Edit tour

Windows Analysis Report
https://we.tl/t-nsdjwtsB1E

Overview

General Information

Sample URL:	https://we.tl/t-nsdjwtsB1E
Analysis ID:	1430713
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body with high number of embedded images detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5604 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: Total embedded image size: 22182
Source: https://wetransfer.com/pricing?trk=NAV_pricing	HTTP Parser: Total embedded image size: 16996

Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb&google_gid=CAESEGJeEEBqaX4DzK5Kxva6bLM&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent=&C=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /t-nsdjwtsB1E HTTP/1.1Host: we.tlConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84 HTTP/1.1Host: wetransfer.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/bacf6ffa65b559f2.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/404-d60ba40552f46991.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/03d589055b9fa8a0.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gtm.js?id=GTM-NS54WBW HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9216.2fed4395c6aaaa86.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5835-418bbb9fccea5315.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6878.ce0a8a7f3f44187c.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424 HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7327&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7327&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-source;event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPLC=OgfRct8t40xxC1%2F0%2BY6lvYAPYnZCXSZcgMCA9N8B53DQhfZlG%2FVam5GjrAwZT2G7yVq1ufKqtAzFSjNe2DneuLgnDF7TO%2BCmQWH%2FhZ9HrSXOO1cnBg3nvm4s48pevA%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPLC=Y2UJJA6oPVdxiOMpTezXE%2BPAQ9Dnp3uEEOj3WEEUO0BcZbBR%2F8thcUC6OjgSFtSQbcgAAcHnd0quX5IyrNxyfOhKB56nyVcPFp8mpxWcB5Cq44d%2FCfsqy%2FFzqxTGKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /aat/amzn.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19
Source: global traffic	HTTP traffic detected: GET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/1.1Host: public.profitwell.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/3.0/td.min.js HTTP/1.1Host: cdn.treasuredata.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&gjid=152334407&_gid=365053505.1713924969&_u=6GDAAUABAAAAICgFKgC~&z=47950021 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364bsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY\|t
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY\|t
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-source;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974085 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974102 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7dbv.9.1.a
Source: global traffic	HTTP traffic detected: GET /signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&_u=6GDAAUABAAAAICgFKgC~&z=2006782968 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713924974220&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713924974220&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&_u=6GDAAUABAAAAICgFKgC~&z=2006782968 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.edb6538d.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&cb=1713924980420&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713924980422&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924980423 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924981290&dep=5%2CEVENT_TAGS_ABSENT&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713924980422&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924980423 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&cb=1713924980420&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176If-None-Match: W/"a25e-18f0b1d3698"If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924981290&dep=5%2CEVENT_TAGS_ABSENT&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2Zzg4SmNQeXh2R01oSzlaSjhVRnQ0bUZNUDd5VnpvNkZKNVFJUFI3TUR6R1kySnUzLzBTZTlmZVphQ3gxWEtOYzIzMEtlUCtZR2dMQlorLzVqWjRPblg1dVNYaTZ4WWlDQU5QMXBMTzNOdz0mYy9GeHFGTFc5Y25JbUpwMVg5STcwMjBRdnJRPQ=="
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575If-None-Match: W/"a25e-18f0b1d3698"If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1Host: nolan.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eu1/v5/datadog-rum-slim.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /undefined HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7ec742af40df2646.css HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.svg HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /assets/images/spiral.svg HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/bundle.5131ec90dd1db1689128.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/wallpaper-api-v2.js HTTP/1.1Host: prod-cdn.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.svg HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /assets/images/spiral.svg HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/404-2628cd0d85d8ff64.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924993436&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1184804152.1713924994&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713924993436&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A16%3A33.531%2B02%3A00&epn.hit_timestamp_unix=1713924993531&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713924993436-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713924993436-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=3615&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda77700
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=622592-656131If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2Fr%2FfX8we7rVVFap%2FYhuXo%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924993436&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1184804152.1713924994&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713924993436&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A16%3A33.531%2B02%3A00&epn.hit_timestamp_unix=1713924993531&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713924993436-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713924993436-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=3615&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/778938880/?random=1482633360&fst=1713924994935&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=622592-656131If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2Fr%2FfX8we7rVVFap%2FYhuXo%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1482633360&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqWbSe0BulwwkCWw3aseaYJd9A8uUVahJ8Ox6B7prR0sHTosu5&random=4065371914 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=32768-622591If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713924996128&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&cb=1713924996184&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713924996185&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924996187 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1482633360&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqWbSe0BulwwkCWw3aseaYJd9A8uUVahJ8Ox6B7prR0sHTosu5&random=4065371914 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713924996128&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1184804152.1713924994&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924996928&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924996187 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&cb=1713924996184&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713924996185&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924996928&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZOOERkd1FGUEkzeWRKaGJIQlh4eEcvcjJjd2VCSWpuN1JxYXBMajBpNEJKWDhPOXZvRGEyMWV4MEhmdTVOMzVxcXNkUEJTZXJPdFdFWTZDd3lxUG5DTGlvVTFhSFBweDd2TGFjQVIraklYUT0mWnRJdUVlTzRqRGcwRmlGQ3ZReGkyWXg2dTljPQ=="
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1713924987196 HTTP/1.1Host: d9.flashtalking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1Host: data.ad-score.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=mw2wesJ-uXqJglX4A6oHxYTWMNc HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmQ4MjUxOGEtMDQ3NS00ZGQxLWJmZDYtYTE5MGU3OTQ1OWVi&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924996149 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1713924987196 HTTP/1.1Host: d9.flashtalking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: flashtalkingad1="GUID=59582096CB411D"; _D9J=c9e0e828d4fd42cabaee66593fb9466d
Source: global traffic	HTTP traffic detected: GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1Host: tracker.samplicio.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1Host: data.ad-score.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb&google_gid=CAESEGJeEEBqaX4DzK5Kxva6bLM&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZihriNHM7OQAACEQAUBUfgAA; CMPS=3956; CMPRO=3956
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=mw2wesJ-uXqJglX4A6oHxYTWMNc HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1Host: tracker.samplicio.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ftv=8609551e-5aff-4f42-bdb2-97f256b1198f
Source: global traffic	HTTP traffic detected: GET /legal/ccpa HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925899914&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ue
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/778938880/?random=1411407018&fst=1713925005537&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1411407018&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqYkMyf5HV0cGCfRdcUvFvoPuWofiX-naig23WE3fEPpCFE1QL&random=4169820830 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925008441&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364bsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUgASgDMgsI9L2k3OmD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _dd_s=rum=0&expire=1713925903865&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=403901835.1713925004&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1411407018&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqYkMyf5HV0cGCfRdcUvFvoPuWofiX-naig23WE3fEPpCFE1QL&random=4169820830 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925009242&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925009243&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925009244 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925008441&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=93&user_group=1&user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925010302&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=6d82518a-0475-4dd1-bfd6-a190e79459eb&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925009244 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925009242&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925009243&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
Source: global traffic	HTTP traffic detected: GET /ul_cb/syncd?dsp_id=93&user_group=1&user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=0d725c7f-fbca-4c5f-b725-91b022abbd77; c=1713925010; tuuid_lu=1713925010
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011136&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011315&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCMKEwcrqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925010302&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCMKEwcrqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011136&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925008554 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011315&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1QWQyTzRjYWZVN2k4SDdXdTVlcmEza2lUN3h1aE9jeC9lSlMyaEtTU3dzdnhEN093eCtMK0FKOGsySFRXY1NlSDM5QmFqUVBWUkM3MUtnUlJoRlRPSElmZWZEb3o1Nm56cnV2TkFMMWpjUT0mZG5zZERvUHhZUFQyNjhHUlNlY080SE03TU5BPQ=="
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.17138
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-source, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUgASgDMgsIwoTByuqD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6c07a28ff53ed915f74a27fe90616d61"If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925011127&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925011145 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925011127&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/778938880/?random=715455317&fst=1713925012418&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=I%2BtZWqj0HtedQY%2B80wGC6UZIj0QpIgZ7c0uWQlpPBsINxwsg2guaXG0r0grSuzxg%2Fp4otaxXrDsvNIWcxqeaQ0Y55zywJzjg7P%2B9rzkIa8gZcf9Sr%2Fq03%2F6XJZh2B%2BQ%2B1sx5kofbihtPV4ulD8UX%2FETbWGvgcLzE18AGsJBV0REHoausVnWgpg49sHPy83z%2FL2s%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=715455317&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzusMGF2kOX3tdduBk-PacOpDNunYE2SYM4put-XPREE8-7Yo&random=803413425 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=715455317&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzusMGF2kOX3tdduBk-PacOpDNunYE2SYM4put-XPREE8-7Yo&random=803413425 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925903851
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925903851If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/bundle.9638fa09932eaaab7d22.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/img.4a0e5e5c765b8d6d522b.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925917795
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925917795If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/img.4a0e5e5c765b8d6d522b.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=xkRL3dPzexoQUFvMCCFjPMRgTCY HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925021.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.14
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/bundle.26bba77425699e7bd69e.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=xkRL3dPzexoQUFvMCCFjPMRgTCY HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/wepresent-logo-white.8ce3fdff482687be2af7.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/img.4449fe4a1cd58186ffec.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pricing?trk=NAV_pricing HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/pricing-43f9c565fe91f700.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/wepresent-logo-white.8ce3fdff482687be2af7.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A06.888%2B02%3A00&epn.hit_timestamp_unix=1713925026888&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925026772-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=8&tfd=1453&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/img.4449fe4a1cd58186ffec.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A06.888%2B02%3A00&epn.hit_timestamp_unix=1713925026888&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925026772-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=8&tfd=1453&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; _dd_s=rum=0&expire=1713925927877&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/778938880/?random=1225659931&fst=1713925028471&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3TjfjOl9b3LzC2YfIhOVwPQtdc%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=Y8O8fIaVpd5khvyqurhWmq2atC0 HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTC8SAJTMn2BBXH6JYAygB5UsFaJsf5tBQA&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364bsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1225659931&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqs_G4b1yARSvx5cYkpT-z8HqQrmsPS3xQeiZz0MqgV2soflD4&random=51828794 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3TjfjOl9b3LzC2YfIhOVwPQtdc%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA5NzU1MDMwLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0ODAzMzcxMywiZGkiOiIzNjE2ODk2NzI2MWY0NzM5ODA1OGE0ZWMyNDQzOGEzNiIsImRqIjowLCJpaSI6IjVhYmQ3Y2Y1YjA5MzQ5NTM5ZjUyNWYxMjMyMGYyNzVhIiwiZG0iOjMsImZjIjo1MjMzMDU2NDksImZsIjo1MTIwMzUyODYsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wODlhNTRjMzdlNmNkMjE5NyIsInNwIjoxMjEyNTU5LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcyLCJ0cyI6MTcxMzkyNTAyMDU0MywicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IkV1cm9wZS9BbXN0ZXJkYW0iLCJiYSI6MSwiZnEiOjB9&s=Y8O8fIaVpd5khvyqurhWmq2atC0 HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1225659931&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqs_G4b1yARSvx5cYkpT-z8HqQrmsPS3xQeiZz0MqgV2soflD4&random=51828794 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A09.977%2B02%3A00&epn.hit_timestamp_unix=1713925029977&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925026772-40-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-40-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2925&tfd=4925&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925929909
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCOjjzOzqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: experiments.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netIf-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925929909
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925031604&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A09.977%2B02%3A00&epn.hit_timestamp_unix=1713925029977&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925026772-40-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-40-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2925&tfd=4925&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _rdt_uuid=1713924974217.c75cc
Source: global traffic	HTTP traffic detected: GET /_next/static/css/3471d3babf255274.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u91u2.p.3.s
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: analytics.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: experiments.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.060%2B02%3A00&epn.hit_timestamp_unix=1713925032060&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925026772-81-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2088&tfd=6518&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-source, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925032172&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032173&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032174&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925032175 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925031604&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1333520890.1713925027&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: analytics.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032915&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032917&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925032172&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032173&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032174&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925032175 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.060%2B02%3A00&epn.hit_timestamp_unix=1713925032060&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925026772-81-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2088&tfd=6518&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/bundle.4507bb975b4fb0667dff.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCP6v2Z3sg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6c07a28ff53ed915f74a27fe90616d61"If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032915&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZLNkU2KzhWZVZGek9GdFdrNUFESnJJYm5zRDVBTUR6K2R0OHRaSlVkQzVqTkx4dGY4RHdPRVh4NDFxZlZqOEhnUEU2dUFtRjFwNVY2M1JsN2FnS1crZmh5VUZtWk9UVGRIK2hKR1hSOS9xbz0mU0p2b3NjMXNwYjRRRUhFTm9jNkJYdnd0enhBPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032917&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZLNkU2KzhWZVZGek9GdFdrNUFESnJJYm5zRDVBTUR6K2R0OHRaSlVkQzVqTkx4dGY4RHdPRVh4NDFxZlZqOEhnUEU2dUFtRjFwNVY2M1JsN2FnS1crZmh5VUZtWk9UVGRIK2hKR1hSOS9xbz0mU0p2b3NjMXNwYjRRRUhFTm9jNkJYdnd0enhBPQ=="
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&gjid=1575304580&_gid=365053505.1713924969&_u=SACAAUABAAAAACgFKgC~&z=1600751533 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.18; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pricing.7575d8b9ff1b3b50.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925031710 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925032066 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
Source: global traffic	HTTP traffic detected: GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video HTTP/1.1Host: cdn.lamp.avct.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=ihrg_q318A252p_eCKgL3KiImBk HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Amplitude-Language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/plain, /X-Amplitude-Platform: WebX-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5NX-Amplitude-Country: USX-App-Origin: decoupledsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u95g4.10.3.13
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=1081344-1112239If-Range: "c15169e9b85a213995deb6b3112712cb"
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: analytics.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=E8sC2HUkMVlUbVqOMu_V5N..........; amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; _dd_s=rum=0&expire=1713925935893&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96bs.13.3.16
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Language: en-US,en;q=0.9Range: bytes=48579-1081343If-Range: "c15169e9b85a213995deb6b3112712cb"
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96bs.13.3.16
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=ihrg_q318A252p_eCKgL3KiImBk HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u95g4.10.3.13
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Bold.10832e10.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: analytics.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=bd4cf124-2d0f-427d-ba66-3f079581db26&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A17%3A16.502Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.127%2B02%3A00&epn.hit_timestamp_unix=1713925032127&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925026772-110-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-110-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=56&tfd=11578&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|171392501
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhHdtoe0L8B0Wr88916BUxn%2BQNkeL7N8%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/778938880/?random=1316885254&fst=1713925033359&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&_u=SACAAUABAAAAACgFKgC~&z=1880655332 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925935919
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GT-Super-WT-Regular.20d77fe0.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMVIg41TstCTofgIXfrIsZuuiDd0pR-aaw&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netIf-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925935919
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: analytics.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.127%2B02%3A00&epn.hit_timestamp_unix=1713925032127&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925026772-110-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-110-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=56&tfd=11578&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhHdtoe0L8B0Wr88916BUxn%2BQNkeL7N8%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&_u=SACAAUABAAAAACgFKgC~&z=1880655332 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqlnB28PbwTXjv70xwAkyZctVPz1wYwNNIL9CJfALp_JLpkbBq&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTL1IuBP9CE-htnG20CS6tWy0hPnOQzEFTQ&random=159649123 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=bd4cf124-2d0f-427d-ba66-3f079581db26&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A17%3A16.502Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925939746&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqlnB28PbwTXjv70xwAkyZctVPz1wYwNNIL9CJfALp_JLpkbBq&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTL1IuBP9CE-htnG20CS6tWy0hPnOQzEFTQ&random=159649123 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925042.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.22
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA0Nzc3NjE2LCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0Mjk4MjcxMCwiZGkiOiJlOTBhZjRlYzA2ZGU0ZWIxYWZjOTQxMWEyNTRhOTg4NCIsImRqIjowLCJpaSI6IjQ2MmY1MjU2N2Q5ODQ1MjM4NGM0ZWY0M2Y2NGU3Y2Y3IiwiZG0iOjMsImZjIjo1MTgyNjE5NzYsImZsIjo1MDcwNDMwMTYsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wMTM1YjU5ZTg0NjYxZGZjYyIsInNwIjoxNTE0Njc4LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcxLCJ0cyI6MTcxMzkyNTAzNzI2OCwicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IkV1cm9wZS9BbXN0ZXJkYW0iLCJiYSI6MSwiZnEiOjB9&s=R5hfC5dT6-5o4PlZBozWkW35GxI HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925042.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.22
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=R5hfC5dT6-5o4PlZBozWkW35GxI HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925939839
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925049.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.24
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925049.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.24
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netIf-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713925939839
Source: global traffic	HTTP traffic detected: GET /creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/landrover/2403/accordion/2_d6hcUN/bundle.8109b10fbdcaff69fa1c.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925052.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.25
Source: global traffic	HTTP traffic detected: GET /creator/landrover/2403/accordion/2_d6hcUN/LandRoverWeb-Medium.4427ee73c2ac6d6a97d7.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/landrover/2403/accordion/2_d6hcUN/grain.2c6cfe7dc5dab33d9c07.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/landrover/2403/accordion/2_d6hcUN/1.54cf34588a1445a7e768.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_345.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_195.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: we.tl

Source: unknown

HTTP traffic detected: POST /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveContent-Length: 448sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-amplitude-language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/graphql+json, application/jsonx-amplitude-country: USx-app-origin: decoupledsec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:16:14 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w8jdp-204571X-Request-Id: a42337485b6a3f84c361e7509cc4edfaX-Runtime: 0.000987X-Cache: Error from cloudfrontVia: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: rZHBd0Jlrdgc27zkVLY_-TrPInu9cNKRoYSQFdnyvWSXSpl3TEFUwA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:18 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: BR14omw379mRB61pIAXsP4Xq5t1a90He9_jDAcjizoINV-7_JBHCog==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:19 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 1dY4W7HWJn3CNjiuIFq0Mh91pF3ufDWjNY_WTcSAPuoZYe_Ux55Stg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:16:23 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0efa40d5cdf123505Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:23 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: nVIZKyredkBeNsQSGCpz6_dXjOHokKmF5ecmdXBK_ARVm69hzVYO8Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:16:29 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 7084Connection: closeDate: Wed, 24 Apr 2024 02:16:31 GMTETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: eVZ3dOfa3xkCkejfNQr26Ph7pSBj5AE87KctLxw1qun_oFmYT6eavA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:32 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: TfB09up4lZGj_5kZndPxfgn5Fd7vyKl2JXtFt85HDJxr77dT1bzLFg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:33 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: -Vlwj2fnLCMlSJzjXP3EmB3oP_nj5D550YOY2OcKMzfq1COGTiI18A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:16:50 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-96nms-207975X-Request-Id: 7f0c6ec3bce63b2103c9730bc7f9e257X-Runtime: 0.001011X-Cache: Error from cloudfrontVia: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ZIkh9kmytc_I1lfpKL4N7TBwICQXUmZVdt0x-kL8rmgSshFdkFnQ2w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:52 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: idohZc3UHwIyNH8M5bU8UNOzMN_-NUf-Y9JNSXDHpPdV5tLAQ1fNHg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:16:53 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: DYQsDxUYUnVlkguV0DVaZRV_LqQsyaeh1mvZQa8fcLEIED6Fejgz5Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:16:54 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0acb4b569691c6125Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:16:58 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:17:02 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:04 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 9ChBVs8D7zmv9cHhLk3a6v1gPpQB-G_mTN5qQu7iEMMZDOtgVz6bRA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:05 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: tlJkl1TmwzjtL0Mbhb1BH8F3soJOTyg-SJwRPimu_xcrU_PyqFO9mQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:17:10 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-n58rw-204458X-Request-Id: de2756ffae9409c62d77cedd2216472dX-Runtime: 0.000983X-Cache: Error from cloudfrontVia: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: VlQLDDNfeTLIjE6gXkO_JpfTTlAqNJdKPPZwPTqhncIvhJBOqnfrFQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:12 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: EYPgR_UmnVUo8WujrboLJab3WrU_aMP1p45Ix36pINZGzoi4KoDHIg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:17:12 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:13 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: kXT-jWUYi3W9OFzHudj81RlMFAd6xGnaMUC9HxksCkP1T1jYpJuUaQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:17:14 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-089a54c37e6cd2197Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:15 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: C32X4qO7kM-FsGrJkh4tVcJF0QyZK7GBzErzl6_ODQ3d3QSGe56TXA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:16 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: JEZlWdtnFM3O8F2rVpWfM1qJXrve_dFaEvBLgEXs4EfZccYTVzs3xA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:17 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: kB2SX_CRG5pPYNCNW5FmeVw_0DdM1TeK-V_J69VV07vheSvW2i456g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:17:21 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:21 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 9_ctVT78_r1mnsAHNIZQxnnD15U9EjK_muIyfktLzrwCoMpnc5X5iQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:17:31 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close

Source: chromecache_193.2.dr	String found in binary or memory: http://bit.ly/sp-js)
Source: chromecache_406.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_239.2.dr, chromecache_294.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_323.2.dr, chromecache_362.2.dr, chromecache_373.2.dr, chromecache_421.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000
Source: chromecache_270.2.dr, chromecache_367.2.dr, chromecache_212.2.dr, chromecache_331.2.dr, chromecache_415.2.dr, chromecache_323.2.dr, chromecache_362.2.dr, chromecache_266.2.dr, chromecache_328.2.dr, chromecache_232.2.dr, chromecache_373.2.dr, chromecache_421.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;o
Source: chromecache_323.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e4
Source: chromecache_362.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e4
Source: chromecache_373.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1491686877;gtm=45h91e4
Source: chromecache_421.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e4
Source: chromecache_328.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1157725051;gtm=45h91e44m
Source: chromecache_212.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m
Source: chromecache_331.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v
Source: chromecache_362.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m
Source: chromecache_270.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1578721373;gtm=45h91e44m
Source: chromecache_266.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m
Source: chromecache_421.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m
Source: chromecache_373.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=331477971;gtm=45h91e44m0
Source: chromecache_415.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0
Source: chromecache_232.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=63753366;gtm=45h91e44m0v
Source: chromecache_323.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=701674961;gtm=45h91e44m0
Source: chromecache_367.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=976421943;gtm=45h91e44m0
Source: chromecache_252.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_241.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_394.2.dr	String found in binary or memory: https://cdn.brandmetrics.com
Source: chromecache_210.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmQ4MjUxOGE
Source: chromecache_394.2.dr	String found in binary or memory: https://collector.brandmetrics.com
Source: chromecache_195.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_366.2.dr, chromecache_199.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_210.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e7945
Source: chromecache_396.2.dr	String found in binary or memory: https://ekstrom.wetransfer.net
Source: chromecache_408.2.dr	String found in binary or memory: https://email.wetransfer.net/Logos/wetransfer-logo.svg
Source: chromecache_197.2.dr	String found in binary or memory: https://github.com/WeTransfer/wallpaper-ui/blob/main/docs/components/Background.md#altText
Source: chromecache_195.2.dr	String found in binary or memory: https://google.com
Source: chromecache_195.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_252.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_421.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1225659931&fst=17
Source: chromecache_362.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1316885254&fst=17
Source: chromecache_266.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1411407018&fst=17
Source: chromecache_331.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1482633360&fst=17
Source: chromecache_323.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1512905215&fst=17
Source: chromecache_270.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1830701708&fst=17
Source: chromecache_373.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1942326149&fst=17
Source: chromecache_367.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=211125218&fst=171
Source: chromecache_415.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=715455317&fst=171
Source: chromecache_328.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=943000098&fst=171
Source: chromecache_357.2.dr, chromecache_210.2.dr, chromecache_267.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_398.2.dr	String found in binary or memory: https://mb.moatads.com
Source: chromecache_398.2.dr	String found in binary or memory: https://mb.moatads.com/o.js?
Source: chromecache_195.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_252.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_252.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_252.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_252.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_252.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_210.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=6d82518a-0475-4dd1-bfd6-a190e79459eb&gd
Source: chromecache_334.2.dr, chromecache_359.2.dr, chromecache_229.2.dr, chromecache_343.2.dr, chromecache_420.2.dr	String found in binary or memory: https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Source: chromecache_398.2.dr	String found in binary or memory: https://px.moatads.com
Source: chromecache_398.2.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: chromecache_277.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_366.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.edb6538d.js
Source: chromecache_179.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_179.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_241.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_241.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_408.2.dr, chromecache_230.2.dr	String found in binary or memory: https://wepresent.wetransfer.com/
Source: chromecache_408.2.dr, chromecache_230.2.dr	String found in binary or memory: https://wetransfer.com
Source: chromecache_408.2.dr	String found in binary or memory: https://wetransfer.com/
Source: chromecache_329.2.dr, chromecache_393.2.dr, chromecache_352.2.dr, chromecache_264.2.dr, chromecache_263.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Source: chromecache_195.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_241.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_241.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_241.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_195.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_241.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_252.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_195.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_323.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=203776702&fst=1713925034300&cv=
Source: chromecache_362.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=383227459&fst=1713925033338&cv=
Source: chromecache_373.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=583268911&fst=1713925029500&cv=
Source: chromecache_421.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=678896178&fst=1713925028448&cv=
Source: chromecache_179.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_241.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_193.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_179.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_342.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_355.2.dr, chromecache_274.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_195.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_398.2.dr	String found in binary or memory: https://z.moatads.com/omidverificationclient/verification-client-v1.js
Source: chromecache_398.2.dr	String found in binary or memory: https://z.moatads.com/px2/client.js
Source: chromecache_398.2.dr	String found in binary or memory: https://z.moatads.com/swf/p6.v3.swf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443

Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@33/420@228/70

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5604 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5604 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://we.tl/t-nsdjwtsB1E	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://z.moatads.com/px2/client.js	0%	URL Reputation	safe
https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US	0%	Avira URL Cloud	safe
https://cdn.brandmetrics.com	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068	0%	Avira URL Cloud	safe
https://collector.brandmetrics.com	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004	0%	Avira URL Cloud	safe
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video	0%	Avira URL Cloud	safe
https://cdn.brandmetrics.com	0%	Virustotal		Browse
https://collector.brandmetrics.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
tracker.samplicio.us	34.202.201.158	true	false	high
eu01.in.treasuredata.com	3.126.72.131	true	false	high
sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	34.250.136.134	true	false	high
tag.device9.com	54.151.109.234	true	false	unknown
stats.g.doubleclick.net	142.250.101.156	true	false	high
cm.g.doubleclick.net	142.250.101.154	true	false	high
www.google.com	142.250.101.103	true	false	high
cdn.brandmetrics.com	104.26.1.90	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	high
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
we.tl	18.65.3.120	true	false	unknown
dna8twue3dlxq.cloudfront.net	18.154.206.87	true	false	high
d1ykf07e75w7ss.cloudfront.net	52.85.204.136	true	false	high
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	unknown
di.rlcdn.com	34.49.212.111	true	false	high
reddit.map.fastly.net	151.101.193.140	true	false	unknown
googleads.g.doubleclick.net	142.250.101.155	true	false	high
api.amplitude.com	54.200.174.105	true	false	high
dualstack.pinterest.map.fastly.net	146.75.92.84	true	false	unknown
wetransfer.com	18.154.132.38	true	false	high
tagging.wetransfer.com	13.33.21.8	true	false	high
nolan.wetransfer.net	18.154.206.35	true	false	high
data.ad-score.com	130.211.115.4	true	false	high
user-data-us-west.bidswitch.net	35.212.133.238	true	false	unknown
measure.lamp.avct.cloud	34.240.239.1	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.154.142.121	true	false	high
adservice.google.com	142.251.2.155	true	false	high
backgrounds.wetransfer.net	18.154.132.13	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
insight.adsrvr.org	35.71.131.137	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
ara.paa-reporting-advertising.amazon	54.230.21.11	true	false	unknown
amplitude.map.fastly.net	151.101.130.132	true	false	unknown
experiments.wetransfer.net	18.65.3.33	true	false	high
lebowski.wetransfer.com	52.213.228.117	true	false	high
s.amazon-adsystem.com	52.46.151.131	true	false	high
ad.doubleclick.net	142.251.2.148	true	false	high
e-prod-alb-s105-us-east-1-01.adzerk.net	3.218.116.188	true	false	unknown
cdn.treasuredata.com	13.226.225.77	true	false	high
analytics.wetransfer.net	13.226.210.53	true	false	high
prod-cdn.wetransfer.net	13.226.228.126	true	false	high
cdn.lamp.avct.cloud	18.65.25.15	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
donny.wetransfer.com	34.246.249.180	true	false	high
www.datadoghq-browser-agent.com	18.164.171.100	true	false	unknown
cdn.wetransfer.com	18.154.132.120	true	false	high
auth-session-caching.wetransfer.net	34.248.204.163	true	false	high
wepresent.wetransfer.com	99.84.203.126	true	false	high
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false	unknown
alb.reddit.com	unknown	unknown	false	high
snowplow.wetransfer.com	unknown	unknown	false	high
z.moatads.com	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.moatads.com	unknown	unknown	false	unknown
api.lab.amplitude.com	unknown	unknown	false	high
simage2.pubmatic.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
public.profitwell.com	unknown	unknown	false	high
collector.brandmetrics.com	unknown	unknown	false	unknown
s.pinimg.com	unknown	unknown	false	high
d9.flashtalking.com	unknown	unknown	false	high
e-10220.adzerk.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=FGET	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103	false	Avira URL Cloud: safe	unknown
https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/bundle.9638fa09932eaaab7d22.js	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&gjid=1575304580&_gid=365053505.1713924969&_u=SACAAUABAAAAACgFKgC~&z=1600751533	false		high
https://alb.reddit.com/rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://www.redditstatic.com/ads/pixel.js	false		high
https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Regular.20d77fe0.woff	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146	false	Avira URL Cloud: safe	unknown
https://tracker.samplicio.us/tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD}	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&cb=1713925032174&dep=5%2CEVENT_TAGS_ABSENT	false		high
https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry	false		high
https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.js	false		high
https://cdn.treasuredata.com/sdk/3.0/td.min.js	false		high
https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=6d82518a-0475-4dd1-bfd6-a190e79459eb&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552	false		high
https://analytics.wetransfer.net/	false		high
https://wetransfer.com/assets/images/logo.svg	false		high
https://s.pinimg.com/ct/lib/main.edb6538d.js	false		high
https://www.google.com/pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696	false		high
https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925031710	false		high
https://www.facebook.com/tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=GET	false		high
https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse	false		high
https://api.lab.amplitude.com/sdk/v2/vardata?v=0	false		high
https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424	false		high
https://connect.facebook.net/signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://cdn.wetransfer.com/_next/static/media/globe.1603f8a7.svg	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.css	false		high
https://www.google.com/pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse	false		high
https://ct.pinterest.com/v3/?event=pagevisit&tid=2612705757018&cb=1713924981290&dep=5%2CEVENT_TAGS_ABSENT&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D	false		high
https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff	false		high
https://wetransfer.com/undefined	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004	false	Avira URL Cloud: safe	unknown
https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1	false		high
https://ad.doubleclick.net/ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1?	false		high
https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg	false		high
https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js	false		high
https://wetransfer.com/legal/ccpa	false		high
https://data.ad-score.com/img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&gjid=152334407&_gid=365053505.1713924969&_u=6GDAAUABAAAAICgFKgC~&z=47950021	false		high
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&cb=1713924980422&dep=5%2CEVENT_TAGS_ABSENT	false		high
https://wetransfer.com/_next/static/css/7eebedc3bb83273f.css	false		high
https://cdn.wetransfer.com/_next/static/chunks/pages/pricing-43f9c565fe91f700.js	false		high
https://wetransfer.com/assets/images/spiral.svg	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=FGET	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=FGET	false		high
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1333520890.1713925027&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996	false		high
https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	false		high
https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2	false		high
https://ct.pinterest.com/v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925009244	false		high
https://cdn.wetransfer.com/_next/static/chunks/6878.ce0a8a7f3f44187c.js	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse	false		high
https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video	false	Avira URL Cloud: safe	unknown
https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c	false		high
https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?	false		high
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011136&dep=4%2CTAGS_RECEIVED&stc=true	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse	false		high
https://ct.pinterest.com/v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011315&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974085	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	false		high
https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff	false		high
https://auth-session-caching.wetransfer.net/v1/login-status	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2	false		high
https://tagging.wetransfer.com/_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D	false		high
https://snowplow.wetransfer.com/com.snowplowanalytics.snowplow/tp2	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/FaktPro-Normal.b13a72e7c98c850685bd.woff2	false		high
https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.brandmetrics.com	chromecache_394.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_179.2.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m	chromecache_421.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_241.2.dr	false		high
https://collector.brandmetrics.com	chromecache_394.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000	chromecache_323.2.dr, chromecache_362.2.dr, chromecache_373.2.dr, chromecache_421.2.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e4	chromecache_421.2.dr	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e7945	chromecache_210.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1316885254&fst=17	chromecache_362.2.dr	false		high
https://ekstrom.wetransfer.net	chromecache_396.2.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_355.2.dr, chromecache_274.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_241.2.dr	false		high
http://www.amazon.com/b/?&node=7253015011.	chromecache_406.2.dr	false		high
https://ct.pinterest.com/stats/	chromecache_366.2.dr, chromecache_199.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1225659931&fst=17	chromecache_421.2.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m	chromecache_266.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_179.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1411407018&fst=17	chromecache_266.2.dr	false		high
https://z.moatads.com/px2/client.js	chromecache_398.2.dr	false	URL Reputation: safe	unknown
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e4	chromecache_323.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.65.3.83	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
52.213.228.117	lebowski.wetransfer.com	United States	16509	AMAZON-02US	false
130.211.115.4	data.ad-score.com	United States	15169	GOOGLEUS	false
34.250.136.134	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.65.25.15	cdn.lamp.avct.cloud	United States	3	MIT-GATEWAYSUS	false
151.101.130.132	amplitude.map.fastly.net	United States	54113	FASTLYUS	false
142.250.101.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.101.155	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.154.142.121	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.101.154	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.33.21.47	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
52.210.6.56	unknown	United States	16509	AMAZON-02US	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
18.164.171.100	www.datadoghq-browser-agent.com	United States	3	MIT-GATEWAYSUS	false
35.212.133.238	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
13.226.210.58	unknown	United States	16509	AMAZON-02US	false
18.65.3.33	experiments.wetransfer.net	United States	3	MIT-GATEWAYSUS	false
35.71.131.137	insight.adsrvr.org	United States	237	MERIT-AS-14US	false
44.224.18.40	unknown	United States	16509	AMAZON-02US	false
44.195.207.107	unknown	United States	14618	AMAZON-AESUS	false
13.226.210.53	analytics.wetransfer.net	United States	16509	AMAZON-02US	false
142.250.101.105	unknown	United States	15169	GOOGLEUS	false
18.154.132.120	cdn.wetransfer.com	United States	16509	AMAZON-02US	false
3.218.116.188	e-prod-alb-s105-us-east-1-01.adzerk.net	United States	14618	AMAZON-AESUS	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
142.250.101.148	unknown	United States	15169	GOOGLEUS	false
142.250.101.103	www.google.com	United States	15169	GOOGLEUS	false
151.101.66.132	unknown	United States	54113	FASTLYUS	false
18.154.132.13	backgrounds.wetransfer.net	United States	16509	AMAZON-02US	false
54.230.21.11	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
13.226.228.126	prod-cdn.wetransfer.net	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
142.251.2.149	unknown	United States	15169	GOOGLEUS	false
142.251.2.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.202.201.158	tracker.samplicio.us	United States	14618	AMAZON-AESUS	false
99.80.201.152	unknown	United States	16509	AMAZON-02US	false
34.248.204.163	auth-session-caching.wetransfer.net	United States	16509	AMAZON-02US	false
52.46.143.56	unknown	United States	16509	AMAZON-02US	false
104.26.1.90	cdn.brandmetrics.com	United States	13335	CLOUDFLARENETUS	false
18.65.3.120	we.tl	United States	3	MIT-GATEWAYSUS	false
54.200.174.105	api.amplitude.com	United States	16509	AMAZON-02US	false
3.126.72.131	eu01.in.treasuredata.com	United States	16509	AMAZON-02US	false
34.246.249.180	donny.wetransfer.com	United States	16509	AMAZON-02US	false
18.154.132.7	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
18.154.206.107	unknown	United States	16509	AMAZON-02US	false
18.154.206.87	dna8twue3dlxq.cloudfront.net	United States	16509	AMAZON-02US	false
18.154.206.82	unknown	United States	16509	AMAZON-02US	false
54.151.109.234	tag.device9.com	United States	16509	AMAZON-02US	false
13.33.21.8	tagging.wetransfer.com	United States	16509	AMAZON-02US	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
18.154.132.32	unknown	United States	16509	AMAZON-02US	false
18.154.132.34	unknown	United States	16509	AMAZON-02US	false
34.240.239.1	measure.lamp.avct.cloud	United States	16509	AMAZON-02US	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
18.154.132.38	wetransfer.com	United States	16509	AMAZON-02US	false
54.230.21.79	unknown	United States	16509	AMAZON-02US	false
34.49.212.111	di.rlcdn.com	United States	2686	ATGS-MMD-ASUS	false
18.154.206.35	nolan.wetransfer.net	United States	16509	AMAZON-02US	false
13.226.225.77	cdn.treasuredata.com	United States	16509	AMAZON-02US	false
52.85.204.136	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
52.46.151.131	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
13.33.21.100	unknown	United States	16509	AMAZON-02US	false
146.75.92.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430713
Start date and time:	2024-04-24 04:15:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://we.tl/t-nsdjwtsB1E
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@33/420@228/70
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://wetransfer.com/undefined Browse: https://wetransfer.com/legal/ccpa Browse: https://wetransfer.com/pricing?trk=NAV_pricing

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.2.84, 142.251.2.113, 142.251.2.138, 142.251.2.100, 142.251.2.101, 142.251.2.139, 142.251.2.102, 74.125.137.94, 34.104.35.123, 13.107.21.237, 204.79.197.237, 40.68.123.157, 23.206.229.135, 23.206.229.132, 142.251.2.155, 142.251.2.157, 142.251.2.154, 142.251.2.156, 192.229.211.108, 20.166.126.56, 20.40.202.2, 23.40.26.26, 8.39.36.142, 8.39.36.141, 142.250.101.94, 74.125.137.139, 74.125.137.102, 74.125.137.101, 74.125.137.113, 74.125.137.100, 74.125.137.138
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, bmcollector-geo.trafficmanager.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, wildcard.moatads.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, waws-prod-dm1-179-pork.centralus.cloudapp.azure.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, s.pinimg.com.edgekey.net, dual-a-0034.a-msedge.net, e13136.g.akamaiedge.net, clients.l.google.co
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1193), with no line terminators
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	5.322605577837871
Encrypted:	false
SSDEEP:	24:fbjvNxAU7cbLNPOlah5NwbWWNVdWyd06wYdqIXUshXP:fbDNxAp0a1wbWQVdWy1TA0Us5
MD5:	65123FAABA2E6CE6AF74685759B7C08A
SHA1:	30A70C3E816147F961E80B9999863EED4174506C
SHA-256:	118B9D396CDBB27D636E40E588B86180B8B31BFC9CB95736D971779CE85D44C2
SHA-512:	D67B9FDC9F958A12FC1E3A8F417F7FF8E4B790D9BE061D4947A3C983424C0581137A5A15A21270D6FD231CC9F0E7CF4D859A0C9762DB170C0E9D5C4F0DC2826D
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9210],{15184:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]",function(){return e(4654)}])},18469:function(t,n,e){"use strict";var i=e(2784);n.Z=function(t){var n=t.metadata,e=t.securityHash;return(0,i.useMemo)((function(){if(null!==n)return{title:n.title?n.title:void 0,description:1===n.files_count?"".concat(null===n\|\|void 0===n?void 0:n.files_count," file sent via WeTransfer, the simplest way to send your files around the world"):"".concat(null===n\|\|void 0===n?void 0:n.files_count," files sent via WeTransfer, the simplest way to send your files around the world"),image:void 0!==e?"/unfurl/".concat(n.id,"/").concat(e):void 0}}),[e,n])}},4654:function(t,n,e){"use strict";e.r(n),e.d(n,{__N_SSP:function(){return s}});var i=e(52322),a=e(19552),r=e(53145),o=e(18469),s=!0;n.default=function(t){var n=t.data,e=t.metadata,s=t.securityHash,u=(0,o.Z)({metadata:e,securityHash:s});return(0,i

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28503
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.977891652767339
Encrypted:	false
SSDEEP:	192:3/lrnDwZkhhO12YDBhSGhyOYgEOIxk+VrvZQOJgFKDUs4j:9DDdfO1KYHghVWOGFeUs4j
MD5:	9A680C8C475D8BBA600D4D87B4FA7EE5
SHA1:	032D074B386A4AA2EB03352ABF7F368BBD1470AE
SHA-256:	35DCE7F030321690BDD9E9D021037F9CCF5BC2FA83D11C11E6FEC4AC8CA3A7B2
SHA-512:	00A0685DE36A61C3991A01330E260DB76EE6E5997CDFD5D7F8BCEE0811E920120AFFA5C3CF48ED8D12E80AC6ABF21E9B2B76E6E470BDFA10B80D104705F1A1FF
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8.......).8fcc..g.\,%K.(..G.q\|A....F2N...\|.U.A3.........M.$^.."...%.V..........7eO.>}...ci.U...q..y)...x....C.......d..%...T.2..s.>G..V..J.(.#]..A.&.....U.n\|\..V..?5..,..d.N.bK...N.{...xv~=.t5d....".[[.}.FI..i..pW........ $..#c.%.u.[..E...2R.F..1....p..t....6/1..j.;KL...d...#..b..%...]&$_..8[c..m:E..`..c.....0.Ga....$a..".+Yz......q....,..I.+;Y.M.b.%vy.Q4....h..D....\f.&C..u.`....B.}.<........"c.\...y.2..y.R..._-.P.}.=.T=.8O!.3"....(4..q.W.)]cc.H.;q.:. )..k#.l"<.A.U?H.P..r..q.[.5.8a.om..c.(.{1tR.&^....Qd?.5.4.I.C..%..1..M............B..R..v.}...TN....._.....[....qIlWb.J.fu.#.,....`....v.....RJ.9.D.....K.xsO.....\Ga..).p...B{.Th..}.NS.@...Ig.{.V.$.....c....Jk.........`dU......5..y.........K;.~.n.p...Q..K4.\&.M2....d....P.Q1..x..(..k..J..h.Y..jdj....V\|..DXe...l.....8."..n.4....9E&$.RD.U.).....Z.......^a.YRp....E`sj.;urje.....<Y.I.y.B.DM1..s$G.0...OFA."a`.qi.>..K....lL.X`o.F}.$.`ecK........M....4..,1\|/...C....)..e,q@

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	255661
Entropy (8bit):	5.610260974776882
Encrypted:	false
SSDEEP:	3072:MSh8LhzgNSNow8VNz2V178z71+TYc20DCSY1KGoIb1QWDe5L+aVsQCajmN8LMjFa:dwhewMNz28qwhDe5LfV9CaiN8SsOa
MD5:	FEAEF11BD7B494C89D749E25C91F0547
SHA1:	B9B180E4C7490A71220F6378DA3BE4B2F4FAF304
SHA-256:	EDFEF4DBB89A529D95C649178EF544E911058E4BC347886B1B62AB302DADB33D
SHA-512:	4195E9658917957987FE2F9E55AED4882CF55F5BE2364976B8BBF94E4EE116D7FB95DB707626D870DFE8D25BAC28A118F6557752885DE75747F5803E89AF9190
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":18,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":17},{"function":"__ogt_cross_domain","priority":18,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","accounts\\.google\\.","appleid\\.apple\\.com","accounts\\\\\\.youtube\\\\\\.","paypal\\.com"],"tag_id":20},{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":21},{"function

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47828, version 1.0
Category:	downloaded
Size (bytes):	47828
Entropy (8bit):	7.995688471432011
Encrypted:	true
SSDEEP:	768:K2F5oo/7NusRbJk5zsCr2RyHXUKa0ue60GqQzTlxU0uaa3yQfe9uryjBvKaoon3o:lJ/7Da5N2RkboeBiUYiJyjBKTon37Ru
MD5:	6DBAB1C1C6F168DB27CBE727E3AD7FE8
SHA1:	E943DE16537A3FB2BDF66E204EE35DEF9D0ED817
SHA-256:	C63EDA1F9ED0DF863719C3F5E229BFC00557354CD4A0CA9C61C57EC50AE97D71
SHA-512:	0B0128954C4C08CCB423544784ED0DCF3D529647FE4ABBADA963D03836B3A4612F88543B4281991ABFA22A2C8DA4C0D25F07F1C2C389B6981191732E57401483
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/FaktPro-Normal.b13a72e7c98c850685bd.woff2
Preview:	wOF2..............S....k........................?FFTM..0...^....`..&...s.....D.......6.$.... ..p..r...[."...q.e.&>...6..2u...{A.c;.Z:.&..........1nG8..;z........J....=...^...D}.o..1.#..H9.JuU.&.ZW.Z..g..2.......n..T8.q..W.Saq..r.{s...8_.Y....e.o.......b .M...F..F.>....).b......F....L.bW....E.}.....X..1.....F...H......7.....b.:...C.... .s....x]/..#.%{.O.].p"O..#.;.q\|.].d....&......-..Z.L-~.....A.0...Ol...7..";..Z.Z...6.y~#.?.T.D...3d..Z..ad...3..\y.q..w...{......7....O.>3........+.d..9L..S.{.&...8.!.J.L.S...`..N...f.B...^$^HL...e.lo...D%."..v....^8.. ....a....#i...m.\|....1A%j..(.....(C.wt.J.....Pbh..b.#.x".~.?...sg.....,U.X.J..N.....C.n......< .."RE....%a&...Z......6..s......F.K.r ....c....9...J)_&.!.KD4..t.."I}.....C.A6.q......{......{..q..@......a.iy.u~5.,,--..#5.~..V......f.@5....W.YL.`)..[.A.Q..7..~...Nl.N....Z..c.>}.).X.UZ.h...1.F...T.jA.&QA.Z..S.C<e...{...9.:.........0...8%..v..9.\.x.!U[-8..Z&S*v.\|....G.+.H..nD...{..D....$......)..=

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146
Preview:	{}

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164599
Entropy (8bit):	4.913484542083308
Encrypted:	false
SSDEEP:	3072:DnnnWzMk8AaOPvfUKGy4fm7716ibPqmzv2HKV7gYSHvSXxRFb+fIvJ:4mOPpGidi4XN+fa
MD5:	6095C9597989539E31FB82EFBB0997A8
SHA1:	8A955A12EA58493AAA672B56EF68C1F974EB17B9
SHA-256:	AEC09DDA5C1BF802C809A5E6D61E5F7631BA872B26C469B24A67D917DC22B3BB
SHA-512:	E31244719F7869A3D0C7B33DD6794ADBF1A30B478A09D5F0603121E5C6680B01DE9EEB36BDAC7601DA2C974474CBBCBCE1C6E093A0454D2D59BE2E3F4681AB8B
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/8745.743a269fbc05ea1f.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],abbr_day_names:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],month_names:[null,"January","February","March","April","May","June","July","August","September","October","November","December"],abbr_month_names:[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],order:["year","month","day"]},number:{format:{separator:".",delimiter:",",precision:3,round_mode:"default",significant:!1,strip_insignificant_zeros:!1},currency:{format:{format:"%u%n",unit:"$",separator:".",delimiter:",",precision:2,significant:!1,strip_insignificant_zeros:!1},EUR:"\u20ac",USD:"US$",CAD:"CA$",AUD:"aud",GBP:"\xa3",DKK:"kr",NOK:"kr",SEK:"kr"},percentage:{format:{delimiter:"",format:"%n

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	290377
Entropy (8bit):	5.381376010354384
Encrypted:	false
SSDEEP:	6144:xYF9PLDkUVcZMx9ZkFaRMmftIbWT9gzLNx2GQ8p6lkqlcHZ:xYF9PPkUVcZMT+YRMmft9JgnNxHQzHc5
MD5:	18DC1214C0129D05F9BE4606A6A39660
SHA1:	D64CC9F660F0FC6052F7FD00BEAA05B49D2D444B
SHA-256:	1E3545E238446B7F00F1C90A20C474B679B76777F4CCAC8A8FA9D4B422D0B115
SHA-512:	3A1E25E38A4D7A13255045382F4F72ABBB3C1EE284FAC16A9021F0081EA13C9CAC49A1B516567694AD1ECC963153166FBB14214F05C5110EC55D673DADD34A9C
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js
Preview:	/! For license information please see bundle.cf3813e004e0be548281.js.LICENSE.txt /.!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),r.d(t,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return p},hideCloseButton:function(){return h},initialize:function(){return a},onBlur:function(){return x},onEnterFullscreen:function(){return b},onExitFullscreen:function(){return _},onFocus:function(){return w},onSafeAreaUpdate:function(){return j},sendTrackingEvent:function(){return g},sendTrackingVAST:function(){return y},setCloseButtonColor:function(){return v},setStatusBarColor:function(){return m},showCloseButton:function(){return d},startUpgradeProcess:function(){return l}});let i={};const a=async()=>{try{const{ChildFrame:e}=await r.e(460).then(r.bind(r,6460));n=new e((e=>{let{availableListeners:t}=e;t.forEach((e=>{n.listeners[e]

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1593702
Entropy (8bit):	5.787042597766311
Encrypted:	false
SSDEEP:	12288:rjGc+hNjUmSpY8OmUE4QvvfiD8snGKlubyItvxsaqy/alkCnzgMxlxAE999A56BO:99yIffty1RPdsDGOEw
MD5:	1CB6370C120798BFAF71D83B6465B7E8
SHA1:	C71BA77777865ACF4261CF8324E44479E6C42A13
SHA-256:	0E48F3E4D743C37628295E7A87935B77E91776668B200268AEB530A7404053CC
SHA-512:	D3566D43D50B834663E815F45402D04774E1C95F45235274DB19F6930E46114EAE695E70C59A44DB8A2C7F3F858D914E3286187E91C7B4EEC0BD300303B2895A
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6878.ce0a8a7f3f44187c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499),p=n(40672),g=n(33291),f=n(70273),m=n(27497),h={authenticate:m.YR},w=(0,l.$j)(null,h),_=location.pathname,v=function(){var e=(0,r.Z)(a().mark((function e(t){var n,r;return a().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return n=t.authenticate,r=t.navigateTo,e.next=3,(0,g.zD)();case 3:return e.next=5,n();case 5:_===location.pathname&&r(location.pathname);case 6:case"end":return e.stop()}}),e)})));return function(t){return e.apply(this,arguments)}}(),A=w((function(e){var t=e.authenticate,n=e.navigateTo;return(0,s.useEffect)((function(){(0,f.Nz)(),(0,f.ZY)()&&v({authenticate:t,navigateTo:n}).catch(p.Z.error)}),[t,n]),null})),b=n(53073),y=n(29057),x=function(e){return e<y.u.SMALL_MOBILE?y.l.SMALL_MOBILE:e<y.u.MOBILE?y.l.MOBILE:e

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55308), with no line terminators
Category:	downloaded
Size (bytes):	55308
Entropy (8bit):	5.200384847218251
Encrypted:	false
SSDEEP:	768:I+oCY1CZDtQYCmy1m0ZSHAzdjwYToL/0i0znDcvwzQRpLXeyq4PsRrbJiR10:I+Xy1m0ZboL/FKnDcIzQRp7CA9RG
MD5:	1C0B4E457C62548D0E46C380BED9CB82
SHA1:	E88C1D43A8E38227842594E337DA2225ABEAF236
SHA-256:	92C874C0714A983103292E4D1448A44A9EC43DABDA0F6D6ACAF42E4DFE0AB7AE
SHA-512:	81B1181B6EE4A0416257D43444ADA0E62BB44D77A5FC3AAE8B29F510EF2AA0E78D7F8A3B8499E59E33E9A3C5673168422FF915AA1D73F27484BD2E8EDF02E718
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function h(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){g(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function d(e){return d="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.pr

