf_F97N4mwWA==
X-Firefox-Spdy: h2
js.hscollectedforms.net/collectedforms.js
200 OK 0 B URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 02:49:13 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SN4HXBautbT5xHa4DdPckLpyluwLE8QR
etag: W/"349cabd549e2249f8fb6ac3ac6f08e00"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2db4851b6d360f79d8bbeb4eae3c9eb6.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD55-P4
x-amz-cf-id: LxCnZVL1EPHgnm2c_e9beBFR5ktkv8F0pDjb5dDIW1jloeUSixqcxw==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.312/bundles/project.js&cfRay=77a577218c460b65-OSL
x-hs-target-asset: collected-forms-embed-js/static-1.312/bundles/project.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 77dc61bdcc900af6-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1671748800000/9347247.js
200 OK 0 B URL HTTP/2 js.hs-analytics.net/analytics/1671748800000/9347247.js
IP
GET /analytics/1671748800000/9347247.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:24 GMT
content-type: text/javascript
x-amz-id-2: 6MnWL2H/FAx47cnQgzYouK2fHkrltwaNZVnz5lFDsvRXQBIp7WavgBi8NL1Az1feIkGp8aNg4Y8=
x-amz-request-id: D07H5TBYBS3JYAK6
last-modified: Thu, 01 Dec 2022 14:48:06 GMT
etag: W/"b2a3bc8c38040f997eb204d69d7babe7"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Thu, 22 Dec 2022 22:49:24 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 77dc61c259c30b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
sc.lfeeder.com/lftracker_v1_p1e024BPOlW8GB6d.js
200 OK 0 B URL HTTP/2 sc.lfeeder.com/lftracker_v1_p1e024BPOlW8GB6d.js
IP
GET /lftracker_v1_p1e024BPOlW8GB6d.js HTTP/1.1
Host: sc.lfeeder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:09:00 GMT
x-amz-version-id: 6vSAm7WF6oz2tzit0gxjGuNd977IH8W7
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Dec 2022 22:09:49 GMT
cache-control: max-age=3600
etag: W/"deb80ff2cfb86413406b12dd8a7fdf8b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yz5nZDaq_KjvMGYWlBrcz8EyZdzzEfZxXra2CWUjiUEdUuDXOR-JUQ==
age: 2074
X-Firefox-Spdy: h2
mailshake.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 0 B URL HTTP/2 mailshake.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Wed, 02 Nov 2022 20:01:34 GMT
etag: W/"d333d4e8f5eed81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ef_4v4z0W3FfCwpVoKe_3B8NDuWb3qGiyym_JzRAzTrndCduNeqL-g==
X-Firefox-Spdy: h2
js.hs-scripts.com/9347247.js
200 OK 0 B URL HTTP/2 js.hs-scripts.com/9347247.js
IP
GET /9347247.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2BAF118E1E5593BBDE571161C2002DCBF3E34D9AEB000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 84a11fee-4e75-46fe-a765-14c19b0efc27
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://mailshake.com
last-modified: Thu, 22 Dec 2022 21:56:40 GMT
cf-cache-status: EXPIRED
expires: Thu, 22 Dec 2022 22:45:23 GMT
server: cloudflare
cf-ray: 77dc61bb4c05b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
tb.rightmessage.com/1122267558.js
200 OK 0 B URL HTTP/2 tb.rightmessage.com/1122267558.js
IP
GET /1122267558.js HTTP/1.1
Host: tb.rightmessage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:22 GMT
content-type: application/javascript
cf-ray: 77dc61bb88c70b49-OSL
age: 955212
cache-control: max-age=120, s-maxage=31536000, public
etag: W/"dfd6fe242de297feeb39664b2e21d349"
last-modified: Mon, 20 Jun 2022 19:20:15 GMT
cf-cache-status: HIT
x-amz-id-2: 1Lb++zG4T7USOtjfipsA5afL2VRaCsUg6/TCbyW9934cOU3vknWIvEi7nBcQCLUv62NciLW00Kg=
x-amz-request-id: RQGTQR735RDXK3QE
x-amz-version-id: ugCiDY.UFymUNhlQ6DVVKEYetLXjWLb6
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oh0MJUawusMujyQyOYrhcMlcdi9V5OfbojyyLn8%2BiYQQBGxXk%2BYTUV65XT6TCTTSOV5DUOQxwAoYpr1bqbM8oRCNb2e02ajuoDlRP9HqcyRIxIKjE9xAbdxASmmP9gJUHMuBOZGd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
forms.hubspot.com/collected-forms/v1/config/json?portalId=9347247&utk=
200 OK 0 B URL HTTP/2 forms.hubspot.com/collected-forms/v1/config/json?portalId=9347247&utk=
IP
GET /collected-forms/v1/config/json?portalId=9347247&utk= HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailshake.com
Connection: keep-alive
Referer: https://mailshake.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 22:44:23 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: 56212e1d-7580-44c4-bd6e-8daff72b9335
access-control-allow-credentials: false
access-control-allow-origin: https://mailshake.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=B3CatS84G5KGXbajx.BjltTHo3yFiHw8JKOEXOgPfQ8-1671749063-0-AZwBE2TyDbXEf0/WAqLxhn+HViEe5AjBFwDWnf1dnpDV0+3OIhOYuSwWvMjPa8STbxMPFw0+bBXUkAqZQVgOST4=; path=/; expires=Thu, 22-Dec-22 23:14:23 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UlFQLlwyzCVDxlmla%2F5RUDf40FRf5xEV8iXZWJ%2ByliGLYfPQ%2Bet35ifJFkRjcmN8BEIwaX0xWnjJUpFanJffMwPwnAxIeWCCCYNS7NmPWkR4PviD%2BbvBWQe9NmRfU2QKxtj%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77dc61c05da3b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/styles/main.css?ver=6.1.1
200 OK 0 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/styles/main.css?ver=6.1.1
IP
GET /wp-content/themes/mailshake/assets/styles/main.css?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
etag: W/"11a29e26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TuT36hLTdZEP9id0EPnEdYseJHJM0Gjx9r6X-EOdqtZKa6Y6uIUqDA==
X-Firefox-Spdy: h2
mailshake.com/wp-content/themes/mailshake/assets/styles/ebook.css?ver=6.1.1
200 OK 0 B URL HTTP/2 mailshake.com/wp-content/themes/mailshake/assets/styles/ebook.css?ver=6.1.1
IP
GET /wp-content/themes/mailshake/assets/styles/ebook.css?ver=6.1.1 HTTP/1.1
Host: mailshake.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mailshake.com/academy/?msID=2e966895-4745-4b89-8760-aaaf0e3c6c87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 22 Dec 2022 22:44:22 GMT
cache-control: public,max-age=31536000
last-modified: Thu, 15 Dec 2022 16:13:21 GMT
etag: W/"11a29e26a010d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qEku1lg_YLiFwRE8n8laQQY2UZs87FiGacTg3u60ZljfyFBNTc62mA==
X-Firefox-Spdy: h2
44.198.6.24
104.17.127.171
23.33.119.27
93.184.220.29
31.13.72.36