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 88148, version 1.0
Category:	downloaded
Size (bytes):	88148
Entropy (8bit):	7.996713089238815
Encrypted:	true
SSDEEP:	1536:6RwfdXEJvOReZkmgFILq07rreFcMyfTYycflXfytN0n8SgMW4UV7xfa77ipm:zuvkILdre9gTYyel6sHW4UV7xfaN
MD5:	F9E4D4A5820CB8D9D23104783D01B4BF
SHA1:	2A5AC318F146C43D791C133C36F51A2299C22B31
SHA-256:	1AB121A209FCC0F7776F0613E3C1511FC3C024083F28A684A131B84D322732F4
SHA-512:	C66A1D7A7FE46CBA3AE3B86CD27FBA8C61D0C5AA3305CF14356C232BA7E8E6B2E294AEB89317AABFA400B7749CF8DD2E34F7723F091965F5249DED815956E713
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2
Preview:	wOF2......XT......(...W............................?FFTM..Z...@..(.`..^.....X..!.....6.$.... .......[kS...]..}.(y ...af.Q:..$..b.p.O...d.`..7..!..H..S]A..m....6U.................,....../.$...((Xm.....}......O%.d...v. F.ct...c...@.9..Hb%..V.AIp......'.........Px9.....$W.fq......P9qs..P....i<U........j.@.......F....ZS.F.G.\w...U.f.r...<."..W..nX...QUs.v...=.\|-.C....Q5_..H.\|g..G....;...P?....q)..d.,.5.6..i...y.h..g..E.)FTM.)St..\4..P-..Z..8U...Y.y....K*..h....:.?.d.J...D%W._.<.4z...x[U..O..E.7'...W.LGM..u;..j{K.w.N..D...y..x9N..uJ.u.#...}.%G.3J...o..S.:D......2..=.#c..F...M..2.N..g.u.A...\.'..b.vt=K......+.`..U.5..I......+.\|..1"..dT...K.....3..+....[=....K{.+(Fb(.{8..................+.W..........K.....yC.....b...R.......8...~W.$^.T&'..sT.-..}...(..\.ZI..U...X..<K...........#.^.W..D.(......`5b....5.WEp...T...?..vTi..)...L.H1n...P"....nw..;.....#..g....=.IfzZ_... W...w..........D1....d..E{...{_...O..=.......e..$Z...D.t+.P $2u.Vu......O..A.)9}".D.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65089)
Category:	downloaded
Size (bytes):	79831
Entropy (8bit):	5.494921052305278
Encrypted:	false
SSDEEP:	768:rgNPUNJqCXWAugakpl4R8r6gNKx0qpclDNhs72o7JbvShRV4fkRDnJaA+VFxqeT:sNPUZrqgNKx0qpclDNG/Sn+fSOIeT
MD5:	E779375659F40138431DA5D448C170C1
SHA1:	2A965A0316367EAD74052A88B7EDEC5EC502AF36
SHA-256:	20C33DE3DBBDFED984634455B80E4239B2547D09CD7F0600742F36F5F5E3E36D
SHA-512:	51402A628F4282C786665EE91F01BD84D22D55DEA1E00F855D4654B9D2ADFF01AC3351402B52C2FD423CB9D8AA52BAF24BEFC3A837D24DC857EB24041680912F
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js
Preview:	/*. Skipped minification because the original files appears to be already minified.. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /./!. * Web analytics for Snowplow v3.23.0 (http://bit.ly/sp-js). * Copyright 2022 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,o={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(o[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(t=Object.getOwnPropertySymbols(e);r<t.length;r++)0>n.indexOf(t[r])&&Object.prototype.propertyIsEnumerable.call(e,t[r])&&(o[t[r]]=e[t[r]])}return o}function n(e,n,t){if(t\|\|2===arguments.length)for(var o,r=0,i=n.length;r<i;r++)!o&&r in n\|\|(o\|\|(o=Array.prototype.slice.call(n,0,r)),o[r]=n[r]);return e.concat(o\|\|Array.prototype.slice.call(n))}functi

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31120, version 1.6554
Category:	downloaded
Size (bytes):	31120
Entropy (8bit):	7.985418175929638
Encrypted:	false
SSDEEP:	768:P75Q02qtpsFozdYYk5SdY8cyynGiYENuQO9h:Nd2wq2zdYYktF5Nc
MD5:	57CBBFDAFC43E0DEECC75A309DD042C6
SHA1:	B9CC2FF331B8520706DE175F5B3FDBA6731A9BFC
SHA-256:	A9117F16BDAA64C953B303BEF951DFCA6316EF59F1B7CA72D5B946B1D815F6A6
SHA-512:	C997D44853DBC86C4A75E123306E504AB88FFDD7449B196AB200018ADF355183A474EF71F31E61F949BE3CB7BAC888D3F3A22AEC4226F9D50BD8B3FBDE1EF13C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff
Preview:	wOFF......y........<........................GDEF..i..........o.]GPOS..i4......3....GSUB..t........8-.jQOS/2.......Z...`..`.cmap............;.<.cvt ...L........T...fpgm.............0.6gasp..i.............glyf......T.....1.head.......6...6.VC.hhea....... ...$...Uhmtx...T.......b..j.loca...........:q.L.maxp....... ... .c..name..g....&....E.j.post..h........ .~.Dprep...........;............1H=S_.<..........#.........P..................x.c`d``>............l@...$.....\|.......e...e......./.a..........x.c`a2c..............B3.c.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....'..^..x....$I....Z......,...9.m...m.m.F..5.=.../.B.{.._/...P..A..j7sTmSZ.*..Uf.R..T.....m.V!..C.\7{...<.....B......P.~.......V..V..X.v_%..j.O..C+<...J.o..R.=..........=.}.#..5\.A{.r.K.c.&.V.3Td...f...>.&t.]S!.{m..5.B...]C-\..#........`#.&`=..AhvF.Te6.w-.b...4..A.lr..\|S.<}.At4..`.=.......`.B.-. ...k.L..F..]/..avU.g;..!...Sp<......I...a........a.T..c...N...\..?..........\|.T...\.6..[+.6.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46334)
Category:	downloaded
Size (bytes):	474109
Entropy (8bit):	5.5187553774803595
Encrypted:	false
SSDEEP:	3072:2Ndslu2MwW2lhzgNSNoJ8VNgo1P8tF1+TYc20DCSY1KGAlDH+bUs6rQDe5L+aVs+:LluL2lheJMNgzqIHDe5LfV9CKpX0/c
MD5:	F782CD5F0C5444C5C41D5BC80490A863
SHA1:	45BA97A593ABD23ED800E5018FE713C136CE38B7
SHA-256:	92C3B38BD2122A40E033C60E83E4BFF345EEF67C386998BB48662B81ADE7B027
SHA-512:	68EFD8D4F599A651256E03E7B8E00ABDA51A54879DC72CD54B02E939F15F4F051203C3616B5993416FE236B6686FFD9FCBF3698E66E9565E1DC569C77F8FD638
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtm.js?id=GTM-NS54WBW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"122",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__dbg"},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",2],"vtp_map":["list",["map","key","false","value","G-0M019DTWVR"],["map","key","true","value","G-RXXQE3EDY9"]]},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"G-RXXQE3EDY9","vtp_ignoreCase":true,"vtp_map":["list",["map","key","wetransfer\\.com","value",["macro",3]]]},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",2],8,16],"?!0:void 0})();"]},{"function":"__cid"},{"function":"__ctv"},{"function":"__c",

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45415), with no line terminators
Category:	downloaded
Size (bytes):	45424
Entropy (8bit):	5.285438652095098
Encrypted:	false
SSDEEP:	768:41MnXGeNGzc1ZXB4+R0NvVMqi/+u+yCN0FB5UCkI7gwnTQ5c7n:4gxGzGRkNdMA2ZgwnTQi
MD5:	7F8EBE66854A795162AA69C7B44F595E
SHA1:	2431F5225A63D34B5379E575A4BFDC31E0B97FE7
SHA-256:	08A2BDF82212DB89F4AB7BC5A6E47FEB80EC8AA837070028E1B82E4BD5D28254
SHA-512:	83463AF9A6BA05683D79DCF3A683D773AACFFB878F094C5D618296CDDEF861F1B426E5AD032DE08CA472900EBD69E5A4DED251F795FFAE81521D5EEDC428891B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/bundle.9638fa09932eaaab7d22.js
Preview:	!function(){var t,e,r={4339:function(t){t.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},5514:function(t,e,r){"use strict";var n=r(8389),o=r(4983),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a function")}},9330:function(t,e,r){"use strict";var n=r(8600).has;t.exports=function(t){return n(t),t}},312:function(t,e,r){"use strict";var n=r(8706).has;t.exports=function(t){return n(t),t}},1373:function(t,e,r){"use strict";var n=r(5315).has;t.exports=function(t){return n(t),t}},1461:function(t,e,r){"use strict";var n=r(8979),o=r(8584),i=r(9617).f,u=n("unscopables"),c=Array.prototype;void 0===c[u]&&i(c,u,{configurable:!0,value:o(null)}),t.exports=function(t){c[u][t]=!0}},5735:function(t,e,r){"use strict";var n=r(962),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not an object")}},1409:function(t,e,r){"use strict";var n=r(6805),o=r(2170),i=r(8742),u=function(t){return function(e,r,u){var c=n(e)

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27440, version 1.0
Category:	downloaded
Size (bytes):	27440
Entropy (8bit):	7.992206939859718
Encrypted:	true
SSDEEP:	384:gs433pIbNnWeGf6ZOmKWZdUfbSHyZ3N3r6xESiUp7MkRzArC7ceMc/DDRO81IkRY:dgCi83dUD0EbpDGspywaIQ8QTubs8Ic
MD5:	A618EB8DDD7AF554656002BCFDECFE86
SHA1:	8ACD0B2B765B498BE6E3DDDAA583CD86D43BABB9
SHA-256:	8B271876EBB2CC145871D0DAA6F5D9581947E425338E6BC3DBB604E8A808B81C
SHA-512:	A2CC1024A09DEB79F0414839CF1CF92AA7F80970E327B1FBA73C37B0F5CE606E7683D03D2B90AF9BD26849A220535D76593C1CC0A92B90E0C0FC8D1AA0CA8EC2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2
Preview:	wOF2......k0.......d..j.........................?FFTM...4.....p.`..n..r..W.....4..R..&..6.$..H. ..\..~..3.#.W...H...hm.w.....PB.........=e.....Td.4.i....@.....S..."......n..7.....4...7....i.L...s.....g^...ut3.).-6..-..w..4.%.6!..s...nC..2...@.e..z./.1.Y..V....[.......=.BU"~.<I#i...gd.\..M..M....!......!EGR...h....K..O...yA..Ua.....{.......d.7?._....w..>."0n....G....Y.. .MiJ.h...W].........7......(.9..mp..V.....d.0...H."f.JD<.</.}.}nU}7j`D.30.c)..P.N..].hX......B..S....(\V&..w..Y...X........<...p...I..N.I.c./S{....(..:EP....C1.b.Y=....BW..Z...?s...\....k..EW#p.F&.W..W.k.....p1.1.<3...r.h....+...G<1.p.4.P..@!....\|:'.3NI8..[.k.T..4"...;..Tt:3&..}.E.....=......../_NN.;.$I.$I".....Y.+a...qbF.Qf..........i...5t.}.-..#.....Q.......`.......>D.1.P..VX..+O>.%....5..5..g.....`k...E4.X.{0v'..........^..T"h.uO5....,...L4_6...iw..}. r.3.9..(2D..cc...g.......>.$. .\|.e......9..~.R.M,.!y.!.....;W..]7..B)<.B..n..B!\...@!.....m..J.#..C{.~D?2....rf..y.U

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713924996128&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x968, components 3
Category:	dropped
Size (bytes):	1618888
Entropy (8bit):	7.9911776426842565
Encrypted:	true
SSDEEP:	24576:qlX1rNWiNjaKPzEd23j1F+FhgalmfLY6IHMVWoYSMrSM7WKwychcy:qlygjaKPza23jEgRY6MmWOMeMNEcy
MD5:	9459AB37C159826CC66C30F9F6DF33D0
SHA1:	E105D7136DCA043DE1A93A8204BCA717A068C086
SHA-256:	A6FAACAFAB86717985BBAACD9A1F8F763F1F68C414DBA7246D0FA4E4C9BCF733
SHA-512:	A7AE18E83341F20CCC74A63C76C8BCC4B51733CA5B442CAFC75CACFCD2CBDB61544DA14C816FB2301EF194F7E0ADB627DD8F4CA0D2E8D86AB3DDDEFA982FDBCA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H..........................................................................................................................................................................................................3:z.fo[..5...F;{..Y..^......v.,..tz.I.r......J.....IG.......Y..;.......N.j^...Y..."\9.`.b.~$...g.. ..s.......~Je....e.....J?...-b.../b.A<...\|....Tg.......}.n\.>.`.. ...B_.F..s!.mp..VH..G..,.....b^x.....(P.(....O......;..W...wB.i.....]:-.....'.M:.+.......h\...Y...>....."@\|..ft......z..c.o{..}7..~....q..N..fhVI.....X.\....\|.l.5.]83.#N..V.k...W5...5.L...........>6`..D.....TL....?l......jO_..4.-.Cz...H..?.J..X.,.3...(....r..;.:..h.)..k.MZw..~.c.Fm_.=.#.J.A?.v&....I.bl.).H..3..6.vnI..a?..j...9LG1&.cb.....}.T....-\..R....\|..s_..qS..&:..we...70:..3:z...o<..ffb.w..a.u...~.t...c..j.....-f4.Y.S.z$VIF....Y8..R.Mwy....4r.I.8NW%......NJ.:..w.C7?......I?1(.iW...1.).....cm.gQa.m...8Jve.Ka.T...JR..C..{.#&.cC...O.g.g..{}W.....-.}&2.WO..p....g

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1600, components 3
Category:	dropped
Size (bytes):	455428
Entropy (8bit):	7.981651470892439
Encrypted:	false
SSDEEP:	12288:nJEceJUhaIsK82um9/h2H/MeLoRT34ByZWALXjXUW/0v3jlloSr3m:JEAsX17f3LuOyZ1zrcByc3m
MD5:	EABAE1CA657263A5A1CB6942D4D3FB21
SHA1:	AA7A45F2298BF77EBDD795F80107D7E7F32408F5
SHA-256:	E0BAF784C4E312FB40262F5B6BC9FC1DF6C4B052A53527767218CF3C4954BADD
SHA-512:	4C5AEBC06D2678619593817715273A8E852E6A634EC021B01128363245C9CCCE990A2B8A0A62B74DFC3EF774D562B766C6A616E393C30AEF66CE161746DCF60C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......@....".................................................9hh$.M..."...4.bm........JaA).Sj@@....R..&...`.....@.. .R.EC....M......8.h...jmH.4.%4H.MC@.bjB..LN...M4 `.u..2.456.`......!..R...CM.C@....54..D....T..T....L.@..qLSL....L........Z.&..hqD.@....M.555...&.bh...sqi...D.MM.:.1.h..M.m..LM4.I.F...P.D.H...@...SM...$....SD..411.M4........$.".i.....[.L.%...T...CA4JeCL@.)...&...0L.W.R....."J.h i.r.i.a,N...M....M1.T..D.@...".jB../.B.....i.....8(..N@..Q5....i.P.M..N,R. IR&.c. &.... `.IMID\.L.p...c..."A.$.....LLM.L..&. i...&.......b...$P..IRT..!D..M.@........S@.. T."....r..4IR$M.C...m&..@A0H...J.`.L2V....X...dx..6.V..@.@0....Hi..!.........h.`.h$.h...RT...Jj....4..&..........J..MM....)...i.R...A..I...M.D....".....]lno....!..A(...MMJhd..`.-..4.Ld.1........&!..PM4.@4...ISSp..... ..M114M....T.M..H&..5%0r4.@.hx.H.h..D.C.L.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/favicon.ico
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47828, version 1.0
Category:	downloaded
Size (bytes):	47828
Entropy (8bit):	7.995688471432011
Encrypted:	true
SSDEEP:	768:K2F5oo/7NusRbJk5zsCr2RyHXUKa0ue60GqQzTlxU0uaa3yQfe9uryjBvKaoon3o:lJ/7Da5N2RkboeBiUYiJyjBKTon37Ru
MD5:	6DBAB1C1C6F168DB27CBE727E3AD7FE8
SHA1:	E943DE16537A3FB2BDF66E204EE35DEF9D0ED817
SHA-256:	C63EDA1F9ED0DF863719C3F5E229BFC00557354CD4A0CA9C61C57EC50AE97D71
SHA-512:	0B0128954C4C08CCB423544784ED0DCF3D529647FE4ABBADA963D03836B3A4612F88543B4281991ABFA22A2C8DA4C0D25F07F1C2C389B6981191732E57401483
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2
Preview:	wOF2..............S....k........................?FFTM..0...^....`..&...s.....D.......6.$.... ..p..r...[."...q.e.&>...6..2u...{A.c;.Z:.&..........1nG8..;z........J....=...^...D}.o..1.#..H9.JuU.&.ZW.Z..g..2.......n..T8.q..W.Saq..r.{s...8_.Y....e.o.......b .M...F..F.>....).b......F....L.bW....E.}.....X..1.....F...H......7.....b.:...C.... .s....x]/..#.%{.O.].p"O..#.;.q\|.].d....&......-..Z.L-~.....A.0...Ol...7..";..Z.Z...6.y~#.?.T.D...3d..Z..ad...3..\y.q..w...{......7....O.>3........+.d..9L..S.{.&...8.!.J.L.S...`..N...f.B...^$^HL...e.lo...D%."..v....^8.. ....a....#i...m.\|....1A%j..(.....(C.wt.J.....Pbh..b.#.x".~.?...sg.....,U.X.J..N.....C.n......< .."RE....%a&...Z......6..s......F.K.r ....c....9...J)_&.!.KD4..t.."I}.....C.A6.q......{......{..q..@......a.iy.u~5.,,--..#5.~..V......f.@5....W.YL.`)..[.A.Q..7..~...Nl.N....Z..c.>}.).X.UZ.h...1.F...T.jA.&QA.Z..S.C<e...{...9.:.........0...8%..v..9.\.x.!U[-8..Z&S*v.\|....G.+.H..nD...{..D....$......)..=

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	290915
Entropy (8bit):	5.381667975181942
Encrypted:	false
SSDEEP:	6144:cYxWYhLhXVcZLMidHF9RMmf6gbxTLBzLVX7dEkI2bUTDt:cYxWYZhXVcZLtBnRMmf6C/BnVXJE2Mt
MD5:	A674A153AF828779418ACC11B06DA8C9
SHA1:	FC1B1714EF55FB89FC5EE2CA63A8F48B1048393F
SHA-256:	293D76E65217E68FF4158C93D63FD3628148EFA367F1E59FDE32B81F06200272
SHA-512:	A63BCC931CAC3CAD78C2B9FE768776B090F4D2D3AD6CE6C302FBBD00872FE199128875B4AE362581919FB5DC1531E0F754EAFF838F18C19D8885112A3B1B9206
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/bundle.26bba77425699e7bd69e.js
Preview:	/! For license information please see bundle.26bba77425699e7bd69e.js.LICENSE.txt /.!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),r.d(t,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return p},hideCloseButton:function(){return h},initialize:function(){return a},onBlur:function(){return x},onEnterFullscreen:function(){return b},onExitFullscreen:function(){return _},onFocus:function(){return w},onSafeAreaUpdate:function(){return j},sendTrackingEvent:function(){return g},sendTrackingVAST:function(){return y},setCloseButtonColor:function(){return v},setStatusBarColor:function(){return m},showCloseButton:function(){return d},startUpgradeProcess:function(){return l}});let i={};const a=async()=>{try{const{ChildFrame:e}=await r.e(460).then(r.bind(r,6460));n=new e((e=>{let{availableListeners:t}=e;t.forEach((e=>{n.listeners[e]

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (580)
Category:	downloaded
Size (bytes):	929
Entropy (8bit):	5.496883410377775
Encrypted:	false
SSDEEP:	24:si2N1V4NxwZG1QBfoDVaVCw6YCwBycPCwAUY:rN3uBzCwVCwBygCwAv
MD5:	32FCA87D42AE9DEA023B7419E1040F90
SHA1:	715CB78A8D3AEF818238064C9AB1AEDE0DDC6B71
SHA-256:	107AFD051DB8AA7357B6397D9326DFF6C6B740B70DA595E86722AB529A625C96
SHA-512:	D9C28B9972FE2436DDD46D51DA74E02B951AD17EAB97CF82334CD60CAB0D6833821E8A17A297BA94B352B6AAB8FE64CAC285A4ADC4BD296B0449C1FF76A9D575
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmQ4MjUxOGEtMDQ3NS00ZGQxLWJmZDYtYTE5MGU3OTQ1OWVi&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=6d82518a-0475-4dd1-bfd6-a190e79459eb&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent="] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1600, components 3
Category:	downloaded
Size (bytes):	455428
Entropy (8bit):	7.981651470892439
Encrypted:	false
SSDEEP:	12288:nJEceJUhaIsK82um9/h2H/MeLoRT34ByZWALXjXUW/0v3jlloSr3m:JEAsX17f3LuOyZ1zrcByc3m
MD5:	EABAE1CA657263A5A1CB6942D4D3FB21
SHA1:	AA7A45F2298BF77EBDD795F80107D7E7F32408F5
SHA-256:	E0BAF784C4E312FB40262F5B6BC9FC1DF6C4B052A53527767218CF3C4954BADD
SHA-512:	4C5AEBC06D2678619593817715273A8E852E6A634EC021B01128363245C9CCCE990A2B8A0A62B74DFC3EF774D562B766C6A616E393C30AEF66CE161746DCF60C
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/img.4a0e5e5c765b8d6d522b.jpg
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......@....".................................................9hh$.M..."...4.bm........JaA).Sj@@....R..&...`.....@.. .R.EC....M......8.h...jmH.4.%4H.MC@.bjB..LN...M4 `.u..2.456.`......!..R...CM.C@....54..D....T..T....L.@..qLSL....L........Z.&..hqD.@....M.555...&.bh...sqi...D.MM.:.1.h..M.m..LM4.I.F...P.D.H...@...SM...$....SD..411.M4........$.".i.....[.L.%...T...CA4JeCL@.)...&...0L.W.R....."J.h i.r.i.a,N...M....M1.T..D.@...".jB../.B.....i.....8(..N@..Q5....i.P.M..N,R. IR&.c. &.... `.IMID\.L.p...c..."A.$.....LLM.L..&. i...&.......b...$P..IRT..!D..M.@........S@.. T."....r..4IR$M.C...m&..@A0H...J.`.L2V....X...dx..6.V..@.@0....Hi..!.........h.`.h$.h...RT...Jj....4..&..........J..MM....)...i.R...A..I...M.D....".....]lno....!..A(...MMJhd..`.-..4.Ld.1........&!..PM4.@4...ISSp..... ..M114M....T.M..H&..5%0r4.@.hx.H.h..D.C.L.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (812)
Category:	downloaded
Size (bytes):	1655
Entropy (8bit):	5.3289788120654995
Encrypted:	false
SSDEEP:	48:ja8++e++4Qvz+iQvz0G9ViQvzvCaZe++4Qvz+iQvz0G9ViQvzOdR5:+8+/94unAZe94unb5
MD5:	CB4D87F7257B59C49573245089501805
SHA1:	9A34D3533E7741EF1B9C1E04D7745649F4DCC125
SHA-256:	C5585325109F68955650DFF99E3198DA8E69163488AA8D2CA76C464E01A833CA
SHA-512:	5237942207BCC5A2BE8207E02C2043AD75F943A56649F4FC4E30CBEAA5CC1D80D5D207011DE9325652C2CAFC6420FE8B8547AFAF1B3ECA344D323C2FB7D02E1A
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243z

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66848
Entropy (8bit):	5.341298900882068
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyz:RIT7OX4s9eZYtj8ltz
MD5:	418B8C9C5BEDFB3B49B095DD5EB5B73E
SHA1:	18D3B691D06E8A0CF14D3DB9F47C6B193D30EBE5
SHA-256:	F5BD14FF782C108114EA619F0004673BDB8F531F953F60CEB88D974F1C69BEF2
SHA-512:	D155D6C4845DE222FA0DD7BEC4CF9FA052DED0BAB690C8F8560B3B6BDC7695DBD40C5318070F3600341638345052CC4CB9B91A5ADD3D0C4C5D1F347AC53FF6A1
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5500
Entropy (8bit):	5.217919540081293
Encrypted:	false
SSDEEP:	96:D/xCiqH3FeYKOzqH3FeYKEAPqRGqetKE9FfVDebYKV2Cxa3qnrpeoKrASSFjSme9:9quah
MD5:	AFC3E4BC6A3478E7C2F0BB0B0D0CB7AF
SHA1:	A398074A9114D6AF63AEBC294A75847F21497CED
SHA-256:	4380E7DC2835765FFB8A685C7ADFDB47F8A6BD227F40FD9B61582F65BD78B9F0
SHA-512:	B2B808673BBBFBCB1C6ACD66BF2938261E41FC983F7D57D9847260563687DD6023DCF56293331000BA27B3D06D17818AD51F7BED2154A83B4F82E5F594ABA7DB
Malicious:	false
Reputation:	low
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAxVDAyOjE3OjA0Ljk3MloiLCJwdXIiOm51bGx9fQ==--2c23f746713a02482a30c48bf67523cb534feb2468f2707a5e1dea85ccb7a67b",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26464), with no line terminators
Category:	downloaded
Size (bytes):	26464
Entropy (8bit):	5.400813500778424
Encrypted:	false
SSDEEP:	384:BWBiN8VT/jGKuYlW8Qwt7J5SUElnWJFc4xr9Qscbm9YaJEVzSTWKR:BWBig/TVvt7J57E5cXLTcbm6g6KR
MD5:	02CD96AF1FE12399200B70E7BF8FA6CD
SHA1:	C624CF7E36C284B611C9FF15461A04092D000569
SHA-256:	C7E101857CC0358162EB9141CE5FC2898B68CFF3CF037DA40FAAD00D3FD1290B
SHA-512:	37716C1C67AE7B35A8B90E41111BEC0D27D7E6E5806DB68237DE7BF17C10741C44D2852E902E8680F4408A501F53B4CC6435D9C307BF384219FE8DCC678280B1
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/dde21195-2697a3889c46ad74.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{return t.apply(this,arguments)}catch(e){try{self.postMessage({type:"errored",error:e})}catch(a){self.postMessage({type:"errored",error:"".concat(e)})}}}}t((function(){var e=function(){var t=4,e=0,a=1,n=2;function r(t){for(var e=t.length;--e>=0;)t[e]=0}var i=0,s=1,_=2,h=3,l=258,o=29,d=256,u=d+1+o,f=30,c=19,p=2u+1,g=15,w=16,b=7,v=256,m=16,y=17,k=18,z=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),x=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),A=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),E=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Z=512,U=new Array(2(u+2));r(U);var R=new Array(2*f);r(R);var S=new Array(Z);r(S);var L=new Array(l-h+1);r(L

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1056103
Entropy (8bit):	5.485279165250842
Encrypted:	false
SSDEEP:	24576:sGXTot1srdL+Cir0A3aOH/vOpNztkOlZCnjLuAADQ:sGXi3aOH/vOpNztkuZCWAADQ
MD5:	12E84F18D00FCBAB4BBB6E73A50DB8E6
SHA1:	E83F205E165944A1858293938742AD59A6E09CC1
SHA-256:	1BA64EBC490EB865895C8F395791339D1EEF95E7A0CDD994F258E5DEF714A819
SHA-512:	73DC364FF8EE9FED376EE64113730D30444F0EF7F92425CE148D3234116860A5C8E4FC8480E795716C1BDA8CFBE61F98ED98C2FA6A9C8400670B325DEE898BE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9216.2fed4395c6aaaa86.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=r(90205);e.exports=function(e){return new Promise((function(t,r){var h,v=e.data,y=e.headers,m=e.responseType;function _(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(v)&&n.isStandardBrowserEnv()&&delete y["Content-Type"];var g=new XMLHttpRequest;if(e.auth){var b=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";y.Authorization="Basic "+btoa(b+":"+w)}var x=s(e.baseURL,e.url);function E(){if(g){var n="getAllResponseHeaders"in g?u(g.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"json"!==m?g.response:g.responseText,status:g.status,statusText:g.statusText,headers:n,config:e,request:g};o((function(e){t(e),_()}),(function(e){r(e),_()}),i

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37028
Entropy (8bit):	7.501316586529086
Encrypted:	false
SSDEEP:	384:mOWayMNHWO9WwDoQuNjNfGehyoMraSspu6/5ije3gEFo8zEPvA+YCxkbeR/7VdLt:mOWREHnSlIaSszsiQEFo8zEPvCets6
MD5:	62615BECF8831F197E70175A43C41000
SHA1:	E5B34BE17B73F3612BA632EB7D42F8779A027B64
SHA-256:	054C3FD1FB0EA4454A5E70D3530656BDA559E38A08E9F8ACE9BEB8A8EB64839E
SHA-512:	7E41D6DBC7FD5E11A142BF53D011703443DB95F5D1DCC2E21DD1DD982874E2BF2920A1803005C489F31D21FF2ACBF76451A581A98413AE667A77CB08AB949F81
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png
Preview:	.PNG........IHDR...X...h.......~4...kIDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............P..A.............d.k...........\|i.%............i.............TV&X.K.........@sg...M............L....d...Cx..........U.....h`.e.X..........7.C\|^50.r@.................,....<.tDx.A..r.......... .L....\`y....e.\.........@1v......W.4..G.ad.................c.............H..N.._~.....OK)..Y.....;....9..........0~>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yz.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:V..........p.........o{...K.e!.\.I..XY)zK.........rJ..X1.........@...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 30776, version 1.6554
Category:	downloaded
Size (bytes):	30776
Entropy (8bit):	7.985440814365276
Encrypted:	false
SSDEEP:	768:W3vsyUi/jdWtvA0kddk7OYfqBPdS1Rzs5:0EyJAtnk3k7OYEVio
MD5:	3E43992E4E2C4420A860C2DCED8CC368
SHA1:	2749C9FD14C8021138214E8E89542C8FF69A6B5C
SHA-256:	04AC8540C5790E80273C2FF1DA99BDDEE617700467EAC8799072EF4424ED086F
SHA-512:	1EEB5EBEBEC9D25DE8C6AAB5063442BD547D70D0F1A479CA44DAFDEEA8FDCE8D48F695DD813A3EF527CB52AA4A14C9735B74CCCC0FA24AD69AC47B1F0D5881C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff
Preview:	wOFF......x8.......<........................GDEF..g..........o.]GPOS..h....r..3v...GSUB..s........8-.jQOS/2.......Y...`..c.cmap............;.<.cvt .......t....O.-.fpgm.............0.6gasp..g.............glyf... ..S.....09.head.......6...6..C.hhea....... ...$.R..hmtx...T.......b.r^9loca...........:...Vmaxp....... ... ....name..f....&....E.j.post..g........ .~.Dprep...p........D.5..........z._.<..........#.........A...J..............x.c`d``>.....k....N.^@...$...$.........`...d......./.a...%......x.c`a.e..............B3.d.a..........,....;0(T..(0.....#.P.._.#..000.a..JL..1q1......:......x...p%K..O.,.`..Y..m.m.m.m..~....Ye..:m.....%.}....(w....<...(8_Ez^enG.A..Py.M..q....u.h.e...TA.......VO.o.5.....N.........".........P..&./k.DV.....,..D...(;L#.mY.m.....O2..$.S..Gm~.h._+. ..`.5..`".=t...._N.4..V.......p...[..h..A.j$...kb0^....].A>.\..[..Omh........;.b.._.L?P.....oI...._.F...i;....5..!.R....gk....A.e.......R..0.F...M...`5..5.5..o.>..l....M'.sU.c......\.-..)os

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713924974220&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x968, components 3
Category:	downloaded
Size (bytes):	1618888
Entropy (8bit):	7.9911776426842565
Encrypted:	true
SSDEEP:	24576:qlX1rNWiNjaKPzEd23j1F+FhgalmfLY6IHMVWoYSMrSM7WKwychcy:qlygjaKPza23jEgRY6MmWOMeMNEcy
MD5:	9459AB37C159826CC66C30F9F6DF33D0
SHA1:	E105D7136DCA043DE1A93A8204BCA717A068C086
SHA-256:	A6FAACAFAB86717985BBAACD9A1F8F763F1F68C414DBA7246D0FA4E4C9BCF733
SHA-512:	A7AE18E83341F20CCC74A63C76C8BCC4B51733CA5B442CAFC75CACFCD2CBDB61544DA14C816FB2301EF194F7E0ADB627DD8F4CA0D2E8D86AB3DDDEFA982FDBCA
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg
Preview:	......JFIF.....H.H..........................................................................................................................................................................................................3:z.fo[..5...F;{..Y..^......v.,..tz.I.r......J.....IG.......Y..;.......N.j^...Y..."\9.`.b.~$...g.. ..s.......~Je....e.....J?...-b.../b.A<...\|....Tg.......}.n\.>.`.. ...B_.F..s!.mp..VH..G..,.....b^x.....(P.(....O......;..W...wB.i.....]:-.....'.M:.+.......h\...Y...>....."@\|..ft......z..c.o{..}7..~....q..N..fhVI.....X.\....\|.l.5.]83.#N..V.k...W5...5.L...........>6`..D.....TL....?l......jO_..4.-.Cz...H..?.J..X.,.3...(....r..;.:..h.)..k.MZw..~.c.Fm_.=.#.J.A?.v&....I.bl.).H..3..6.vnI..a?..j...9LG1&.cb.....}.T....-\..R....\|..s_..qS..&:..we...70:..3:z...o<..ffb.w..a.u...~.t...c..j.....-f4.Y.S.z$VIF....Y8..R.Mwy....4r.I.8NW%......NJ.:..w.C7?......I?1(.iW...1.).....cm.gQa.m...8Jve.Ka.T...JR..C..{.#&.cC...O.g.g..{}W.....-.}&2.WO..p....g

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 225, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39025
Entropy (8bit):	7.965171260719284
Encrypted:	false
SSDEEP:	768:5cXQOERtdJYO7dEzkLN3ObqzGYyNJKA6vV6FedMEiB/fLt7Y7W6i+AMoX:5cXktkO7+AZ3ObqzGYqYl6kdMEiBbO7w
MD5:	AE3014C64B170B87E558AAAB76E68DBB
SHA1:	CF23719D3A0FAD66AC2B2AD1CBAB694FB7405CB5
SHA-256:	932BB66C5437020592D94FFF49F322ABD2B3BA9542D673DE7940088060674BE2
SHA-512:	34D3FF7848386B569B27EB7071FDF815F977BB22358C9565A0F8DB6966A0E05A4C8A0FE003B37A03868853734CE4D9A1302D1D58C807718FC9BBAEE260978B41
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png
Preview:	.PNG........IHDR.............K..D....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx..}...E.....^z........." M.b(....bAP..W,`...X..%........@..!........:3;.w..}%0.d..rfvv.33g.XXX.8.......r..8..... .2t;..-......}F.,,J.>0.?......Z. .p@....A!V....n..;.=.3Xx..?.. \| 34."....-.R.W.7.w.c].L.....t.........).......p.%....T.......,._...o1d.A..J..d..v..c.W._.S...#.[u.d`.^m...........j.Q.:].V......[j.G.t...c&...:...w@+.J...V........b...v..w...$H..X..?_q#...u...c...9.0"n.m...Q..a...#P..w..../S..>....X...(../..i...+..-........_..=(.%?.lch.....'Vu...F\|..Yi".[..m~hHB. J.....O..?Ej...A..........V.........q#jScA..^.`\..o...,b..v:....mzK.B..0f,t:.y=..Wp7..^N......J.Ym..\..R..q..R..{.4.+j.~3n.....,.p...."e......D........"z=+Z.j(......r.gi..TZp.....g.(....Lb...4.9...Uj../.....e.5.....I...>...=.1..J..2..p..OO+.7f....L....i.V.....um. ...y..Q.O.K...3.....Jg..Cg.[.u.../Q......Q._1.m.hv.S]....9..J.........9..K.Xx.q..z.u.gR...?........T~...7.;._........t.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
URL:	https://d9.flashtalking.com/img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1713924987196
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35384), with CRLF line terminators
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	5.351684385876074
Encrypted:	false
SSDEEP:	768:CY2XYmZwOhINHCUUGEs9wtqd2Owr7iBwy:52dZjeJCts5oy
MD5:	DDA723FF3ED7EAF04E02DD8BF51EA41A
SHA1:	8B4CE1B3C7F04112519E9D8A217ACE13C4A45C69
SHA-256:	AD367E536C20C594229B6D90AC4097730886EAC4F8E11B07E908E584A62B1268
SHA-512:	F3DFB0A14A9E98B3A2B16B8013E9D3C34C7BDB3FA29EB92F9BE07B3EE07BA482398A60767ACE2DBFCAC13D2A4C6DA2524157062D1EDD7950A0A327D1216247E5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.32
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return We},get start(){return qe},get stop(){return Xe},get track(){return Ie}}),e=Object.freeze({__proto__:null,get clone(){return an},get compute(){return on},get data(){return Ze},get keys(){return Ke},get reset(){return un},get start(){return nn},get stop(){return sn},get trigger(){return rn},get update(){return cn}}),n=Object.freeze({__proto__:null,get check(){return gn},get compute(){return mn},get data(){return Ge},get start(){return pn},get stop(){return yn},get trigger(){return vn}}),r=Object.freeze({__proto__:null,get compute(){return xn},get data(){return bn},get log(){return On},get reset(){return En},get start(){return kn},get stop(){return _n},get updates(){return wn}}),a=Object.freeze({__proto__:null,get callbacks(){return Nn},get clear(){return Hn},get consent(){return Cn},get data(){return Tn},get id(){return jn},get metadata(){return In},get save(){return An},get start(){return Mn},get stop(){ret

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	4.239227187869127
Encrypted:	false
SSDEEP:	48:0gthO2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+6:zYZnH/l8NhHJ0M2J7dC5
MD5:	638B03103C59F408E100F75B696A497F
SHA1:	946B46B707F494BD9AB7A2B559DF75795E9E5C16
SHA-256:	BDAE9E2F28E40970EC2CE1624CD7C72A17F984FDDC044F1B2AFE8EC1EC9A51D1
SHA-512:	991431E933C59201E37EC3DED0EE91EA24FAE7841FB28706DB2150980278B0C0D1049C76CCD00DB1515A1DB78242F4832D7E3AFFD91536065F0DBBA9E5DE0678
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4562), with no line terminators
Category:	downloaded
Size (bytes):	4562
Entropy (8bit):	5.334921895055784
Encrypted:	false
SSDEEP:	96:nIAc8jsKwObAfJt1Fv0FLvWDlsod8DWh6jWtiVfM3rmcNeTinfGzbgR6A78Rsu1O:IisHOAb0VWD64oWgZI6/NhOZ65sG7XOD
MD5:	34EAE0E4B14BA01EEE4D85C9C6FA8BBD
SHA1:	736E8B5660727E6E8CEF569F2F94532E352DE523
SHA-256:	B61FF9EC819A4E60952AD88E18B4139CFA50F49C8AACDD8C6C5948903521B3F8
SHA-512:	4FFAC9558A5D99F8101DDCE4CE659413E3A223492866169B6E586396E60B41744ADCBFD18923ABC2EA9072D827D136929B75BE2961742DD0441F747E9C43FA51
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/404-2628cd0d85d8ff64.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(14148),i=t.n(o),s=function(e){var r=e.title,t=void 0===r?"Yikes, something went wrong on our end.":r,o=e.children,s=void 0===o?"Perhaps try reloading the page, or coming back later":o;return(0,n.jsxs)("div",{className:i().ErrorState,children:[(0,n.jsx)("a",{href:"https://wetransfer.com",className:i().Logo,children:(0,n.jsx)("img",{src:"/assets/images/logo.svg",alt:"WeTransfer"})}),(0,n.jsxs)("main",{className:i().Wrapper,children:[(0,n.jsx)("img",{className:i().Spiral,src:"/assets/images/spiral.svg",alt:"Image of a spiral"}),(0,n.jsx)("h1",{className:i().Title,children:t}),(0,n.jsx)("p",{className:i().Description,children:s})]})]})}},53145:function(e,r,t){"use strict";t.d(r,{Z:function(){return a}});var n=t(52322),o=t(97729),i=t.n(o),s=

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=I%2BtZWqj0HtedQY%2B80wGC6UZIj0QpIgZ7c0uWQlpPBsINxwsg2guaXG0r0grSuzxg%2Fp4otaxXrDsvNIWcxqeaQ0Y55zywJzjg7P%2B9rzkIa8gZcf9Sr%2Fq03%2F6XJZh2B%2BQ%2B1sx5kofbihtPV4ulD8UX%2FETbWGvgcLzE18AGsJBV0REHoausVnWgpg49sHPy83z%2FL2s%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (810)
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	5.334074627466235
Encrypted:	false
SSDEEP:	48:ja8++eU+4Qvz+iQvz0G9ViQvzvCaZeU+4Qvz+iQvz0G9ViQvzOdR5:+8+/r4unAZer4unb5
MD5:	721DEE228940A34E161F8C8DD7C9CE4D
SHA1:	A4BEE07FF49FEB6CB3BA49EA665DA816F4B8EF08
SHA-256:	C620DDE933070C62405B9A39EE376F591D85E68B07ADCAEFDC8F70BAFF29CF10
SHA-512:	03764A83C3CADE852923FE9E0A4394FB221995912A1C5252D348A95396AFBB8289F9532C11574A2CC7D09A8479FD4EDB71A66D9E9D13F8D599362F57263A11FA
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=63753366;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=63753366;gtm=45h91e44m0v893550495z8890364660z9890153243za200

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44642), with no line terminators
Category:	downloaded
Size (bytes):	44642
Entropy (8bit):	5.470824352879873
Encrypted:	false
SSDEEP:	768:gJj3JFkiE+2jS/hpb+F+zLW50xxUnUQaW8kkHMMpd1NzdMykcb0s0PFZs8:gJ7JFkiGjS/hEF+zk0xxUUQaW8kkHM6U
MD5:	0117DED66314D5D48929F64D97591068
SHA1:	893CFE4C1BFEC063FC7961C5E89DCF5FE621DEB0
SHA-256:	D90ADB7C4B93E66D3309045CA1764CF914D4809EB3B824D141D8BEBC8E82D6AA
SHA-512:	796287B88EB5287233A18FAFE197597133900DC6E217EDE1C07F342FCB6DA8BC793B683BC6AB30DCEA48A23CD40C6B525EAF7D8755E8FE7251FCA13E2292F5AA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/955cc3f7.47e52b23a8132ed3.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e?"object"===typeof e\|\|"function"===typeof e?a[i.call(e)]\|\|"object":typeof e:e+""},t.isArray=Array.isArray\|\|function(e){return"array"===t.type(e)},t.isPlainObject=function(e){var r;if(!e\|\|"object"!==t.type(e)\|\|e.nodeType\|\|t.isWindow(e))return!1;try{if(e.constructor&&!n.call(e,"constructor")&&!n.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(a){return!1}for(r in e);return void 0===r\|\|n.call(e,r)},t.each=function(e,t,r){var a=0,n=e.length,i=l(e);if(r){if(i)for(;a<n&&!1!==t.apply(e[a],r);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.apply(e[a],r))break}else if(i)for(;a<n&&!1!==t.call(e[a],a,e[a]);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.call(e[a],a,e[a]))break;return e},t.data=function(e,a,n){if(void 0===n){v

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhHdtoe0L8B0Wr88916BUxn%2BQNkeL7N8%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	501856
Entropy (8bit):	5.3562533607063925
Encrypted:	false
SSDEEP:	6144:2V/EvQ01Siyn+AYX2Eb4E328MOGjkeQG/nn:2NE401vyn+AYjb4E328MOGjkIn
MD5:	7BBF99584CACBC02A1D6EE0813153C1D
SHA1:	C5690A5FD7A2E391EA8B144537CFB87FE259CB57
SHA-256:	8838F444316D5E9808AC6B8320B64408F49DC9E71C9BEBC462A33599FF19D238
SHA-512:	E2EB39DE9EA9768E68E814ADA4A4423ABAE82F05C0908489972A72E7A6A3525BCB72E7326B6D48069D2C19E414D90B1360BDA85CA1A6B95ABA5918889A0E5E3F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/03d589055b9fa8a0.css
Preview:	.WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-display-heading-large-bold__WSfgs,.WallpaperSocialLinks_wt-display-heading-large-narrow__hQtfe,.WallpaperSocialLinks_wt-display-heading-large-wide__inDul,.WallpaperSocialLinks_wt-display-heading-large__D_lV4,.WallpaperSocialLinks_wt-display-heading-medium-bold-narrow__lp7nv,.WallpaperSocialLinks_wt-display-heading-medium-bold-wide__W_K4w,.WallpaperSocialLinks_wt-display-heading-medium-bold__AIoN1,.WallpaperSocialLinks_wt-display-heading-medium-narrow__bkJTb,.WallpaperSocialLinks_wt-display-heading-medium-wide__Wa813,.WallpaperSocialLinks_wt-display-heading-medium__eNOaM,.WallpaperSocialLinks_wt-display-heading-small-bold-narrow__BAncF,.WallpaperSocialLinks_wt-display-heading-small-bold-wide__iQnnQ,.WallpaperSocialLinks_wt-display-heading-sma

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.517395759023966
Encrypted:	false
SSDEEP:	3:YIzGE/Ke8KTNz1VHJSXLjJp2ERh2in:YIX/WIzfH4nJp2Eein
MD5:	0AF94B9851CBD20AE843EF0C26CCEBE0
SHA1:	3D3A1D4256673F9F5286677E0B046D22044E83F8
SHA-256:	65199FF4A61961135B3CB942273A30ABAF3DA3D10246652988A573863D282C8F
SHA-512:	3B31EBA5C84D0B7866E6820DE42CD4023316732AD37D42B02D24B671772EA5C2649C21941D31B835F231C99EC078E3E5A6BC96B310C613CDE75CB19BCE2B588C
Malicious:	false
Reputation:	low
Preview:	{"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	656132
Entropy (8bit):	7.994007327251022
Encrypted:	true
SSDEEP:	12288:qDRp2Lb3ZpwEMDFa+9kIv05GgU61e2OpgdGhxNkHz3cmC4CI/tTsS/P:qWLXwtFa+i59Y9jNkHjcbiP
MD5:	39EC2AB63FA9A8679ED9063EB5932A8D
SHA1:	CB8EE27F50C817DA69EB889C0EA5897EA90670B5
SHA-256:	6C41A7E7F58D30048599FC565D53FB5E13021EDF9D9990429B001331CDD053CF
SHA-512:	F8AE91DE88B2E15446BA85059A96538EAFA053C4AB2A17A5DAEF16827CB2E1A48C065597F4BDA42F80965B17D7AFFF76D2D192BE2A52EB1F6027B7F4EBF6E1DD
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4:2f75648af77e2b:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free...mdat..........E...H..,. .#..x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=30 rc=crf mbtree=1 crf=22.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 vbv_maxrate=20000 vbv_bufsize=25000 crf_max=0.0 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00......e...;...h...^a........K..oS,O7..\9........V.@..$..p..v H#..s....fTpy... y.A.T#M.t...D..R1.z^.}...........dX..Vu.!.....g.*....q^f..O..r............[...Sz5..s(R..)..SI.w.I....t.q.:

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35884, version 1.0
Category:	downloaded
Size (bytes):	35884
Entropy (8bit):	7.993678658459837
Encrypted:	true
SSDEEP:	768:nTaYaeKDNBe40kOdkMcfwPKNLZWxLJd0yJGMg1QdyAdSk3y:nTtfKRE40je2VJCMiuyAwkC
MD5:	51CBD7213AE115ED59C3F2874014AB69
SHA1:	D8D1A69F5D19C825CD0B44D875C95140C3129E0E
SHA-256:	CBF4D73CCEF8548406B20D54B8792830468541C81BF78B22E0B4D24D811C5F53
SHA-512:	0614AEB0394B101C39A5AA0D5E089158E0F4B351836FF0B64ACA811A5AAF338EEC03404F1B51A04FFDE3FF9F14233468BA72578C66EBBDA1689D35FD49273EF7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2
Preview:	wOF2.......,......{.............................?FFTM..........v.`..n.4........ ..2.....6.$..". ..'..b..'[VW....<.g.>J.!P....UH....Q.y....+....A...+j.....[.E...Af..8:..._5.zL).^F.r..h.$K....`.[..2..6.j..u..Z..+R...1.f.6.z..i..`IHRv...j.-\Dx.D$^.R......msr.n...i..C..\|....E..+]r...y.2....k.... ...].A.......nr..\5.....$!I.......1.......L...6..3[.e.....tj....a..1v..# ..^&.........[OV.F....=...0yYq..........=F4X..;~.v}'...%...?.!.;..Ev.....].%...+N.....:.._...i....A.A...DT.J.......vq..(B..L.Z...N.....-.@I....{...~.0.2....,Q.J$..c.YV.w..&..U....X...I.l.;......W.{...........6..3.....y...Y..l.._....e.u F8tV.zd.>.2........v~._..V.uZ....F..s.q.k..y.S...0.]..-Q..\|.......l.}..9J..[..%X.way..a<......'..c.B..yR.........ON..twMi.TW..^o...#..(BL ql.N=....<gr.....~.@.L.V.I...E*.T.{.../Y7y).f(.8.E...I..Uc..r3a...\e.qz7.."V...w..S..7.UB.........C..}x...!..C.0..&........4..Y......e....d.(....v...R........ax....6y.W..~v.....?..Xd..2.'Z....o{....j>.]r..B....\Z

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/logo.svg
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 225, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39025
Entropy (8bit):	7.965171260719284
Encrypted:	false
SSDEEP:	768:5cXQOERtdJYO7dEzkLN3ObqzGYyNJKA6vV6FedMEiB/fLt7Y7W6i+AMoX:5cXktkO7+AZ3ObqzGYqYl6kdMEiBbO7w
MD5:	AE3014C64B170B87E558AAAB76E68DBB
SHA1:	CF23719D3A0FAD66AC2B2AD1CBAB694FB7405CB5
SHA-256:	932BB66C5437020592D94FFF49F322ABD2B3BA9542D673DE7940088060674BE2
SHA-512:	34D3FF7848386B569B27EB7071FDF815F977BB22358C9565A0F8DB6966A0E05A4C8A0FE003B37A03868853734CE4D9A1302D1D58C807718FC9BBAEE260978B41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K..D....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx..}...E.....^z........." M.b(....bAP..W,`...X..%........@..!........:3;.w..}%0.d..rfvv.33g.XXX.8.......r..8..... .2t;..-......}F.,,J.>0.?......Z. .p@....A!V....n..;.=.3Xx..?.. \| 34."....-.R.W.7.w.c].L.....t.........).......p.%....T.......,._...o1d.A..J..d..v..c.W._.S...#.[u.d`.^m...........j.Q.:].V......[j.G.t...c&...:...w@+.J...V........b...v..w...$H..X..?_q#...u...c...9.0"n.m...Q..a...#P..w..../S..>....X...(../..i...+..-........_..=(.%?.lch.....'Vu...F\|..Yi".[..m~hHB. J.....O..?Ej...A..........V.........q#jScA..^.`\..o...,b..v:....mzK.B..0f,t:.y=..Wp7..^N......J.Ym..\..R..q..R..{.4.+j.~3n.....,.p...."e......D........"z=+Z.j(......r.gi..TZp.....g.(....Lb...4.9...Uj../.....e.5.....I...>...=.1..J..2..p..OO+.7f....L....i.V.....um. ...y..Q.O.K...3.....Jg..Cg.[.u.../Q......Q._1.m.hv.S]....9..J.........9..K.Xx.q..z.u.gR...?........T~...7.;._........t.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x1500, components 3
Category:	downloaded
Size (bytes):	397252
Entropy (8bit):	7.976132765602904
Encrypted:	false
SSDEEP:	6144:Q6OHSFPl4rCB5CALORfms5wSQtdX51PjHe0amUpABUP4MhJWeLgyfikoO4utJUDR:QPHS5e7krD5BjXaoBUQ0pgyn4aJUDR
MD5:	59120D257F397069247BCC0EC2464B45
SHA1:	9D529FBB3C0ED46B020E1840877DD6875752EC5C
SHA-256:	3FD04651A7405FE26F193D56DB9D14CB41A3F76F2C3D00A4765DD21543C92A91
SHA-512:	06E17BC85F9C6F973E58EBCA5F598FD945747842F5C9672A1337408D63815721A1507A1F6E9822B36CC603F8C510A0F8336073F7596BB1ED64A833CDB1E2D7C0
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/img.4449fe4a1cd58186ffec.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="EBA026E420C33F1D20BEBBB261B343F9" xmpMM:DocumentID="xmp.did:5AAC6DFAEDD911EEB0B9D542008C8892" xmpMM:InstanceID="xmp.iid:5AAC6DF9EDD911EEB0B9D542008C8892" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6b8486c6-8899-9d4f-a326-4ba2e31d8f14" stRef:documentID="adobe:docid:photoshop:80c38aa8-fe45-3d45-8208-886ab848a801"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........8BIM.%..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28464, version 1.0
Category:	downloaded
Size (bytes):	28464
Entropy (8bit):	7.992106511690401
Encrypted:	true
SSDEEP:	768:C2FrF4DIfgszvE0Eo4/2jiTmmn+c7T5hkPWMAZhoqg6qm6Q:C2/8s7Elx/Uun+5PWM8iqgPm6Q
MD5:	FF4429FEBA146D5A8E608DB1B13CD9B2
SHA1:	D459521F7418A066C06D1FBFFD02F86101CEA571
SHA-256:	234796A01DD3B44E82E1868F1DDD7C8A2EA603C29D7DD36E97F849CB058C13DC
SHA-512:	CB13406328F7BD8C382F8A6DDEECAF6BE43922535231FA8C30CD07BED58238F160E37F924DC709F635DADD7C8BB3138ACFA2A99D38E1247AD8C3B23388CD7469
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2
Preview:	wOF2......o0......Y...n.........................?FFTM..l..H..<.`..f.....8..6.....6.$..6. ../...[..q..m.Bt'..Zm.]..6...y.J.y.e.w~p...=..&......k.l...i..\.,<..&..L..u................5.]..._OsVU..ww..{.2U.<....ye..r.X...I..\.$..t....LT..m......!:!.....Y...r...`..B...F4.").......W.u.....s..\|.2?"#..\|i-Y..4.Zl.`.n..,r.sx~n.....b.....#J...q.,.`0..Uw.....)F..X.Q\.zQ.M...YX...,%$.."....w....z....g.hlT.H.U,.4@..q.B-....pR..'...}.M.....x...$.``.hn.....c.,..X.X$.$F.&)#Z.PPL...T\|..+^1.+..S.......5....mg....gE...x..6.:U.S....X?!..5}w".....a./..%.i...K.-.V.,..)>.........y.....g....Q.I.A.Z..`.L.,Z.b2./f.u.....?.../CT..rV%v.....o..W...../@......xKO_...p.z...9.o.~&B..P.MO.gw"W(.O91..O....+....D..Xvg".\......09g#....e.E.(T.y'.l........J2.`...S..=K,qH..!..U..wqdAZ...t7...mo.K@.9....W.....g.d..`,,....T.=..]...T.PJ~]..jj.........z....E;..a....n..a{.~.A.T....!...{.....N.1a.@...SN.v...<...N[......K....dVf.R.Ig.`v.$.h.....)}...XirW.....23..*U)...YhX........._.(.y.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43796, version 0.0
Category:	downloaded
Size (bytes):	43796
Entropy (8bit):	7.986945551187073
Encrypted:	false
SSDEEP:	768:Js2Y/kwGIUHolyiDzi0fropS/nxelW9ffiNUqqxQvtSJ4bM6OzAbEV5p:uczlolxnlTopaq09WXbM6ON5p
MD5:	5321545E6FD1CEC2EB1EE4B745F450A1
SHA1:	3CA6BFFA09BB812466BA0CD5196D38B57AC51252
SHA-256:	F95DC7465B90788F8D5CB452B298BB4E6639CEC58821888DA9BE25F353035A8C
SHA-512:	B5D0EAE16E6FE120A128D7D48D44830C2EB5E10F7D0B4F2E324B693F85D4A4FB614C0CBBA09875A456F34EC937FE15CB254DE577B31FE75B92731DE321CB3AFD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Regular.20d77fe0.woff
Preview:	wOFF..............t.........................DSIG................GDEF................GPOS... ...!..6...1.GSUB...D.......^._..OS/2.......N...`hy..cmap...P.......h=j.ccvt .......)...4....fpgm.............6..gasp................glyf..!h..s........head...<...6...6...hhea...t... ...$....hmtx.............\-.loca............_$.emaxp...8... ... .;.Gname...X...Y........post...........b.))aprep...\|........hF.x.-..AC....p.....p....w.-.{......%......>`..-..F....r...!...x..z.#-.M....Z..M:.b..f.g.iC'..e..:.A.........g......;.}...C.X..M.^....x...3..Y..../.m...Zc.]M.41...tA5].}l......7...<.......El?..WF`..H..}.c..a.XZ..$.D....bW..#x.F.52x.N2_..].O.\|.....JVl..X....b.)..1..%..../+.#....6\|. ....%.Tk...(.....I.F...C.5r%.X2...A.e...&.lk.A....:4:$.j...~..S7.?.yj.Z.6.m..#....3.]..V..........<.+W..}...~U.T..h5].Z.^-....55j....3.]..V.....@.o. ..0....8.'....?.n...Y.f~....@(.......6..awu.../.~.?-A.h.......j&l.) ..q..\|.$.....JK..\|.L...\.>O.S"%[.C.d....rYn.[yo\|M..`.7Uf..D.-].C.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1002077
Entropy (8bit):	7.98664974383649
Encrypted:	false
SSDEEP:	24576:XmIizjY6EG7KrsfMsz9dhl1vM9QXZcT/Pot7KHow1o5i:kXYRkKNwdhl1vMQJcUt7KHPoY
MD5:	25EE8E8C018A2D9ADDC20A03B331B97A
SHA1:	86A3F95782EF90667EDA5D25221B99B479A86825
SHA-256:	511978CD22AFA7A9F3CE91DCA2B1ED89DF617236D1AC6264EDCFE936BAA15B65
SHA-512:	94D5E702047BC65001F5FB42F50C866FCA40357E321B0EE3E075C482EF257EDF7451BA3BEB347A383F74A95D1BC798DC7446B04E47B989F869C27DECB105B36B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTEGpL...^.wj..j..j..j..i..j..i..p..IfZ1@9W}mm..j..C\R......Rre...8LDu..Z.w...j..l..i..i..rwyg..t..h..ypzd..X.v.........................................................`..{..Z...Ah..%...Jr.e..e..`..]..?a.%2R_..S~.kV^.$;=e.C6=Q?Hk..q..,@66T\|=h.\.t...nqr]KR...[.....`.....`..)50EdX!,&.!.0#'>+/2I?%..w..X.v?[MM.WG{ODxL8SE`.{Uzk....RxMMna=e.Z.._..^.....:C~d<\yIo\|_j.s..W.....\|....q.....e.................jv...p.w......JW.8..S..o'..0..7..E.R42.>..L..L..]&...\|..M..W..d/.R..QM....l?.Q.............BL.GS..............V.aI..D@"...ng......YUrHE.e_.\|s.w.~u.}t.um.xoc?<.zq.....}....z.\|t....}.h_.zq..w2/...UQ+gb4..?....vxs>..J..n.u..]...Q..K..S..............j.os.X[..n...HU....................b..e..d.fj..P....d.T..R..Q....jn..S.^b.>*.ae.uz.E/.D-...J....tRNS............U....$5.Dl......Q.t.0..Ym....................................................................P.......................................................................

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35384), with CRLF line terminators
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	5.351659320595888
Encrypted:	false
SSDEEP:	768:Cz2XYmZwOhINHCUUGEs9wtqd2Owr7iBwy:q2dZjeJCts5oy
MD5:	714414D8F323460D6A8187161A8B77EB
SHA1:	C8D90ADE715D2878AC79BFA8576E15FF217A2DF8
SHA-256:	FC0E5BDF4287F4E976558D72D9E58269B0D4261B5A23570ACB065A26D13FF9F0
SHA-512:	A76C43768EACA16BB54F3932D1905936430E61B117B8FAFF4488B9C7D2E78BF5FCFC1477448B375B7684B350F952028CD94FD44D46D7CD39F385F0B1601647D3
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.31
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return We},get start(){return qe},get stop(){return Xe},get track(){return Ie}}),e=Object.freeze({__proto__:null,get clone(){return an},get compute(){return on},get data(){return Ze},get keys(){return Ke},get reset(){return un},get start(){return nn},get stop(){return sn},get trigger(){return rn},get update(){return cn}}),n=Object.freeze({__proto__:null,get check(){return gn},get compute(){return mn},get data(){return Ge},get start(){return pn},get stop(){return yn},get trigger(){return vn}}),r=Object.freeze({__proto__:null,get compute(){return xn},get data(){return bn},get log(){return On},get reset(){return En},get start(){return kn},get stop(){return _n},get updates(){return wn}}),a=Object.freeze({__proto__:null,get callbacks(){return Nn},get clear(){return Hn},get consent(){return Cn},get data(){return Tn},get id(){return jn},get metadata(){return In},get save(){return An},get start(){return Mn},get stop(){ret

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x1500, components 3
Category:	dropped
Size (bytes):	397252
Entropy (8bit):	7.976132765602904
Encrypted:	false
SSDEEP:	6144:Q6OHSFPl4rCB5CALORfms5wSQtdX51PjHe0amUpABUP4MhJWeLgyfikoO4utJUDR:QPHS5e7krD5BjXaoBUQ0pgyn4aJUDR
MD5:	59120D257F397069247BCC0EC2464B45
SHA1:	9D529FBB3C0ED46B020E1840877DD6875752EC5C
SHA-256:	3FD04651A7405FE26F193D56DB9D14CB41A3F76F2C3D00A4765DD21543C92A91
SHA-512:	06E17BC85F9C6F973E58EBCA5F598FD945747842F5C9672A1337408D63815721A1507A1F6E9822B36CC603F8C510A0F8336073F7596BB1ED64A833CDB1E2D7C0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="EBA026E420C33F1D20BEBBB261B343F9" xmpMM:DocumentID="xmp.did:5AAC6DFAEDD911EEB0B9D542008C8892" xmpMM:InstanceID="xmp.iid:5AAC6DF9EDD911EEB0B9D542008C8892" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6b8486c6-8899-9d4f-a326-4ba2e31d8f14" stRef:documentID="adobe:docid:photoshop:80c38aa8-fe45-3d45-8208-886ab848a801"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........8BIM.%..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	dropped
Size (bytes):	149049
Entropy (8bit):	5.598842926322093
Encrypted:	false
SSDEEP:	3072:43pj7fThL4OKhO56zapd+uMKSUqcPHyPQFFrHsfltW767lJjhcCZWEoUR+zaN9/7:45j7rhL4OKhO56zai/dUxPHyPQFZHsfz
MD5:	73E263DDBFE7552AC4A56CDE017CF1C0
SHA1:	3D8593277B9E8853971EBD9CD07B17618EC9AEA6
SHA-256:	C6968674D047EBB5A65D8A2D4C171484C395409DB3F5CC9D255109FFFD1180BD
SHA-512:	89A484F81FED8802C14D38B589BDCE602ACF0920F75C7F66F420B53BCA7EBF0945D19F9BFC96055DE578EE981BA3336A565555E177589491A9F1BDF3FD0BBEE8
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb&google_gid=CAESEGJeEEBqaX4DzK5Kxva6bLM&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A09.977%2B02%3A00&epn.hit_timestamp_unix=1713925029977&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925026772-40-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-40-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2925&tfd=4925&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/core-shape.cde027dc.svg
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	2255
Entropy (8bit):	5.633663100264509
Encrypted:	false
SSDEEP:	48:ja8++eC+MteG9VuICaZeC+MteG9VulAEpPDAWY6bG9/Jdi006VzPdR5:+8+/J29ZeJ2PEp1qX9x5
MD5:	CD3940AE55BB78B491583D475F22AD37
SHA1:	111FEB49C6FE69061F1D1958050C0231F7671958
SHA-256:	513D618285F1ED25814B26D2A70F28C910EE37F3A5626D70EC0E3D9346C836F1
SHA-512:	666A4637DFD426FF22DF3FDCBA9EE382AF504B301A92C5569740790B093E03FD7F713009AC309D3A4AAF5E05BD84A24593BD8BA184E6CDC3461B25460D9443BD
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1002077
Entropy (8bit):	7.98664974383649
Encrypted:	false
SSDEEP:	24576:XmIizjY6EG7KrsfMsz9dhl1vM9QXZcT/Pot7KHow1o5i:kXYRkKNwdhl1vMQJcUt7KHPoY
MD5:	25EE8E8C018A2D9ADDC20A03B331B97A
SHA1:	86A3F95782EF90667EDA5D25221B99B479A86825
SHA-256:	511978CD22AFA7A9F3CE91DCA2B1ED89DF617236D1AC6264EDCFE936BAA15B65
SHA-512:	94D5E702047BC65001F5FB42F50C866FCA40357E321B0EE3E075C482EF257EDF7451BA3BEB347A383F74A95D1BC798DC7446B04E47B989F869C27DECB105B36B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png
Preview:	.PNG........IHDR.....................PLTEGpL...^.wj..j..j..j..i..j..i..p..IfZ1@9W}mm..j..C\R......Rre...8LDu..Z.w...j..l..i..i..rwyg..t..h..ypzd..X.v.........................................................`..{..Z...Ah..%...Jr.e..e..`..]..?a.%2R_..S~.kV^.$;=e.C6=Q?Hk..q..,@66T\|=h.\.t...nqr]KR...[.....`.....`..)50EdX!,&.!.0#'>+/2I?%..w..X.v?[MM.WG{ODxL8SE`.{Uzk....RxMMna=e.Z.._..^.....:C~d<\yIo\|_j.s..W.....\|....q.....e.................jv...p.w......JW.8..S..o'..0..7..E.R42.>..L..L..]&...\|..M..W..d/.R..QM....l?.Q.............BL.GS..............V.aI..D@"...ng......YUrHE.e_.\|s.w.~u.}t.um.xoc?<.zq.....}....z.\|t....}.h_.zq..w2/...UQ+gb4..?....vxs>..J..n.u..]...Q..K..S..............j.os.X[..n...HU....................b..e..d.fj..P....d.T..R..Q....jn..S.^b.>*.ae.uz.E/.D-...J....tRNS............U....$5.Dl......Q.t.0..Ym....................................................................P.......................................................................

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (638)
Category:	dropped
Size (bytes):	2236
Entropy (8bit):	5.6521115802323445
Encrypted:	false
SSDEEP:	48:ja8++e1+/IeG9V4CaZe1+/IeG9V1AEpSIW56bG9/Jdi00okWdR5:+8+/Ug+ZeUg6EpSEqXrkI5
MD5:	5DABE6E8D40E2124FABE2E82CC659633
SHA1:	BA94F7B3CBC8B8431ECFC7F7DDF2EE9C420040CD
SHA-256:	6D767EF9E536B03A0CB2C7105B053822129995C6246855A7752ADB10CBAF1A3D
SHA-512:	C8569AD398AA16F676FE2DB44857CD55C2BCA575E60C0EF16AA99CE3CF596F02B793B7764F3E8A898F0F0FFFD6E175B613A0977CB83840C18E45C3FD593499F1
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1578721373;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1578721373;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	106028
Entropy (8bit):	5.234013803815825
Encrypted:	false
SSDEEP:	1536:9tO3uQXi41oPkvBVacTFMXCB4zwgi8x4XTerYybZ1RGx7JOn:bbQJgkvBpYo04jlA
MD5:	F57F5BBCB09D115F917B0EFAD0E910FA
SHA1:	44E8934F5EC1C8C339FBA195D89821B7F7D73987
SHA-256:	E5041A945EA3027586F51DDC29656F933C80A1E976BFAE9F6FD80687A55E318F
SHA-512:	6B82E8584C4A4E1C1F527CBFDFFB93A703DD7B19AF0F012547690BFCDFF7AA3ABAF66D35BBC7826CD364F0525F878FB52297A6458E98A1922AD826C1CF217016
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,u=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},s=!1;function c(t){s=t}function f(t){return function(){return l(t,this,arguments)}}function l(t,e,n){try{return t.apply(e,n)}catch(t){if(d(t),a)try{a(t)}catch(t){d(t)}}}function d(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];s&&i.error.apply(i,u(["[MONITOR]"],t,!1))}function v(t,e){return-1!==t.indexOf(e)}function p(t){if(Array.from)r

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	326856
Entropy (8bit):	5.507411627674058
Encrypted:	false
SSDEEP:	3072:0EvNv1mNYCSJR0YvoTxvht+Nz1t0x/hgabGpLsev6nsxuqrr5rBH4wWX2QDt:Ls870JrCNvms1Djzw
MD5:	43A224CE59E07EAD9CBB9A19231868D2
SHA1:	65384F5F2481FFF915363784C4BD0AEB9433EEDE
SHA-256:	2C442627A101ED151E72DA8F11443FDEDBBCC34AA1A853BDED8DD5858B230F80
SHA-512:	876F7FDC42003377FAC10433F134EA26D981CC8F0E5160371AA446B08EB2C7BD47DD24248F7FDE44CBBF2BC4EDAC724F3439D0A9E6E0CFBA75823FD276D62A69
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/e893f787.529ff2dd2d297b89.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r(1579),i.encoders=r(8649)},8620:function(t,e,r){var i=r(8996),n=r(1140);function a(t,e){this.name=t,this.body=e,this.decoders={},this.encoders={}}e.define=function(t,e){return new a(t,e)},a.prototype._createNamed=function(t){var e;try{e=r(6144).runInThisContext("(function "+this.name+"(entity) {\n this._initNamed(entity);\n})")}catch(t){e=function(t){this._initNamed(t)}}return n(e,t),e.prototype._initNamed=function(e){t.call(this,e)},new e(this)},a.prototype._getDecoder=function(t){return t=t\|\|"der",this.decoders.hasOwnProperty(t)\|\|(this.decoders[t]=this._createNamed(i.decoders[t])),this.decoders[t]},a.prototype.decode=function(t,e,r){return this._getDecoder(e).decode(t,r)},a.prototype._getEncoder=function(t){return t=t\|\|"der",this.en

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25404)
Category:	downloaded
Size (bytes):	58921
Entropy (8bit):	5.256475194244875
Encrypted:	false
SSDEEP:	768:8ZUIkY9W8nMMxOKpCK7NiQI2tTOPFt0PHF4bQi65salOPCbYlxN6s13bdLlIBf1m:8ZWWW8MMxOBSN+FeWbQisvoAYlP3nM5a
MD5:	4B9ABB36767431F05495228EB82EDF01
SHA1:	CFE3AFC5D23EAF2F9DB85EFEAB696F57DB948658
SHA-256:	262F87D47643975A4633B675FC224C7A178D99E579E5D767F4A43CA7CC0BB9DE
SHA-512:	3257741AAFA0D0FC4C99185A3B55FACDF5E5F25B7D61DCBB9C0365E41D074E462837731F747725F493B3D2039D068B8D31AB8D7E09DBE18A69B16A94A65EBE3F
Malicious:	false
Reputation:	low
URL:	https://cdn.treasuredata.com/sdk/3.0/td.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=32)}([function(t,e,n){t.exports={forEach:n(35),isNumber:n(44),isObject:n(1),isString:n(8),isA

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/globe.1603f8a7.svg
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530), with no line terminators
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	5.401427845765136
Encrypted:	false
SSDEEP:	12:fbjqcUUlxAU7vrf6LPdqIyd6t9JYQEnc2hcDQsm5RX3+e:fbjnplxAU7vryLPdqIy+YIMNsaXOe
MD5:	EFC7D0DDD2FA9D9FC1C6637354E0E698
SHA1:	4E1424DD41F9AEC14F1C6F314872091D76ADA359
SHA-256:	B9EBCFF4A4470EB88AA94CD1DC9CD56873768D945E367CCE16AC8A9822F94791
SHA-512:	3E9A00B3B74DBD84B79EFBBDBAB70FCEDEA04B7DA4B83C66F10D408E5542A98DD3B210A796FEBD4C905B5A8F7F132672129F4206DE6774E65B2AD39C76A78126
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/pricing-43f9c565fe91f700.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var r=u(52322),e=u(19552),i=u(53145),_=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(i.Z,{title:n.pageTitle}),(0,r.jsx)(e.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=19164,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181528
Entropy (8bit):	5.256138856765788
Encrypted:	false
SSDEEP:	3072:B48AcQ9ZKjn3y4ASpGLAF0armAMD0OhUyti:BZAcQ9ZKjvASpGXOmAMYOjti
MD5:	30C77F1C465FFEBC4A34178E9E87E6B9
SHA1:	B763FA6E1CB1609EBF91E4FFDF610C89A1EA887E
SHA-256:	96C050F7520ACD3816919BC2E82F19BC0B9161C97C2C128EEEB522D8E1F10C96
SHA-512:	B77DE6B85ADB6561D97D656979A508DAFEB57E7019D0B07688F95F6E41EB4DE6F6034097B979AE47DC69AEFECFC59FE56E761FEFF7697D65432AD4CFD51F4FDD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];Object.prototype.hasOwnProperty.call(r,t)\|\|(t=r.log),o[t].apply(o,e)};function i(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(i){o.error(e,i)}}}o.debug=console.debug.bind(console),o.log=console.log.bind(console),o.info=console.info.bind(console),o.warn=console.warn.bind(console),o.error=console.error.bind(console);var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,o=0,i=e.length;o<i;o++)!r&&o in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,o)),r[o]=e[o]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return f(t,this,arguments)}}function f(t,e,n){try{return t.apply(e,n)}catch(o){if(

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	137498
Entropy (8bit):	5.315086070700865
Encrypted:	false
SSDEEP:	1536:0JYKyCVB5V3V55gfNqmNu7ysayEXSVLNaWn2SluTL:0tHxmszEXSVPUTL
MD5:	84A46D0B6196FFA368647E975120E17B
SHA1:	9D241624EDB0C49A2327D6637B992C8EBA216C85
SHA-256:	741BE7BD899205EB5E3DEF9266A640BF0A797361F9B5F54320087CDC17514AB8
SHA-512:	A5476116F64EF647C66655806F03DCF139548E8BA691BECB62E9CA7188DD644B804B2582F0AF78B2175804EE3AD76695764A54C1E4E10C6F40139DF52D3D3626
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1627.f2cf297cefb46766.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeError;if("function"!=typeof r)throw new TypeError;for(var o=[],i=0;i<t.length;i++)if(e.call(t,i)){var a=t[i];r.call(n,a,i,t)&&o.push(a)}return o};var e=Object.prototype.hasOwnProperty},468:function(t,e,r){"use strict";function o(t){return o="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"===typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}var i,a,c=r(977).codes,u=c.ERR_AMBIGUOUS_ARGUMENT,s=c.ERR_INVALID_ARG_TYPE,f=c.ERR_INVALID_ARG_VALUE,l=c.ERR_INVALID_RETURN_VALUE,p=c.ERR_MISSING_ARGS,y=r(971),d=r(467).inspect,h=r(467).types,g=h.isPromise,b=h.isRegExp,v=Object.assign?Object.assign:r(203).assign,m=Object.is?Object.is:r(113);new Ma

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31554), with no line terminators
Category:	downloaded
Size (bytes):	31554
Entropy (8bit):	5.3137056116895405
Encrypted:	false
SSDEEP:	384:eLY909am6eTnSE73zhW4X86I+4TesAOSEqiQtO3pJ5kGthylQSm9cThgsS1yNAzO:oMMjk4X8x+geFOSEqCrOZAEuyz01wHp
MD5:	A5E9E0BD25747C28AF2C8919506692FF
SHA1:	070899FA44E808C97613DEF2DB7E221190F15D01
SHA-256:	A47C47A549C7BBD0E0575A8E5B63FB34EA953CFD878EF25AA14E3A6557BE710D
SHA-512:	3FA7EC8C68A5C9A38EE2A108985337FEB538B61C12C2670BBE986714FF6CEC9807F9C65525A1AB8B6285E501E2107485BB16AD11B9DCB4C749CE4C92BC071106
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css
Preview:	.panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48px}}.panel__topbar.showBackground{border-bottom:none}.panel__topbar.showBackground,.pricing-page__background{background-image:url(/_next/static/media/PricingBackground.74fe38a7.svg);background-size:cover}.pricing-page__background{position:absolute;top:0;right:0;bottom:0;left:0;background-position:0 -60px;background-repeat:no-repeat;z-index:-1}.pricing-page+footer.footer{max-width:1440px;padding-left:24px;padding-right:24px}@media(min-width:768px){.pricing-page+footer.footer{margin:0 auto}}@media(min-width:1200px){.pricing-page+footer.footer{padding-left:48px;padding-right:48px}}.Collapsible{color:#333;outline:none}.Collapsible__header{display:flex;justify-content:space-between;align-items:center;cursor:pointer}.Collapsible__header-text

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent=&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999786054218737
Encrypted:	true
SSDEEP:	12288:ilnav+9jVjaW5FwvTL0TaFOM9KwIdijlkQaJXJnHedifLztOOuJmD/DwzF8xFbN7:QY+95aKsqEO2K4jW/vI4ZDD+ebBfSmP
MD5:	AA47E0C063E5B8DAE04844E180BB62CA
SHA1:	6DE031EE1DC1726D9B6A70FAB2F58F075FE443D9
SHA-256:	7D0352F0B0752F56F73018EAFC724D5561E876E83E5A4CA660CBDC1F20AB8802
SHA-512:	6EFB6A26578B5ECC09061C764A2CC9C60ED615674A519C6CAF8D02AFE45428305BB3D77B908F5095DAAAE513EC5CA47A8B98DEC44A8478AFEC08D58891709571
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4:2f75648d7166a3:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free....mdat!..@h.!..@h.!..@h....r....n.E...H..,. .#..x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=30.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50......e..$.G...$...E."i...i.}.].../]..H...>...U........Y..0...)V.C..LP./.......\|..[..I..Oh,....U..%..7W).....'.9........JdSJ.d....1=....&<s......+O...E.XX.K..q.h..mz.7.<..%. ~..t.DsR>w.o.m.6/...`F...5..._.../.E.&.\+.S.,.Z....0.,.X$^.U\.q.i.-.mU.P.{...c$..>m.'T.vf....I....a.[u.......3Z...

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48741), with no line terminators
Category:	downloaded
Size (bytes):	48743
Entropy (8bit):	5.189547988295321
Encrypted:	false
SSDEEP:	768:fMyiaqxb1ZN5wG0HvPRvzK7jV0z42NcCo:UD7Dw7zSCo
MD5:	F30A94DA42198BFD524696AD25D167CA
SHA1:	EF472859703280BC7801D25A82BA82A24937ED01
SHA-256:	0F9310871E672B3F79C80D21F6C85D345F21B0AF2C8EB41D044444B34C1B2B95
SHA-512:	1660FEDD13949FC377A191DD1BA84588B08F963FE2970C7E479D61CB96EEBBDE3B595D99C1B10897342A3648F297A3DF61B57C613B4ED28F964F11AE59DF8C07
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US
Preview:	"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function(){return c&&c.isInitiated},e.prototype.hasConsent=function(){return!0},e.prototype.addEventListener=function(e){"ready"===e.event&&this.isReady()?e.handler({api:this}):m.on(e)},e.prototype.triggerSurvey=function(o){var a,n=this,s=!1;void 0!==(null==o?void 0:o.timeout)&&0<o.timeout&&(a=setTimeout(function(){d(!(s=!(b=!1))),m.emit("survey_loaded",{available:!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dtName},e=!1,t=[];if("none"!==f.storage&&y){var r=y.state(),i=0,c=0;for(var v in r)if(r.hasOwnProperty(v)){var l=r[v];if(!0!==u.isTest&&

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36189
Entropy (8bit):	7.469539129680351
Encrypted:	false
SSDEEP:	768:JEM9uTjYhl6NkG3WRX4XpKrkq5UJf/WpCWwpeqkg:59uH8l6NkGmRXoKrkiUliCWwhkg
MD5:	998A47703D2BD3C00DB0BC1BE6E30A11
SHA1:	0471BC53270FBE8826A30F2095576C35473BA739
SHA-256:	5AC4138920826CE9FFC12752D6C6954E970C14C95C3C9197212C481847FC28FF
SHA-512:	D2CE11C56F7993478657DFF38A0A50E92311F92C4962579B9D295890DA6C6AA9484F14E442701D9910F8A2FC9D7CD468F4D55D705E759E0B2706E83EEE06A453
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png
Preview:	.PNG........IHDR...X...h.......~4...$IDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............qW..G.............d............&X..........k...i.............TV&X.K.........@sg...M............L....d..Tx...........U.....h`.e.X............C\|^50.r@.................,....<.tDx.A.H........... .L....\`y....e.\.........@1v......W.4..G9....................c.K......>3...H..N.._~.....OK)..Y.....;....9............>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yx.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:...........q.........o{...K.e!.\.I..XY)zK.........rJ............VL...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	4.606544918787549
Encrypted:	false
SSDEEP:	24:2VB6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHQ1:3bwMlGbFWLT9f0W2dZNw1
MD5:	7D53C302929B29B84DDF7B7B4F916E47
SHA1:	EA2CE4181E88C60688511A4FC824D756110305A2
SHA-256:	39A6FB319CFAEDD656DC1DD9E9EB41E9B6BA564E9654934F4543447178BF307F
SHA-512:	05AD009350224AD184F9769314B0E6F5EE24D5656A772BDC5A144CCD9D6C0B8B3F06C9D19031E0307D8F341336F476BFFD9260FD5C0A15942CB9B98AFFFF82C3
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/56335302.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.insightsuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.webinsights('set', '_uetmid', m);.. w.webinsights('metadat

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27984, version 1.0
Category:	downloaded
Size (bytes):	27984
Entropy (8bit):	7.9917050547850605
Encrypted:	true
SSDEEP:	768:LHRy3jX6kwUDehXOjqYEYcxOLzgP7sKm4E:9ImXUDeheeiMOfYVE
MD5:	0E2EE02874D250D7602AE70E15E174C6
SHA1:	E1AE348778A4318680B6C7FF26AE216C348F0BB3
SHA-256:	AE3F0597EF34719D83D8153EC6A734D18C28098264F903424112BE85354E78CB
SHA-512:	469CA42C8C9DA54E161B7A826EF48240762AD42E94060458BF8D6F73F618956BF0FFDEA875C03E2FADEEA72493ADE9BAB32B70DECFC4754F066FD9AA93E02DE5
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2
Preview:	wOF2......mP.......(..l.........................?FFTM...4..8..p.`..n..r..W...........&..6.$..H. ..\..~..}.E.gpn:~.Q..."s...4<.6..NJ.!a.......O.^.....%.8,.Y.k....\.<.......i......L...Ek...D....{..\8Nt.]t.I>k6.\|g.. 3.....I..T.H8wz:.......Q..gs9;dS.PF...7m!;.d.. .m............D........a_.$......R.[..."Ks..\f....R_.@.W....nD...A..f../.5.....z.~.&..>t<....h.....Q.AL..p.2.....z$.Br..d..C..........<..?...`...(b.b4`.(.+...c.).....^e...../...X..?..=...^tX.Mpm....^...E4V.Y=p......P.Qo....M.....i....+....3[>.r..'.v.iQQQQQQQQ7..M.K...d5.:N...i.'...RJ3...E.y...;Tu.(..@...v....l.F{...O.m8.....1......0M.Z'._..kta.J$......+G..r.."...!d.j...+....Q('.P(3...../..{.=..E..PU.7...,.<gt.,.t6.]C.0..@.r.^ .c.....f... ..h:+.bI...6&Mr..E+4.8^.X.+..7...8&k..o..3.f...T....M~...w.....R..IC9...P..u..e...#<...0Y-Of..lJ.V.eo...."..{.4.G.=F).X!.4n...".Br..Pk.:.q. ....op....Y..5.....`...Ym*..'m>..=j.n..2.....]vB.V....7j3kf...N..^.(....F............[w9..-x.d..............].[.{}

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.127%2B02%3A00&epn.hit_timestamp_unix=1713925032127&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925026772-110-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-110-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=56&tfd=11578&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34592)
Category:	downloaded
Size (bytes):	35730
Entropy (8bit):	5.226602105438823
Encrypted:	false
SSDEEP:	384:C1NpkslDFLmy+/XFsjIPd3w1jr21lKJCngCZyzI56ul6OY9g4+7mZ9kvnTLvPfUz:aLk6q/2jCBlLW+HsESrp
MD5:	40097CDF413C1F1F303C66489742CB44
SHA1:	210051D7B3A5F9E2BB2400793350C0C9C0F9467D
SHA-256:	D19B7AF86A35DFDA3A91657FB0F532541AD1BF34B75C68BB9992A374CD5FD5F2
SHA-512:	9C551182ECAA04E85FD566A2BC5A9B7F16D9993940A0AB0617740EBFFB45BD5B9EC889B70C09A2F2DAB7C5CB1275DB028D6C37E67EA942614AE0D50FB1F4B74B
Malicious:	false
Reputation:	low
URL:	https://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1
Preview:	!function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])})(t,r)};./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7084), with no line terminators
Category:	downloaded
Size (bytes):	7084
Entropy (8bit):	5.6439767654353
Encrypted:	false
SSDEEP:	192:HWr+DWDb3XanHnxq7tFkWTFkGtvNMlPS4SmkpDGRFlaH16RhxcJ9/q:HWr+DWDb3XanHn8FkW5kGaPS4SPp9H1w
MD5:	9BC454B78703C124880F97850F0D0384
SHA1:	22A621FEC72AC20EA2268E97442EC19B3DDBD80C
SHA-256:	C48D94B7A374E5BD4C861D57DB4474B622705F0A658EC5074895C61D13DC3757
SHA-512:	FE0C7C02C737A5717E77D1A7229338C842435A38FF6C58B5272D6D6DA5CF1B60B6204FC0B83D19B57F4E6158AD2FD41DAC88768EF6C8EC82869D0C0C8D9D1C27
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/undefined
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="referrer" content="origin"/><meta property="og:title" content="WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free"/><meta property="og:description" content="WeTransfer is the simplest way to send your files around the world"/><meta property="og:image" content="/wt-facebook.png"/><meta property="og:type" content="website"/><meta property="fb:app_id" content="265125293564341"/><title dir="ltr" data-testid="page-title">WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free</title><meta name="description" content="WeTransfer is the simplest way to send your files around the world. Share large files and photos. Transfer up to 2GB free. File sharing made easy!"/><meta name="author" content="WeTransfer"/><

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552
Preview:	{}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/spiral.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65442)
Category:	downloaded
Size (bytes):	180046
Entropy (8bit):	5.756001709531048
Encrypted:	false
SSDEEP:	3072:2nObdvkLKt40JQ3AhuFXIXo+Bgfs0NYWe/enqdXigyBtE7y99i9QA:yObc24iOYXo+BgU0NYQn+igyBt3L05
MD5:	488F87C26A52060914792B3A55398913
SHA1:	11CF859EA5A7ADE6E7E9B18033742716947E975B
SHA-256:	AEB8A5C81283D7463DC96141351CA86637EF82344FE4D01AA944D94759C4F9A4
SHA-512:	C13984E50785CCCC199B6D10B101D9146141B5BB27DAC3FF775A6874EAFFE5D30FB5D75FAD841AD60FDD5A3B9D61E342A9F11C622D76170A5272E5D16F89EDE1
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/bundle.5131ec90dd1db1689128.js
Preview:	/! For license information please see bundle.5131ec90dd1db1689128.js.LICENSE.txt /.!function(){var t,e,n={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:["interactive","mask"]}},2274:function(t,e,n){"use strict";let r;n.r(e),n.d(e,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return M},hideCloseButton:function(){return h},initialize:function(){return o},onBlur:function(){return v},onEnterFullscreen:function(){return T},onExitFullscreen:function(){return L},onFocus:function(){return N},onSafeAreaUpdate:function(){return m},sendTrackingEvent:function(){return y},sendTrackingVAST:function(){return j},setCloseButtonColor:function(){return d},setStatusBarColor:function(){return g},showCloseButton:function(){return p},startUpgradeProcess:function(){return l}});let i={};const o=async()=>{try{const{Marco:t}=await n.e(441).then(n.bind(n,4441));r=new t((t=>{let{availableListeners:e}=t;e.forEach((t=>{r.listene

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28644, version 1.0
Category:	downloaded
Size (bytes):	28644
Entropy (8bit):	7.992787664504082
Encrypted:	true
SSDEEP:	768:lMH76XTJb9Di5l3gc3e1YnJWfIZO2p2PG07:076XVbJint3a6WIZOe2
MD5:	FBE81375A88B68A2A2D7FFC63E6A0D8D
SHA1:	5410C67EFEF252A2AEAF77C118CB184E179CDD48
SHA-256:	4C9CEA7B804803A1A27B183E485C684934480E009E0F999F64ABC6C26F14AF0C
SHA-512:	1FEC84CDAFD8CE9892B6CE72B6887B361FCEBA3BF9E677DB9E5388B08948CE50D6618AFF158F5DE504F81EA62E81E92AD2F3D6D235E13511E1AE042F370FCF16
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2
Preview:	wOF2......o........<..oy........................?FFTM...4..:..p.`..n..r..W.....T.._..&..6.$..H. ..\..~..J...7dnNx'(.......bi.......>ed ..(......'&.9,w.K..........s.K...9......P&..k.....uo0v.@...8!b[W.T+. "x....j...A..N.....}...J.....[.:d.M.t:D.B...v2.WXM...Y./.=...a.......VI.......b.....@.5}..E.[..78.dB..AA.s'.l..v<.....}.......S/.<......$.I....3pJ..x~n.....iaL...............F.............E..s..`.....2X.#...d.....c.."i`a%v.~..../.k......^....^..........f".....:..D......`..p....x5....i....R.0.._;...]..\|.[..o.S^...x.2,.v..s\|.i.]'..Q.t..e...S.Tt.6`zE..o..il...K..<..KY.lwM!..4..m.W@R@._.Z.........o.. '3.>u.e!.J..z<..........i....\|....O....PL.o......W^.N}.,..o.z...[<...D...IL.3.V#.D.<..6x..w....{........9co8..-gM..Y.I..9.....E.oq.....w`==}B.9..T3...jj.....$......$..8NNN.....W..)`....Un.R...n.p.$@FH....NY3e.)S......Z. ...v...7J....v.i.....DV.....T...f.?...J2(.w.#t9...vV......_.._..H"1.....U.@....@...2.dU.+.9...9A...x.9Tr.B........+\.....T.......

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17274), with no line terminators
Category:	downloaded
Size (bytes):	17274
Entropy (8bit):	5.523574327087312
Encrypted:	false
SSDEEP:	384:iJvPnYxIh54XHw2WDTaEWgG0frqJY+qt02XhOwuG7+B6:iJvPYxCYogEOJctlXhOwuG7+B6
MD5:	227DCD2826F29B0374C5CDA69996B745
SHA1:	40E979435BFF146FE9B50B1B8949A224E71DCF95
SHA-256:	27C216F4A43D47B8BC0B446D13B1FCFC6A93D728FCFCE136C65A1CAE07136662
SHA-512:	BDA6333B0FF8A83289B1BC606A9A0827F23276CD7721CE48B52C76A48A2DD7647B12AD6834F5343C001ED70735A6E405537068D9E12EC3816C62DFB245CC6B0D
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/404-d60ba40552f46991.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(72169),d=n(78967),_=n(49034),f=n.n(_),p=function(){return(0,o.jsx)("div",{className:f().AppLoader,children:(0,o.jsx)("svg",{viewBox:"0 0 33 15",className:f().Loader,role:"img",children:(0,o.jsx)("path",{fill:"#d8d8d8",fillRule:"evenodd",d:"M25.883 15c2.336 0 4.143-.62 5.2-1.75.5-.538 1.056-1.44.64-2.12-.362-.592-.974-.705-1.697-.338-.723.367-1.585.565-2.502.565-1.585 0-3.225-1.328-3.225-3.248 0-.2.165-.17.388 0 .5.422 1.53.76 2.808.76C29.86 8.87 32 7.32 32 4.833 32 2.206 29.61.2 25.91.2c-4.14 0-7.394 2.655-7.394 7.23 0 4.265 2.67 7.57 7.367 7.57zM4.497 15c.973 0 1.418-.593 1.752-1.13l1.5-2.372c.306-.48.556-.735 1-.735.446 0 .696.255 1.002.735l1.5 2.372c.335.537.78 1.13 1.753 1.13.89 0 1.334-.395 1.723-1.214.64-1.384 1.25-2.966 1.89-5.48

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090), with no line terminators
Category:	downloaded
Size (bytes):	46090
Entropy (8bit):	5.4071519094390865
Encrypted:	false
SSDEEP:	768:EyRywZgW+Zx/AFh32HXBbRW33OKdZAsI9Hmxv+23i2D+FRPTM7z2+:EYMZx/A732HXBbRWGGxv+23i2D+FRPT4
MD5:	6D2B1124D8D986D756B08F0472FAFE16
SHA1:	2F9FB43C2BC571D911BA6BA200DAD84C7176CE25
SHA-256:	73280A5585F71A966D118203D402213832F3A7FB3208638EFC2BED11183C41D0
SHA-512:	B912A8FA2C9DF3CA17CE12488413DF70DD1625375DFEB513313A1E002CFBF60BD485664FF2CBCD402B4FCA4428913F4708F642E59CD90B410C92597FAABEBF3C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google.com/store/account/subscriptions",n="https://wetransfer.zendesk.com/hc/en-us/articles/4563370515988"},29975:function(e,r,i){"use strict";i.d(r,{Z:function(){return n}});var a=i(90581),t=i(8870),n=function(){function e(){(0,a.Z)(this,e)}return e.isOn=function(){return this.currentVariant()===this.variations.on},e.isControl=function(){return this.currentVariant()===this.variations.control},e.currentVariant=function(){var e=(0,t.bB)(this.key,{value:this.variations.control}),r=e.payload,i=e.value;return this.payload=r,i},e}();n.key="us-price-change",n.variations={control:"control",on:"on"},n.payload=void 0},67568:function(e,r,i){"use strict";var a=i(86368);r.Z=a.Z},86368:function(e,r,i){"use strict";var a=i(70865),t=i(96670),n=i(2784),l=i(

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (911), with no line terminators
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	5.144668855875399
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5LR:0E1JBaYcfICAK
MD5:	E434B9481E572CE66AAAF238A1F3BE93
SHA1:	D89798424A7EE87276EF5A8431E458A31FD917F9
SHA-256:	00C602D4C83975BB9D9C9133D537E5FB93104A2F5A5C11957D62538A30153B11
SHA-512:	27104F7BF2823584B50D359902838E9CE78CF82B1C2B7D712E04DFB2909D78861802094847BFA2AC32860747DC8989A12BBA47E92FA2FF39460FCA723FD21DC2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7ec742af40df2646.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18513), with no line terminators
Category:	downloaded
Size (bytes):	18513
Entropy (8bit):	5.362349540732293
Encrypted:	false
SSDEEP:	384:gQ1XNfNr1zRGgbCI3TMsD4h9YAHbT8NsWDVYs8a/Q48MO2KzuaqS7+nKzSdZq4Qf:gQ1XNfNr1zRGHI3QsD43YW8NzDes8STc
MD5:	56B11DEE72DF8E44C1E72BFD66E237AB
SHA1:	47EAD25BFA65C2BD1E0D77C1F388B3174B514263
SHA-256:	43312930CB4FC5A30F3A9C23A047948B181ECE20BE883E817E5A737475600E54
SHA-512:	4EC983B4ECA5BB6381EB2C7169392807F40407E340B82BEE0C229184B0F68041C8F56EA4CF7E8D09064632E3F18614A9475FEBA7E97C2E0671C9537B342F62F8
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js
Preview:	(()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{clickOut:()=>j,openPanel:()=>x,rotation:()=>H,sendAction:()=>L,sendError:()=>U,sendEvent:()=>M,sendTiming:()=>F,showDropzone:()=>$,timer:()=>W,ui:()=>D,vast:()=>k});const n=e=>{if(!e)return;(new Image).setAttribute("src",e)};const r={clientTracking:{},timings:[],initFromClient(e){this.clientTracking={...e}},init({envName:e,serviceName:t,version:n,sampleRate:r,applicationId:i,clientToken:a,useCrossSiteSessionCookie:o=!1}){i&&a&&window.DD_RUM&&window.DD_RUM.init({applicationId:i,clientToken:a,site:"datadoghq.eu",service:t,env:e,version:n,sessionSampleRate:r,useCrossSiteSessionCookie:o})},trackError(e,t){return this.clientTracking.tra

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37028
Entropy (8bit):	7.501316586529086
Encrypted:	false
SSDEEP:	384:mOWayMNHWO9WwDoQuNjNfGehyoMraSspu6/5ije3gEFo8zEPvA+YCxkbeR/7VdLt:mOWREHnSlIaSszsiQEFo8zEPvCets6
MD5:	62615BECF8831F197E70175A43C41000
SHA1:	E5B34BE17B73F3612BA632EB7D42F8779A027B64
SHA-256:	054C3FD1FB0EA4454A5E70D3530656BDA559E38A08E9F8ACE9BEB8A8EB64839E
SHA-512:	7E41D6DBC7FD5E11A142BF53D011703443DB95F5D1DCC2E21DD1DD982874E2BF2920A1803005C489F31D21FF2ACBF76451A581A98413AE667A77CB08AB949F81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...h.......~4...kIDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............P..A.............d.k...........\|i.%............i.............TV&X.K.........@sg...M............L....d...Cx..........U.....h`.e.X..........7.C\|^50.r@.................,....<.tDx.A..r.......... .L....\`y....e.\.........@1v......W.4..G.ad.................c.............H..N.._~.....OK)..Y.....;....9..........0~>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yz.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:V..........p.........o{...K.e!.\.I..XY)zK.........rJ..X1.........@...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43188, version 0.0
Category:	downloaded
Size (bytes):	43188
Entropy (8bit):	7.98710296602658
Encrypted:	false
SSDEEP:	768:x94SBRGblSQhMXU2pewGKB6kuvBkW3fsNPSghXI+Ktehv2hMobEh5p:xhBcBoU2plBIBvODFy4hehMl5p
MD5:	55576599A2D772F9297C5036D355B1FB
SHA1:	C52E4F9A59137105DEB12A3DE25EE7D5A15FD286
SHA-256:	1E3D5D86432B9BFCDF25CE0E35FD23667CEA86F6FA71FA920CD84ABB70258F73
SHA-512:	8270B97F43FFBE59405D81A988A5C194B15DCB3159D49FF7C37560C90069F1EEF67BAB8E15C2DCCE69FB5CF51810D4D4834AF69DB6B6571BC3D0464C5D6B6514
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Super.3397811e.woff
Preview:	wOFF..............v.........................DSIG................GDEF.............\!.GPOS... ......4.A.d.GSUB...........^._..OS/2...p...N...`j{..cmap...........h=j.ccvt ...,...)...4.M.zfpgm...X.........6..gasp...$............glyf......s(.....fc.head.......6...6.G..hhea...8... ...$.S.Fhmtx...X.........."!loca...8........w.^maxp....... ... .>.Mname.......]...6R5..post...T.......b.))aprep............hF.x.%..A.a...p.....p.....p...L........$..5....3.)...f..d.+..R.t.m..{.\|..}6.u.hd....f.1.Xd.eV.EF..C_.1..Z..P....'.....W?L.4..C...c.......x.,..l.`............m.6....FXD./^\|.b-.b-.'_.{....x-n[.[ye};/.vV.y??..H=v.?.T....X.K.#xk....X.YyL....].[.Ai.........F0..T..nc}y...M......Epo.l<!.8..yJ..s..P.L..9a$.....I2...D.l:...$.t^^.E.....h.H.[^[.D.x..e.,...^..n9(..&V.-.rU.J.<...Z.J.. ?.......,......N.\..D.+Ke.....W..Y.w.O..cy-o._.e...6b.[....a.2333333333ch.L........?s.t.....<.=..Oyw._Y..$;y..!.._....VV.VK..DvX.........z...a7..`.b/8.Wa.g^.Q.T.5n...:..6..%..H..8.1s...2\...Z.\.9.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x968, components 3
Category:	dropped
Size (bytes):	514648
Entropy (8bit):	7.988656448669567
Encrypted:	false
SSDEEP:	12288:alOr0gBBMts7mJEair9shsDUKXRjnmLsahzgfBatPu/:AOrzsts7SDirS+d0Dzg4PC
MD5:	F714ED5C817117AA20B0CAA4BAC76725
SHA1:	ED0E72BE4DA41315A54FB1F384B15E19442EFB17
SHA-256:	AE534A756B4E8DE5913000FB20BEF2B94F8C35282FD0979B1383C13FAD309C0B
SHA-512:	7F84860E904729E6ED676392C380E17D337E0AFD990C14615831F6B9B11E626FBBD8F4E5A35F11159E91CF026FC61115DF6993AAE165728299B48EE7B048A0BD
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	217740
Entropy (8bit):	5.732396324650163
Encrypted:	false
SSDEEP:	3072:h6/QzhroKetFI/uFBTWisniuipaQRv7h5c8xZ:h6/QPMKuFBqiW4c8xZ
MD5:	EF2D82DD3B036301486A6404BB563EEA
SHA1:	A9DD864019BECFA21F0BF8209724BCA2B8C35CAD
SHA-256:	5E98BE5A6280EDF751DD03DB7276ED4170746365AA5069A07F1D86E90696B549
SHA-512:	51DB9DCA50805023A60A4BEEC5F0064692E31FA4DA3AEA78D03890BF8F0E6228E9C7D1D64D8450ADFEFEC5DFACE8BE9A8794DECBE8B73BC2432F3A2F4A7143B0
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/bundle.4507bb975b4fb0667dff.js
Preview:	/! For license information please see bundle.4507bb975b4fb0667dff.js.LICENSE.txt /.!function(){var t,e,n={7296:function(t,e,n){var r={"./circleFilled/index.js":8696,"./circleStroke/index.js":6596,"./default/index.js":7428,"./squareStroke/index.js":312};function i(t){var e=o(t);return n(e)}function o(t){if(!n.o(r,t)){var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e}return r[t]}i.keys=function(){return Object.keys(r)},i.resolve=o,t.exports=i,i.id=7296},1176:function(t){t.exports={title:"",platform:"desktop",variants:["1","2"],tags:[],deployPathOverride:!1}},8696:function(t,e,n){"use strict";n.r(e),n.d(e,{ccOff:function(){return i},ccOn:function(){return r},exit:function(){return o},fullscreen:function(){return l},mute:function(){return s},pause:function(){return a},play:function(){return u},sound:function(){return c}});var r='<svg viewBox="0 0 16 9" fill="none" xmlns="http://www.w3.org/2000/svg">\n<path d="M7.58848 5.47848C7.51168 6.38088 7.19968 7.10088

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	63664
Entropy (8bit):	7.897277805746561
Encrypted:	false
SSDEEP:	1536:mLePkHFlxOPPUNCLio/yNzzcf0eVLpCpARlbzxFD0/SJe7Ggz/yK:aFSPPa8/y5Ql2ARdzxp0Me7Ggzr
MD5:	55384393C16280C117D4A3D12F2B595E
SHA1:	12AAB590F0269F52370AC4642AE4F0702EFB3A42
SHA-256:	BEC1E73A34D3B2B0BB3E9B257425060A3A304C85D1B88B6DA3BA08E7B323B57D
SHA-512:	3D7D9B646D69214FCF6A65BEFDB6DE7287FF5E8958B748C524FF1AC3C0DA971CA596997FD4ECBCBA4630ADAEA957E171C8AA534CCDA7FA6CFE8F543082E353E6
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4:2f75648d7166a3:1
Preview:	N.#l.i...:.....B.O.#...F..<}..~...i)..Bp2.d.l..G..zq.uh...,....,.k..2D6R......`.B?.[.h....!..1_-..d'm...T`fn,...M7...t}R.j<.Vc.j..e.y.[g"l...3..%..q.t5.gy.a.x...{...C.J.R7.J.V.:....IM.._A....{.1.......<..8..T....xfy.x...5..LL..a.......q.....IC...]@.';mT.3......I...8...bm....h.....g...,la......#.o...u.8.......l..\|.+h....c.J..`.J..W..\A-..h..f#O.._#..w+.q.......z...+.$[L.p...l.].X.!p..a..[..\bN.Xu.]..5h3..b1....,....6... .....Xb.`ue.w7......#_.^XP.v...y"......}....i...Xk..)b..\.a.0H~...M..(-_y...?2..2/R3..^D=.%jB.....6.....-C&..]XdlM.yC.v4A.+...v.[..,.....&....%.iP.-.jN..N..=...e...3..p.6..5......3SYt..H(.GX,."..4..'N%W.f_.?.....<Y...p."+/..h.L.G\|..#"...=...c}%..y.]...v...kw.36/#A...i\..n.Z..9./Z...ub..z.k....s4.I.oT!.~^(.+......a...)x..`.\...S=..2x.g.......T0.55.r...B.s..avA.v`g.....6{!`..%...)....y<{s...@.lE.w.DiZ*y@..Sh.Z.Duw.=.M.E....6...d..8^..9.x~............rm.Z..2...Y...^.U=...B......F.....B("...M9#..,.s.?.`.0%.go.2..S..;. mK.._.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1338)
Category:	dropped
Size (bytes):	5021
Entropy (8bit):	5.5907792506389065
Encrypted:	false
SSDEEP:	96:+8+/8hrZe8hT8+/lhrZelhlZgaJ+T6a/iRQGEpuJqXcfP5:+8+8tZe858+ltZelZ7a/iRwpn4P5
MD5:	1127BCFCE6C3FF76946CAEAEA897CAA0
SHA1:	DA7205E1BD4843EC961F90F942F3133A21318300
SHA-256:	0E264F250368283B455111927C047A52483FDDF92A067405AE84682DB3738DB0
SHA-512:	E1158B53C499ACF98C2D20A981E1060F70695ED25B2E5FF6B8364F53C85EA0AE9DC63307115CC3C1693CE5031B5A5B822CCB04412413EE4B597EF5F618D538AC
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967
Preview:	{}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516), with no line terminators
Category:	downloaded
Size (bytes):	516
Entropy (8bit):	5.412572612885734
Encrypted:	false
SSDEEP:	12:fbjMlxAU7likLPdqIOG3tgqaKYQEnc2jDoum5RXu4X+e:fbjMlxAU78kLPdqIR6qJYIsaXOe
MD5:	442C1398C605B69D6CC3349439D63049
SHA1:	E618B018BD6C0EBC5D651E69538D3B7438C52EA0
SHA-256:	E64C2B1C12738D96943899C7A0D35CCA60839DC079E8ABA7D60C9433E350EE56
SHA-512:	C0BA0F10B8C8D3CA8D2881D49E4B4DA4AD7291EFD108E7ACE1123318FE10927682A4E4C67455733E97C61EA74E02ADD74CD045DE936C66CD1DEB9CC424A82C65
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});var r=u(52322),_=u(19552),a=u(53145),c=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(a.Z,{}),(0,r.jsx)(_.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=79711,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1920x968, components 3
Category:	downloaded
Size (bytes):	514648
Entropy (8bit):	7.988656448669567
Encrypted:	false
SSDEEP:	12288:alOr0gBBMts7mJEair9shsDUKXRjnmLsahzgfBatPu/:AOrzsts7SDirS+d0Dzg4PC
MD5:	F714ED5C817117AA20B0CAA4BAC76725
SHA1:	ED0E72BE4DA41315A54FB1F384B15E19442EFB17
SHA-256:	AE534A756B4E8DE5913000FB20BEF2B94F8C35282FD0979B1383C13FAD309C0B
SHA-512:	7F84860E904729E6ED676392C380E17D337E0AFD990C14615831F6B9B11E626FBBD8F4E5A35F11159E91CF026FC61115DF6993AAE165728299B48EE7B048A0BD
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	dropped
Size (bytes):	2260
Entropy (8bit):	5.636364536251374
Encrypted:	false
SSDEEP:	48:ja8++ewQ+MteG9VuICaZewQ+MteG9VulAEpNWY6bG9/Jdi00XRjUdR5:+8+/wf29Zewf2PEpmqXKRje5
MD5:	2E3F6F24EB37225AD344945D099C35BA
SHA1:	827E0B3C554DAA31A3FB89F6117AE3E5B4674538
SHA-256:	8D970AFA6C1FAAB1DD8237247A6653485A9A92D4D6498BCE0F99346222FC2536
SHA-512:	FB304C3AC7090DE703F85369FD04B382BC4DEC89DA19B753CADCDD35D0E46E7BF085E178053B2157130E4D70381796C431E2775F0982AAAC6E223DC59115A527
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1157725051;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1157725051;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	2234
Entropy (8bit):	5.635025063739671
Encrypted:	false
SSDEEP:	48:ja8++e2+/IeG9V4CaZe2+/IeG9V1AEphW56bG9/Jdi00lwxdR5:+8+/lg+Zelg6EpdqXDl5
MD5:	7079164DB0DE7F0E561119BEAFB530DA
SHA1:	D339FA15C9DCAA55DB533F4E67BAF259A33E0D54
SHA-256:	22267F13F4203FC9A3CB700BD3DDCBB3DC456CA06360077009D30DE810B56546
SHA-512:	B84F2224111FDDE8E7064859490D1D16DD1335B45BB1F3D34F06E19217B57A3EC7D3124568534D94F4BE11817EC938A41D9B095BEB48DE1C3A1CF543E5F27F29
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924993436&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1184804152.1713924994&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713924993436&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A16%3A33.531%2B02%3A00&epn.hit_timestamp_unix=1713924993531&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713924993436-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713924993436-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=3615&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafv

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.2345843491502855
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+v9w:zMZnH/l8NhHJ0M2J7dCAy
MD5:	30C957B2C050CF2DAC22397319575088
SHA1:	1AFDCF71728B31EF77DEA7804F109DD3AB0D52B7
SHA-256:	D84FBE5BC54C6F169FDB44AB26B225B571C84EA38BF3B08E5C420F6CD8D95D02
SHA-512:	E0C9B778D78124AE6746F7B3C551A5878668988BC79BA562598FB110386812588246CA3C2D5ED5C774DC4A89F053C35669B7BD7F18EADE8E44F0F643242BBF58
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51045)
Category:	downloaded
Size (bytes):	51078
Entropy (8bit):	5.141058818793268
Encrypted:	false
SSDEEP:	1536:5ppKcuPIOik/8c1MUd9nK0TdOCnfEBjZp89r:5ppK5Jt
MD5:	CFC33ECAFE0A3D20ED59BA16C0BE3987
SHA1:	69A2A370257DA98E3A9D04D8600CB5CFAE2858B7
SHA-256:	AFD11AAE5379E2C2E70A4929FC43CF784FAD93C96474BCCEDAA953A9F99E8C54
SHA-512:	8BC134F0726F0E57BC0DC710361F5E0A042912CBBFB483C4BC8E25CAFEBB29A7A438BB1B2A4D078D083A3AD397227F61B7EBFE92AC5D6432EC8AFA7253D67159
Malicious:	false
Reputation:	low
URL:	https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video
Preview:	(()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function r(){this.constructor=t}e(t,i),t.prototype=null===i?Object.create(i):(r.prototype=i.prototype,new r)}function i(e,t,i,r){return new(i\|\|(i=Promise))((function(n,o){function s(e){try{c(r.next(e))}catch(e){o(e)}}function a(e){try{c(r.throw(e))}catch(e){o(e)}}function c(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(s,a)}c((r=r.apply(e,t\|\|[])).next())}))}function r(e,t){var i,r,n,o,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function a(a)

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5500
Entropy (8bit):	5.217919540081293
Encrypted:	false
SSDEEP:	96:D/xCiqH3FeYKOzqH3FeYKEAPqRGqetKE9FfVDebYKV2Cxa3qnrpeoKrASSFjSme9:9quah
MD5:	AFC3E4BC6A3478E7C2F0BB0B0D0CB7AF
SHA1:	A398074A9114D6AF63AEBC294A75847F21497CED
SHA-256:	4380E7DC2835765FFB8A685C7ADFDB47F8A6BD227F40FD9B61582F65BD78B9F0
SHA-512:	B2B808673BBBFBCB1C6ACD66BF2938261E41FC983F7D57D9847260563687DD6023DCF56293331000BA27B3D06D17818AD51F7BED2154A83B4F82E5F594ABA7DB
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/api/v4/nu_subscriptions/tiers?country_code=US
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAxVDAyOjE3OjA0Ljk3MloiLCJwdXIiOm51bGx9fQ==--2c23f746713a02482a30c48bf67523cb534feb2468f2707a5e1dea85ccb7a67b",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236
Preview:	{}

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 32124, version 1.6554
Category:	downloaded
Size (bytes):	32124
Entropy (8bit):	7.98651557872162
Encrypted:	false
SSDEEP:	384:9KqyAC8A/DfD+jM4dELqNANmz6tHTp9cQkHusYuItzXpWiwhXG+l9dmUbggofHJ5:9JY8A/74miY9uQATzi8t9dmMgdU8p7j
MD5:	868AEDEEFE7669E8A4F7196F7DF5D058
SHA1:	45BD20EF2C6B717A2526EFD98A01207979B2A623
SHA-256:	D8700B022EF56752CD12FF224B3F409E84AEB8A43AC68BA052167096BAF46555
SHA-512:	45557B3F328F014FCBF09A848B2F22E66C41968B03523976F66F9381B0408461766F1B837CAAA67A26C4B707EA81EF32CF59776244D19BF0D569C63753B5C0B6
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff
Preview:	wOFF......}\|................................GDEF..m..........o.]GPOS..m4......3....5GSUB..x........8-.jQOS/2.......Z...`.5`.cmap............;.<.cvt ...d........K.1.fpgm.............0.6gasp..m.............glyf......X.....Z![.head.......6...6.qC.hhea....... ...$.8.khmtx...T.......b.8d.loca...........:#..Omaxp....... ... .q..name..k....&....E.j.post..l........ .~.Dprep...........J.-...........o._.<..........#.........I...(..............x.c`d``>.............@...$.............g...g......./.a..........x.c`ard..............B3.f.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....M.....x....%9...$.m.=.....m.m.m..n....V...AW}...9.Ob~.........Fh.+..4...h.F#.D.Y.q.eND%...S..C....Hg[....n.@&....wk.`y..Hf.?..^d.5..!a.C.B].L#..$.....QcO.NE.A}.........v...m..3...v.p..i.D........Y..~....9...1..d......?..`<~.n.mc...3..~.A......l.<.}.m.o.'...{~..3.....j.o!.xO>.>4....O...B..wJ].F.d&.=..1..'}..E:.....3.-..(..8..=.~...;A.&S..)$sI..c......t....d..~..\|....fVG..o.B.....,

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.23231667526817
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+C3:zMZnH/l8NhHJ0M2J7dCH
MD5:	16057A2D3B51238BBD5F3EEF09BF2908
SHA1:	F95AF15D2F0D970E12867B367C124E657F8E3C71
SHA-256:	35DE7FE53F23B7B4842EA3ACBA895B4B5AB7D957EFD2C3FBC0B4D7BDA4D3C182
SHA-512:	C2DFF4B6B447099067CEDF2A24FCD210173318B2F17318AC361D2231C4C98597484E81DC587E7DE9548823EF632A35FDFAB040869F20A31C1D4F5256EBF05CFE
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004
Preview:	{}

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925031604&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925008441&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10327), with no line terminators
Category:	downloaded
Size (bytes):	10327
Entropy (8bit):	5.113381938908243
Encrypted:	false
SSDEEP:	192:4v6U5M2p7pBrfCpfqFk8GCpTmSy4OxxhkHONIR/:4v68M2p7DCJfCVmpxuONk/
MD5:	4B0B7D731B18D770C7C8E83CCBB777F8
SHA1:	964049D22CDCA011868EB2C04BC0CCB00A618B1C
SHA-256:	D9D514698510CE26A6EE97639D1E85562B24F6D2DECBCB0671C4B8BBC0D60FB8
SHA-512:	1F2884DCCE819FB86527978BBAB1658D75BC4D116E6B949A73A048D4F680399D0314E9BE5B92F24E0C4B8DB7F2ECC9C09583CFD17E45078BE4792DB71DD69197
Malicious:	false
Reputation:	low
URL:	https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/packs/",n(n.s=150)}({150:function(e,t,n){"use strict";n.r(t),function(e){n.d(t,"WallpaperApi",(funct

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.237465079406439
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+R:zMZnH/l8NhHJ0M2J7dCS
MD5:	A00EF7380661369951DAD5F3588121AE
SHA1:	80DECEED608CC4C5F9DAA9582CF5FA937286EBC6
SHA-256:	837827077713AB7D4661C60D7D768C402F37B000A4742952FC6ABC3A80906FE9
SHA-512:	C31ACF900AA7DA6A301F292380154BF7E76BB7241D2CD48DC9289442A1E101E8AD7794D31CFBCA5C9AA3592E014173EACC8C2501C465D943E5C01FBC46C6184C
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168399
Entropy (8bit):	5.548360604120223
Encrypted:	false
SSDEEP:	3072:mA95TZmETDjAjT8M+z4VrenF6xvX9fFdffS:mAPdm0HAjIIfq
MD5:	5439E51F20378DE7D73BA350C0B4B85B
SHA1:	2BFA3D60287D28A0F536FA1D020BFE52CA1395F1
SHA-256:	912D615762F03B1F694F98FF9F3E7A59D0D8F1CA3732F67BE89DF8D2E3F38ADB
SHA-512:	6C9DDD77FDF111CFAB5D6086A497334F274E20F3AF8DE2D116DED4988E57EA3DDA9FB90AA6EB7945173879ACFE1AA2C9601CA47C0F738BFB8A654E4FEC20556E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/03a1f34a.cb7471b34076195a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.prototype.hasOwnProperty,l=e=>s(e,"__esModule",{value:!0}),f=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports),d=e=>((e,t,n)=>{if(t&&"object"==typeof t\|\|"function"==typeof t)for(let r of c(t))!g.call(e,r)&&"default"!==r&&s(e,r,{get:()=>t[r],enumerable:!(n=a(t,r))\|\|n.enumerable});return e})(l(s(null!=e?i(u(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e),h=f((e=>{!function(e){"use strict";function t(e){for(var t=0,n=Math.min(65536,e.length+1),r=new Uint16Array(n),o=[],i=0;;){var s=t<e.length;if(!s\|\|i>=n-1){var a=r.subarray(0,i);if(o.push(String.fromCharCode.apply(null,a)),!s)return o.join("");e=e.subarray(t),t=0,i=0}var c=e[t++];if(0==(128&c))r[i++]=c;else if(192==(224&

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1338)
Category:	downloaded
Size (bytes):	5015
Entropy (8bit):	5.591213773734594
Encrypted:	false
SSDEEP:	96:+8+/3hrZe3hT8+/OhrZeOhlZ1aJ+T6a/iRQGEpHJqXRV5:+8+3tZe358+OtZeOZka/iRwp075
MD5:	2FC60EF0E65EBAD0335970BB6BB7DB1C
SHA1:	421D64E0D3E9603C3FFC744D5C525C6D8B3EC2D9
SHA-256:	2F5448D51CDA28D042E8C0E6E2270FEE494CED2A89E85907B4FBA7248DBE49B7
SHA-512:	6146C2A560AD51472799B6871DB0BCEC8EA757ED3D9C2CFC45D92D4D96861AED9954DC564E263214173E0E49EA0D889527A697E587C41816458AE620FA5EBA6C
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.060%2B02%3A00&epn.hit_timestamp_unix=1713925032060&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925026772-81-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2088&tfd=6518&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7327&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068
Preview:	{}

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4777), with no line terminators
Category:	downloaded
Size (bytes):	4777
Entropy (8bit):	5.431444827871345
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwNLMpn02MGkdtOveV1pecbt:9++2y7CpRNyfM+v6wcbt
MD5:	AB32572E3176C9FF9C0AE3577598EC88
SHA1:	16A28D0ADA2C0F856E830DF6039668939A19F9FE
SHA-256:	C77E75E9D92043C886B83F6D609CA350DF9C57BA82212BAD16B99C52EE13DF7E
SHA-512:	38AC0704EFE189556FC28CC638A2366800FD1AEE7040836D1A2956EEC2366B4A12293F2ED07A18BFF7C562E53F5D38AA3DA89DF0B960FF9234EBA65B6FAD6AF9
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (646)
Category:	dropped
Size (bytes):	2254
Entropy (8bit):	5.6460117835698025
Encrypted:	false
SSDEEP:	48:ja8++eaB+MteG9VuICaZeaB+MteG9VulAEpvWY6bG9/Jdi00n+FdR5:+8+/p29Zep2PEpEqXvh5
MD5:	07CD4A964D4C5E712274665FB3B0925A
SHA1:	D400A65F9F5FE93B8CAB23FD54A8AEC458FCD8EB
SHA-256:	3590B1D78467E30C269BD37889C64F2BA4B89B43C6BAE981C8F2D88EB3D7BFBB
SHA-512:	B98EDCB0497B407E60E0629B155EAEC93C77408321009056A7A5C1AAD32F532AAC7382B8F7F42682D224FCFB04F367C59340A99AE8E1A69480940668D90A4F8E
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=976421943;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=976421943;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;ua

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58253), with no line terminators
Category:	downloaded
Size (bytes):	58253
Entropy (8bit):	5.415335549957313
Encrypted:	false
SSDEEP:	1536:dN7qIHbb3fmatiEsWtNMx3VNW5hATqe3lqe:PWI7b3ftsUNMx3jOM3t
MD5:	633A43876F294113B67A16BAC7C21511
SHA1:	BF8890FBC058EC22431A37F9D4B2319F218C1E9D
SHA-256:	7F2AE99BB573FFEAE39EB900E6EF4230D1522AA22BCB23F7F7074823173A1A58
SHA-512:	C229C582369587C979CCAE141C785F8B5901C091431968DB40AB72CA34FBFA1EDB42761AC9A4ED6A1948988988FA2888A16927CC025A992F7BFFB5A1E68DF3C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==typeof globalThis?globalThis:"undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{},o=function(e){try{return!!e()}catch(t){return!0}},i=!o((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),a=i,u=Function.prototype,s=u.call,c=a&&u.bind.bind(s,s),f=a?c:function(e){return function(){return s.apply(e,arguments)}},l=f,h=l({}.toString),p=l("".slice),d=function(e){return p(h(e),8,-1)},v=o,g=d,m=Object,y=f("".split),b=v((function(){return!m("z").propertyIsEnumerable(0)}))?function(e){return"String"===g(e)?y(e,""):m(e)}:m,w=function(e){return null===e\|\|void 0===e},S=w,P=TypeError,E=function(e){if(S(e))throw new P("Can't call method on "+e);return e},

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2Fr%2FfX8we7rVVFap%2FYhuXo%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3TjfjOl9b3LzC2YfIhOVwPQtdc%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1326)
Category:	dropped
Size (bytes):	5015
Entropy (8bit):	5.596461189348871
Encrypted:	false
SSDEEP:	96:+8+/KhrZeKhT8+/PhrZePhlZoaJ+T6aaiHQGEpwJqXa/3TV45:+8+KtZeK58+PtZePZzaaiHwplaPTO5
MD5:	8840A52D86D80015823F52F033167FA2
SHA1:	F3C51CB791E6CA464AF5A5C5E6E652B71E2EE3D3
SHA-256:	F98CBED6FC27FD8EAF076049159691176B9E5887B1B5271AE4E66BE1384AF52E
SHA-512:	CCA6EA059E093A0D4D9F9ECC2E74EF12AD2044B6F249A3C6CA8398042C496951F5EB6E398781492177F8166EEBBCFDEFA26E1E08761E2C4CA3EDAAC88E044B42
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1491686877;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1491686877;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dm

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103
Preview:	{}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8727
Entropy (8bit):	4.13328946919057
Encrypted:	false
SSDEEP:	192:dJ2DZyaXzmxF/qJacjKwWp8VFNYpOBcMulwpQ:KQagiJacjNW6/YpZMy
MD5:	0E643F422F061243340ECFF0F9ECD49B
SHA1:	EECC5042BC29E8C5801A07DF67D2256FBE1C711C
SHA-256:	39220E25E738DF0136D2FC8F53AEC1D25601BC50DA016F4552C4FCE61709A83E
SHA-512:	BC3A4D76CCFC4730A755727D3960FDC733D3A4CCA2A210582A97F90276B2AE8DFCFD5DA25C3EAE73F59715138C47BD2B76440C3E02BB25AE942CCC8B6D6EB4D2
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/wepresent-logo-white.8ce3fdff482687be2af7.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 106.68">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <path class="cls-1" d="M4.55,12.53C3,6.33,1.88,3.87,0,1.2v-.14h11.19v.14c-1.02,2.18-1.39,6.4-.11,11.68l6.9,28.5,8.28-27.37-.43-1.48c-1.71-6.19-2.67-8.66-4.55-11.33v-.14h11.19v.14c-.86,2.04-1.55,6.4-.11,11.68l7.49,27.94,6.11-24.49c1.98-8.1,1.02-12.88-.11-15.13v-.14h6.3v.14c-2.51,3.44-3.05,6.76-4.48,12.81l-9.69,39.13h-1.07l-10.12-37.09-11.14,37.09h-1.07L4.55,12.53Z"/>. <path class="cls-1" d="M54.94,52.57v-.14c1.39-4.2,2.09-7.11,2.09-11.75V12.95c0-4.71-.69-7.46-2.09-11.75v-.14h24.73l2.09,12.53-.43.21c-2.84-3.94-6.69-10.98-9.04-11.19l-9.05-.49v23.79h4.6c2.63,0,4.77-4.71,6.64-7.39h.48v15.9h-.48c-1.71-2.46-4.07-7.11-6.64-7.11h-4.6v24.21l9.54-.49c4.39-.21,8.51-7.18,11.51-12.61l.43.21-2.35,13.93h-27.42Z"/>. <path class="cls-1" d="M90,39.83V13

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2648 x 616, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36189
Entropy (8bit):	7.469539129680351
Encrypted:	false
SSDEEP:	768:JEM9uTjYhl6NkG3WRX4XpKrkq5UJf/WpCWwpeqkg:59uH8l6NkGmRXoKrkiUliCWwhkg
MD5:	998A47703D2BD3C00DB0BC1BE6E30A11
SHA1:	0471BC53270FBE8826A30F2095576C35473BA739
SHA-256:	5AC4138920826CE9FFC12752D6C6954E970C14C95C3C9197212C481847FC28FF
SHA-512:	D2CE11C56F7993478657DFF38A0A50E92311F92C4962579B9D295890DA6C6AA9484F14E442701D9910F8A2FC9D7CD468F4D55D705E759E0B2706E83EEE06A453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...h.......~4...$IDATx....lc...Se..!...03335,33....b\ff....2.033.!w.Uf...ew..'.>.d_.$5..S...................................................................................................................)............qW..G.............d............&X..........k...i.............TV&X.K.........@sg...M............L....d..Tx...........U.....h`.e.X............C\|^50.r@.................,....<.tDx.A.H........... .L....\`y....e.\.........@1v......W.4..G9....................c.K......>3...H..N.._~.....OK)..Y.....;....9............>...x..^.\|.uq=..+..._.._.\.t9...&X...r@Yx.*.:>..j}zJ..../.........`....<p...-...W.'[.?..p_`Y.'....)....V.Ks................r...?........A...SV...+.q/...].....\|OJ................>......?..[{D..R&[.T..X..W...s...;a../.................-...[o.......#.1.,S.^.G....-[.L^s.5?.n..:...........q.........o{...K.e!.\.I..XY)zK.........rJ............VL...../....O<.+...G...N...&...\..v..czz.g#bC..........#...w....O..O..0...I....;S....

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.edb6538d.js", last modified: Mon Apr 22 20:43:42 2024, from Unix, original size modulo 2^32 70669
Category:	downloaded
Size (bytes):	23080
Entropy (8bit):	7.991464879958175
Encrypted:	true
SSDEEP:	384:CoJAmWxXkqVzQi6rSbzPZgjJfZAWqEhHsybRQk2PasNYerN8CUUH:CoKdXkl3jJfZVprb85Nrz7H
MD5:	43CA97012B8F925B548EA31836A36CEA
SHA1:	8C043AA689A205B069C7140F240C35890B42A9D6
SHA-256:	28FBA19CFABBA70C27A66AF060EC44C83538B5A30E73C551EC95B8727F562CCF
SHA-512:	088DBA32369424366E671A8A360F0C47865B9E9787FE5CF949D8BB297A35D4A184377FEC6F587F1D3C7886DD3C65C7F525EE270822E65D7DA03445ACEC8CF285
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.edb6538d.js
Preview:	......&f..main.edb6538d.js..\.o......b%...8.,.Hw3..[[..... Pl:..Py..,7.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;9...)^.$..:<.]..M..<\|.n]....x....lw.[_g.n...s9!.u...)s..&.sA+d.^.t.0.K..\|.....p...g...e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX..}...L....=....%..k\|..w.....v...Z...b.-q.^..K.>..JQ....L.....>.;..Y.q_....$.t.O.T.`Q=........h.e..X0...5A..X.....%.......a...K..,.d.f...^.(..+.K\s-4D....2....M.)e..5...R&).)..zP...@....V.F8.b....8J....37YR..p.....v\|.i.P.r3`jN}.l.3..7.3J_.z.+X.......H...O....#R+%....~.....N~...../.}..........G..Q.{G.............;P.8..,..qv..5.W.4.`...V7Y.p..^.e.}o...XY...o...~K.8>..Pr....{..tU.1....Dw./..o(.P.DA.j.+m.....:.f#VI......Q.W...I^.@..@./YVKk.Y..T\.k)...L..Z............'..X'V...2.r......w]..%...z.....sO.p...z+...0....Z;c..WQy...b.../.K..51.j<QB.Q....2.../...Y..[D.fc.DE..J...W....=..2.`.Ev.F.c'..G.H).j%U.9..)....W...u2....<t....B....K..I...7..Rg.....Pi.W.$WK`'..........z........j.....<...F.....$X

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/PricingBackground.74fe38a7.svg
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	179
Entropy (8bit):	5.13628962461118
Encrypted:	false
SSDEEP:	3:XzOYNRfdHhOYNRfcZqVRNqXVSJbPYfxP5DebYfNDebYfXecEPYfe2dqYfbMMYf2:XzjbdHhjbzrqFuPIxP5AINAIXD4IxAI1
MD5:	67FA077BA9AAC616309835EC3D822DBB
SHA1:	24F1263B9A442ACA1BF2A18D9378BFDD19D96D9D
SHA-256:	AEA8789655048C94CB0FD004BE64E6D5E5A9FDFB6696BCDA1FE227F0C64A24E1
SHA-512:	B64C62DA92FC1DAC420C5CBC5E2AD2A88829AF01FA6644D43BF2AF5E9DAEDF613216E8FEEDA111ED624A3E228BE1AFAAFB253E07C7292A0A113CB57B028AEAA7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28464, version 1.0
Category:	downloaded
Size (bytes):	28464
Entropy (8bit):	7.992106511690401
Encrypted:	true
SSDEEP:	768:C2FrF4DIfgszvE0Eo4/2jiTmmn+c7T5hkPWMAZhoqg6qm6Q:C2/8s7Elx/Uun+5PWM8iqgPm6Q
MD5:	FF4429FEBA146D5A8E608DB1B13CD9B2
SHA1:	D459521F7418A066C06D1FBFFD02F86101CEA571
SHA-256:	234796A01DD3B44E82E1868F1DDD7C8A2EA603C29D7DD36E97F849CB058C13DC
SHA-512:	CB13406328F7BD8C382F8A6DDEECAF6BE43922535231FA8C30CD07BED58238F160E37F924DC709F635DADD7C8BB3138ACFA2A99D38E1247AD8C3B23388CD7469
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2
Preview:	wOF2......o0......Y...n.........................?FFTM..l..H..<.`..f.....8..6.....6.$..6. ../...[..q..m.Bt'..Zm.]..6...y.J.y.e.w~p...=..&......k.l...i..\.,<..&..L..u................5.]..._OsVU..ww..{.2U.<....ye..r.X...I..\.$..t....LT..m......!:!.....Y...r...`..B...F4.").......W.u.....s..\|.2?"#..\|i-Y..4.Zl.`.n..,r.sx~n.....b.....#J...q.,.`0..Uw.....)F..X.Q\.zQ.M...YX...,%$.."....w....z....g.hlT.H.U,.4@..q.B-....pR..'...}.M.....x...$.``.hn.....c.,..X.X$.$F.&)#Z.PPL...T\|..+^1.+..S.......5....mg....gE...x..6.:U.S....X?!..5}w".....a./..%.i...K.-.V.,..)>.........y.....g....Q.I.A.Z..`.L.,Z.b2./f.u.....?.../CT..rV%v.....o..W...../@......xKO_...p.z...9.o.~&B..P.MO.gw"W(.O91..O....+....D..Xvg".\......09g#....e.E.(T.y'.l........J2.`...S..=K,qH..!..U..wqdAZ...t7...mo.K@.9....W.....g.d..`,,....T.=..]...T.PJ~]..jj.........z....E;..a....n..a{.~.A.T....!...{.....N.1a.@...SN.v...<...N[......K....dVf.R.Ig.`v.$.h.....)}...XirW.....23..*U)...YhX........._.(.y.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4652), with no line terminators
Category:	downloaded
Size (bytes):	4652
Entropy (8bit):	5.203462580641697
Encrypted:	false
SSDEEP:	96:GbJ0U8jqkSfDw5g51b5CBlE7yows1Qq7HL:GbJ9ky/1FuCjw+Qq7r
MD5:	391C9D61ECC3C4B44602309F89C72C0F
SHA1:	A096BAC18D2249E4C98554DBF8B2361393CAB77F
SHA-256:	DA75B56739B991E3DEDFA13A4D761A022A3325550707B792A07B74D105B07FAB
SHA-512:	640AA10D094435A1E8DE6BBA207922052B9A6CCE8EB9C30324006B4D2A6C617A38C39C2E9791609F3056F2CDF293D20D098338A208E2C9025F04D1AD627B293C
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US
Preview:	"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(l){if(void 0===l.api){l.api=null;var n,r="unknown";l.bootstrap=function(e,t,n){void 0===n&&(n=!1);var o=function(){window._brandmetrics_initiated&&window._brandmetrics_initiated(window.brandmetrics.api),t&&t(window.brandmetrics.api)};"unknown"===r\|\|n?(r="strapping",i(e,function(e,t){var n;if(e&&!(null===(n=window.brandmetrics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function(){return!0}},o()}})):o()},l.register=function(e){o[e.id]=e.ctor,n&&n(e)},l.getModule=function(e){return o[e],o[e]},l.defaultOption

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://tracker.samplicio.us/tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD}
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601), with no line terminators
Category:	downloaded
Size (bytes):	1601
Entropy (8bit):	5.547222245066974
Encrypted:	false
SSDEEP:	48:oXQwJEK/mH1nwOK+YG4Xfu4JWoSoCd9ntsg8QtM:oAwJ9yjK+Y3lJub9ndz+
MD5:	C606E09C6B90B4BB085A58EF18C40AD7
SHA1:	A3FA8FF5C425F51BE24973BB61245F403C157A40
SHA-256:	03C3BEC22645FD080A1812F3B5E06D76A220551EB1581AF1EEBD5E1F89D16BC7
SHA-512:	A6B68D88F7AC7585FB8D78E29B5BE2FD4FAD5837863B52C6CDEAE98C91585EBB77C9F04A758005DDBBF3636C5F1F45511997D58E5EE21C5C5E4152533834C995
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js
Preview:	(function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLIC_AMPLITUDE_EXPERIMENTS_PROXY_DOMAIN":"experiments.wetransfer.net","NEXT_PUBLIC_SAFETY_DOMAIN":"safety.wetransfer.com","NEXT_PUBLIC_AUTH_DOMAIN":"auth.wetransfer.com","NEXT_PUBLIC_LD_CLIENT_ID":"5b82f23280914154b163996e","NEXT_PUBLIC_PROFIT_WELL_API_TOKEN":"1a33eb12b20b92f6b89c398e023e2ca1","NEXT_PUBLIC_DD_RUM_APPLICATION_ID":"8ad3b331-fdf8-4935-a93a-63500a0ac535","NEXT_PUBLIC_CUSTOM_WALLPAPER_SERVICE_URL":"https://ekstrom.wetransfer.net","NEXT_PUBLIC_PORTALS_DOMAIN":"portals.wetransfer.com","NEXT_PUBLIC_AUTH_CLIENT_ID":"dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc","NEXT_PUBLIC_SNOWPLOW_NAMESPACE":"0497","NEXT_PUBLIC_LD_ENABLE":"true","NEXT_PUBLIC_REVISION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_AUTH_AUDIENCE":"aud://transfer-api

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	327216
Entropy (8bit):	5.597886950405377
Encrypted:	false
SSDEEP:	6144:KnBB2AxJGDI0sN6CcwsN6Njxx2c9sN6Nsd6Hj7xlsd8Xj7xtJ+fIPXddO/wLDC95:wrGDI0sN6CcwsN6Njxx2c9sN6Nsd6HjE
MD5:	AAA8F2C6387138702E0BBCF502FACABD
SHA1:	7AB87AF689B9AE95A5C2F3112B6BA149DF22887D
SHA-256:	84456382157F610AD3CFE910A483C23E179EAFD769367843E98A1406C5AC71FC
SHA-512:	C06581795AB079192ED5E182B6A570DBBBA3FEC1F028580E752FCB2860F78C79B43D19D32ECBD4222FD21B0724B8C97C66A25C78049C793AE41F0D5020BBEB37
Malicious:	false
Reputation:	low
URL:	https://z.moatads.com/wetransferadzerk716769425458/moatad.js
Preview:	/Copyright (c) 2011, 2024, Oracle and/or its affiliates. All rights reserved./.try{(function(D,w){function Qb(b){if(a.b.x())return AB_SCAFFOLD.sampling.onReady(function(){qb(b)});qb(b)}function qb(b,n){a.n.a.sxaz("trackingReady",{callback:Qb});if(!a.b.x()\|\|!AB_SCAFFOLD.sampling.tagShouldNotTrack()){ab=z.h;z.h++;z.i[ab]=!1;"undefined"===typeof b&&(b=a.y.e&&a.y.e(P,"display"));var r=b&&a.w.b(null,b,{},null,!0);r&&r.qs&&r.qs.d&&"string"===typeof r.qs.d&&(a.j=r.qs.d.split(":")[0]);r=null;r=!1;rb&&(delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0);if(r=a.b.x()?!AB_SCAFFOLD.sampling.isEnabled():.a.d.aa().isInApp&&!a.d.cw())delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0;a.b.x()&&(AB_SCAFFOLD.sampling.isActiveSampling()?a.h=1:(delete a.h,delete a.i));rb&&(delete a.h,delete a.i);r&&(delete a.h,delete a.i);a.h&&(qa=!0);a.r.v()?a.v.n()():a.v.i();a.d.aw.c\|\|(a.d.aw.c=!0,a.d.bd?z.dcsx.ynds(window,"pagehide","unload-"+a.d.aw.a,"unloadFn"+a.d.aw.a):a.d.bc&&(z.dcsx.ynds(windo

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
URL:	https://auth-session-caching.wetransfer.net/v1/login-status
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	874
Entropy (8bit):	4.875686790492149
Encrypted:	false
SSDEEP:	24:hYdKgqF2VQtczlSZYOJDzZnoX3OHYZY6CLNlMU:UK2WYOF1oX3RY6qNl5
MD5:	1FD37564188B6300561C262233E5A63B
SHA1:	29CCC2EFBDBC9CB12EE903DEDAEABE33AD40855A
SHA-256:	6EBEE5330E31DBE7FA90DE512912913BC8C4370B5BEE82E345C9B2C9AE8CAE0D
SHA-512:	DBBB744DF7CB69D833CDFCEAE4857E20C80CB7507F3AE0CAB9D5EB7A4B622C60D88B7E687758A25B0D632C2CFDD65B7BAFD8A7CEB1B8D7E00F52130933F47457
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8" />. <title>The page you were looking for doesn't exist (404)</title>. <meta name="viewport" content="width=device-width,initial-scale=1">. <link rel="stylesheet" media="all" href="/css/error-page.css">.</head>..<body>. <div class="error-page error-page-404">. <a href="https://wetransfer.com" class="error-page__logo">. <img src="https://email.wetransfer.net/Logos/wetransfer-logo.svg" alt="WeTransfer logo" />. </a>. <div class="error-page__content">. <img class="spiral" src="/images/404-spiral.svg" alt="Something went wrong">. <h1>Yikes, that page can.t be found.</h1>. <p>Head back to <a href="https://wetransfer.com/">wetransfer.com</a> or cheer up your eyes with some <a href="https://wepresent.wetransfer.com/">nice things we wrote</a>.</p>. </div>. </div>.</body>.</html>.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 532
Category:	downloaded
Size (bytes):	316
Entropy (8bit):	7.280756015430302
Encrypted:	false
SSDEEP:	6:XtziAR+d5p8Q95mn2EkAc/X3ooVz0VgkANRz09Hd2d0gG02Q56gsRQyFNr:XYAUd78Q95GkAOHDzaqR49gY02QZsCyn
MD5:	89DE92EC88923DEEEB670787238B8024
SHA1:	6AC9E00244F553527B37FC2EE2CC19E4297A0182
SHA-256:	8DCB5754E5E1BEE68F8C10A512FDB0094299FB9448C544B024BA56AD995C154A
SHA-512:	42DAE736A8FD96D6B1DFF3886DD2697E7B15DD9686F7138C2DBD8FCD30B2AE13A1C665B4AB59589CF076DF745F9F26978753A774D476A6964B6A6B052D8F4FD3
Malicious:	false
Reputation:	low
URL:	https://collector.brandmetrics.com/scripts/b.js?pixel=d267b2f7ee2d470cabb48697cd65d041
Preview:	.............N.0.._%.!.....$...#..EcG..UU..q.@.T...;..fX.1...&VO...d..(N{.2.$g...:.......(z+.J..........X.2.c..J{....;..S.}.Xe...Y...3.u.,.%...VM..[..o.l5O....a.#..Gv.....\.~E.jUt>..cT.........%."....y..H.E...0.H...)c.....&(...vta.v.X.E.>.K)....9SZcG...)..&}c...R.[..w;.Rp#@.P./R.(a2.`S.\....tn....

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1718), with no line terminators
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	5.232778425215442
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5Lxj2OjE8TVVaYMU5m0sWt:0E1JBaYcfICA6PjDVaYxRXt
MD5:	7BC594D2F21C7B14C2BBB8EA785276A0
SHA1:	09AF153336077FE213A635BB0C525B393C74D85C
SHA-256:	785DE61722B87A114F1B7FD56B9985DB96AE470FF3BB6D2516A2A34F3BCD02F0
SHA-512:	D27883B73933A5504C12649C8DA60A917E32072A43F633B9E099F32D4AF313A4C02CC798441A276943FCB1A1688DFF73B9C451C973707E4E2F76CBAE18CABC34
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}.AppLoader_AppLoader___e83q{height:100vh;width:100vw;z-index:0;background:#fff;display:fl

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (646)
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.618991991835939
Encrypted:	false
SSDEEP:	48:ja8++e6+MteG9VuICaZe6+MteG9VulAEp7dWY6bG9/Jdi00PCdR5:+8+/x29Zex2PEp7WqXz5
MD5:	F2CA898AAA7E9CE4182855D72AA91347
SHA1:	107743AE6DE724069742F3C3EE13385C929A3E68
SHA-256:	C0680778E5CD5E32C3450647DA074BF6BA484354E83879235C7917E9F187F271
SHA-512:	7C816C8FB7A3979FDD71B83F91E5628C313AC3AFEF6EBC7B189485E00C9262414691F8C85DDC370A6209B7E152C28F8CDF7475BD5BEDF03078DB5725F7952126
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;ua

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71691
Entropy (8bit):	5.290510613874029
Encrypted:	false
SSDEEP:	1536:m2uB0DdnFpVMQfuhkGT0iCfWXRFGY+9Ti:WAVm6GT0BuhFSTi
MD5:	42EACEAA10CED1BC091C1D9097C4897F
SHA1:	15DF0C2CCF5DB8E1A2705BA4DC4F60F0DE01FC49
SHA-256:	4CD6686277A3ABE85C63ED695019CAC862CC54702184108DE1DA819271B1FCA0
SHA-512:	980ADC2F8AC61BF853E250C83405716DDE44592A0D1ABC7A41A35E52A9CF366100CD4CFA95DDDD4BB031A46986387516C3B9ED0D18D9990DB4CC471184BB08EA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/2edb282b.45c56c19221816df.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=NaN,g=4294967295,y=[["ary",s],["bind",1],["bindKey",2],["curry",8],["curryRight",a],["flip",512],["partial",c],["partialRight",l],["rearg",h]],d="[object Arguments]",b="[object Array]",w="[object Boolean]",m="[object Date]",x="[object Error]",j="[object Function]",A="[object GeneratorFunction]",k="[object Map]",O="[object Number]",I="[object Object]",E="[object Promise]",R="[object RegExp]",z="[object Set]",S="[object String]",C="[object Symbol]",W="[object WeakMap]",L="[object ArrayBuffer]",U="[object DataView]",B="[object Float32Array]",T="[object Float64Array]",$="[object Int8Array]",D="[object Int16Array]",N="[object Int32Array]",M="[object Uint8Array]",F="[object Uint8ClampedArray]",P="[object Uint16Array]",q="[object Uint32Array]

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8727
Entropy (8bit):	4.13328946919057
Encrypted:	false
SSDEEP:	192:dJ2DZyaXzmxF/qJacjKwWp8VFNYpOBcMulwpQ:KQagiJacjNW6/YpZMy
MD5:	0E643F422F061243340ECFF0F9ECD49B
SHA1:	EECC5042BC29E8C5801A07DF67D2256FBE1C711C
SHA-256:	39220E25E738DF0136D2FC8F53AEC1D25601BC50DA016F4552C4FCE61709A83E
SHA-512:	BC3A4D76CCFC4730A755727D3960FDC733D3A4CCA2A210582A97F90276B2AE8DFCFD5DA25C3EAE73F59715138C47BD2B76440C3E02BB25AE942CCC8B6D6EB4D2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 106.68">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <path class="cls-1" d="M4.55,12.53C3,6.33,1.88,3.87,0,1.2v-.14h11.19v.14c-1.02,2.18-1.39,6.4-.11,11.68l6.9,28.5,8.28-27.37-.43-1.48c-1.71-6.19-2.67-8.66-4.55-11.33v-.14h11.19v.14c-.86,2.04-1.55,6.4-.11,11.68l7.49,27.94,6.11-24.49c1.98-8.1,1.02-12.88-.11-15.13v-.14h6.3v.14c-2.51,3.44-3.05,6.76-4.48,12.81l-9.69,39.13h-1.07l-10.12-37.09-11.14,37.09h-1.07L4.55,12.53Z"/>. <path class="cls-1" d="M54.94,52.57v-.14c1.39-4.2,2.09-7.11,2.09-11.75V12.95c0-4.71-.69-7.46-2.09-11.75v-.14h24.73l2.09,12.53-.43.21c-2.84-3.94-6.69-10.98-9.04-11.19l-9.05-.49v23.79h4.6c2.63,0,4.77-4.71,6.64-7.39h.48v15.9h-.48c-1.71-2.46-4.07-7.11-6.64-7.11h-4.6v24.21l9.54-.49c4.39-.21,8.51-7.18,11.51-12.61l.43.21-2.35,13.93h-27.42Z"/>. <path class="cls-1" d="M90,39.83V13

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21801), with no line terminators
Category:	downloaded
Size (bytes):	21801
Entropy (8bit):	5.424702702668222
Encrypted:	false
SSDEEP:	384:Xk27rQKtjGGjcVDLC4AWxohaHCK3xo9ECML04M8OVMvC5n:Xk27rQKtjGGw9eaeMLUBDd
MD5:	FC8D876A973A29258C6F89B62BED455A
SHA1:	2B90A982E34633074A6A5F7F97545FF5AE1F39B9
SHA-256:	DCCE4E8FB0B6FC709858B0A571E511FABBF585BEFA8AF7CF142833DDDD28F48A
SHA-512:	823266DF71FC66E6CF5ED01CB3328082BD78B97B5DB83DFF983D774A42835F12930DCFA55ADAA5ACB2A73E8183B187982E2E48F5E048794DBEC161C085A99EBF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/5835-418bbb9fccea5315.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/translation.json":[94180,3,4180],"./da.js":[85921,9,5921],"./de":[41879,9,1879],"./de-DE/translation":[96703,3,6703],"./de-DE/translation.json":[96703,3,6703],"./de.js":[41879,9,1879],"./en":[8745,9,8745],"./en.js":[8745,9,8745],"./en/translation":[89123,3],"./en/translation.json":[89123,3],"./es":[51716,9,1716],"./es-419":[79073,9,9073],"./es-419.js":[79073,9,9073],"./es-ES/translation":[2816,3,2816],"./es-ES/translation.json":[2816,3,2816],"./es-LA/translation":[24287,3,4287],"./es-LA/translation.json":[24287,3,4287],"./es.js":[51716,9,1716],"./fr":[62870,9,2870],"./fr-FR/translation":[81880,3,1880],"./fr-FR/translation.json":[81880,3,1880],"./fr.js":[62870,9,2870],"./index":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	4.243340738755346
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+l1:zMZnH/l8NhHJ0M2J7dCQ1
MD5:	6DC803641E593E617E0EA42C5820F6C8
SHA1:	5BC239DF0E619745367F4E26E524DA3A709AEF30
SHA-256:	67BF40E5594FF7FFFB353041327FC103E658FB05D44BD6226BA01742881E5EE1
SHA-512:	8BC6E3C2ACDDC2D9AF0AFC209C10C57AB0F41B916467C75C04450D70042EAF8DEC1F66007210E90070EB746334302A3B831BB121F82D36B558C5F0AE7BE2352F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1324)
Category:	downloaded
Size (bytes):	4995
Entropy (8bit):	5.584572982364386
Encrypted:	false
SSDEEP:	96:+8+/ahrZeahT8+/VhrZeVhlZiaJ+T6aaiHQGEpwJqXPtLn5:+8+atZea58+VtZeVZhaaiHwplVT5
MD5:	90C5B6A2E6964747E4D0F7471B12F652
SHA1:	61446F8D8AAB70F23DF8D73D1C02AF964388EDA1
SHA-256:	DD2DE78FA0FF11297A11C618DE547A48A63C03A9A2A6B9035FFC1AEA28DC5D93
SHA-512:	67FB0E789517152352F0229F017B4459D483982C6020CDFFC07CAD685CD015E62C2570AFEF468306D4BEFF1C6940EC9E3E3D3C2E77FFBD17B7A35A50A921851F
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A06.888%2B02%3A00&epn.hit_timestamp_unix=1713925026888&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925026772-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=8&tfd=1453&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cp

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925011127&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/asset-manifest.json
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 04:16:02.671839952 CEST	192.168.2.4	1.1.1.1	0xf20e	Standard query (0)	we.tl	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:02.671979904 CEST	192.168.2.4	1.1.1.1	0x5519	Standard query (0)	we.tl	65	IN (0x0001)	false
Apr 24, 2024 04:16:03.909507036 CEST	192.168.2.4	1.1.1.1	0x8697	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:03.909647942 CEST	192.168.2.4	1.1.1.1	0xbd5b	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:05.000140905 CEST	192.168.2.4	1.1.1.1	0x9e1b	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.000425100 CEST	192.168.2.4	1.1.1.1	0xbe1c	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:05.220276117 CEST	192.168.2.4	1.1.1.1	0xffbe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.220786095 CEST	192.168.2.4	1.1.1.1	0x5441	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:06.881551981 CEST	192.168.2.4	1.1.1.1	0x57c8	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:06.881716013 CEST	192.168.2.4	1.1.1.1	0x6049	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:06.882040977 CEST	192.168.2.4	1.1.1.1	0x5ec0	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:06.882040977 CEST	192.168.2.4	1.1.1.1	0x4cc1	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:10.760792971 CEST	192.168.2.4	1.1.1.1	0xa602	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:10.760941982 CEST	192.168.2.4	1.1.1.1	0xf07b	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:11.770677090 CEST	192.168.2.4	1.1.1.1	0xc3c1	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:11.770836115 CEST	192.168.2.4	1.1.1.1	0xf7f5	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.357752085 CEST	192.168.2.4	1.1.1.1	0x2da1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.358159065 CEST	192.168.2.4	1.1.1.1	0xac2b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.696490049 CEST	192.168.2.4	1.1.1.1	0xbdc7	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.696726084 CEST	192.168.2.4	1.1.1.1	0x855f	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.770658016 CEST	192.168.2.4	1.1.1.1	0x7f33	Standard query (0)	cdn.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.770917892 CEST	192.168.2.4	1.1.1.1	0xc454	Standard query (0)	cdn.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.771744013 CEST	192.168.2.4	1.1.1.1	0xcfc4	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.771879911 CEST	192.168.2.4	1.1.1.1	0x25b5	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.772598028 CEST	192.168.2.4	1.1.1.1	0x3dc2	Standard query (0)	public.profitwell.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.772797108 CEST	192.168.2.4	1.1.1.1	0xa69b	Standard query (0)	public.profitwell.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.862250090 CEST	192.168.2.4	1.1.1.1	0x1a51	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.862646103 CEST	192.168.2.4	1.1.1.1	0x273e	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:12.947966099 CEST	192.168.2.4	1.1.1.1	0x9bc8	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.948302984 CEST	192.168.2.4	1.1.1.1	0x7a0a	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:14.111270905 CEST	192.168.2.4	1.1.1.1	0x8ffe	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.111469984 CEST	192.168.2.4	1.1.1.1	0x1709	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:14.590152025 CEST	192.168.2.4	1.1.1.1	0xcf7d	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.590806007 CEST	192.168.2.4	1.1.1.1	0xb9eb	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:14.592557907 CEST	192.168.2.4	1.1.1.1	0x5e2a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.593281031 CEST	192.168.2.4	1.1.1.1	0x7bd6	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:14.675323963 CEST	192.168.2.4	1.1.1.1	0x37a4	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.676562071 CEST	192.168.2.4	1.1.1.1	0x33af	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:14.859977961 CEST	192.168.2.4	1.1.1.1	0xa87b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.860523939 CEST	192.168.2.4	1.1.1.1	0xd9ef	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:15.548434019 CEST	192.168.2.4	1.1.1.1	0x4191	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.548664093 CEST	192.168.2.4	1.1.1.1	0x64ea	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:16.791397095 CEST	192.168.2.4	1.1.1.1	0x5f10	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.791776896 CEST	192.168.2.4	1.1.1.1	0x9f77	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:16.817068100 CEST	192.168.2.4	1.1.1.1	0x2739	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.817301035 CEST	192.168.2.4	1.1.1.1	0xe7a1	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:16.892296076 CEST	192.168.2.4	1.1.1.1	0x766a	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.892544985 CEST	192.168.2.4	1.1.1.1	0xb268	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.100800991 CEST	192.168.2.4	1.1.1.1	0x9444	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.101005077 CEST	192.168.2.4	1.1.1.1	0xbc2f	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.103910923 CEST	192.168.2.4	1.1.1.1	0x7606	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.104520082 CEST	192.168.2.4	1.1.1.1	0x5ea8	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.659077883 CEST	192.168.2.4	1.1.1.1	0x1084	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.660193920 CEST	192.168.2.4	1.1.1.1	0x661	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.828887939 CEST	192.168.2.4	1.1.1.1	0x7e3e	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.829435110 CEST	192.168.2.4	1.1.1.1	0x43c7	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.831304073 CEST	192.168.2.4	1.1.1.1	0xfd3a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.832000971 CEST	192.168.2.4	1.1.1.1	0x6905	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:17.835890055 CEST	192.168.2.4	1.1.1.1	0xdaf5	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.836303949 CEST	192.168.2.4	1.1.1.1	0x8013	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 04:16:18.691479921 CEST	192.168.2.4	1.1.1.1	0x8ed8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.691893101 CEST	192.168.2.4	1.1.1.1	0xbe7d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:18.698894024 CEST	192.168.2.4	1.1.1.1	0xf28e	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.699829102 CEST	192.168.2.4	1.1.1.1	0x9ba9	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.343091011 CEST	192.168.2.4	1.1.1.1	0x354d	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.343545914 CEST	192.168.2.4	1.1.1.1	0xe295	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.360522985 CEST	192.168.2.4	1.1.1.1	0x812	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.361500978 CEST	192.168.2.4	1.1.1.1	0xaf9d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.386053085 CEST	192.168.2.4	1.1.1.1	0x26d5	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.386300087 CEST	192.168.2.4	1.1.1.1	0xa6c7	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.387275934 CEST	192.168.2.4	1.1.1.1	0xf59b	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.387717009 CEST	192.168.2.4	1.1.1.1	0x54b4	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.388209105 CEST	192.168.2.4	1.1.1.1	0xdf90	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.388343096 CEST	192.168.2.4	1.1.1.1	0xd88f	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.389556885 CEST	192.168.2.4	1.1.1.1	0xdddc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.389698982 CEST	192.168.2.4	1.1.1.1	0xea4a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.392540932 CEST	192.168.2.4	1.1.1.1	0x934	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.392960072 CEST	192.168.2.4	1.1.1.1	0x74f	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.405810118 CEST	192.168.2.4	1.1.1.1	0x166c	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.406114101 CEST	192.168.2.4	1.1.1.1	0x894b	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.546601057 CEST	192.168.2.4	1.1.1.1	0x8693	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.546796083 CEST	192.168.2.4	1.1.1.1	0xdf25	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:19.601069927 CEST	192.168.2.4	1.1.1.1	0xe9c3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.601315022 CEST	192.168.2.4	1.1.1.1	0xd390	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:20.215749979 CEST	192.168.2.4	1.1.1.1	0xcf0d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.215856075 CEST	192.168.2.4	1.1.1.1	0x4a5b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:20.216730118 CEST	192.168.2.4	1.1.1.1	0x240b	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.216871023 CEST	192.168.2.4	1.1.1.1	0xec05	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:20.276281118 CEST	192.168.2.4	1.1.1.1	0x3bcb	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.276510954 CEST	192.168.2.4	1.1.1.1	0xf4ea	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:20.755824089 CEST	192.168.2.4	1.1.1.1	0xc155	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.755950928 CEST	192.168.2.4	1.1.1.1	0x8a1	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:21.008399963 CEST	192.168.2.4	1.1.1.1	0xe048	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.008585930 CEST	192.168.2.4	1.1.1.1	0x6288	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:21.563299894 CEST	192.168.2.4	1.1.1.1	0xf47b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.563575983 CEST	192.168.2.4	1.1.1.1	0x1ebb	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:21.877386093 CEST	192.168.2.4	1.1.1.1	0xa401	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.877386093 CEST	192.168.2.4	1.1.1.1	0x362f	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:21.913650990 CEST	192.168.2.4	1.1.1.1	0xd456	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.913650990 CEST	192.168.2.4	1.1.1.1	0xa293	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:21.956636906 CEST	192.168.2.4	1.1.1.1	0x6cc0	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.956825972 CEST	192.168.2.4	1.1.1.1	0xc9a0	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:22.158670902 CEST	192.168.2.4	1.1.1.1	0x4297	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.158979893 CEST	192.168.2.4	1.1.1.1	0xec3	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:22.162765980 CEST	192.168.2.4	1.1.1.1	0x7491	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:22.162765980 CEST	192.168.2.4	1.1.1.1	0xc1f9	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.528017998 CEST	192.168.2.4	1.1.1.1	0xeacb	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.528141022 CEST	192.168.2.4	1.1.1.1	0x5ca	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:24.724924088 CEST	192.168.2.4	1.1.1.1	0x5032	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.725182056 CEST	192.168.2.4	1.1.1.1	0x5f5c	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:24.728039980 CEST	192.168.2.4	1.1.1.1	0x3d2b	Standard query (0)	cdn.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.728177071 CEST	192.168.2.4	1.1.1.1	0x60ea	Standard query (0)	cdn.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:26.314153910 CEST	192.168.2.4	1.1.1.1	0x153f	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:26.314294100 CEST	192.168.2.4	1.1.1.1	0x73ca	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:27.815512896 CEST	192.168.2.4	1.1.1.1	0xa05f	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.815651894 CEST	192.168.2.4	1.1.1.1	0x141	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:27.820524931 CEST	192.168.2.4	1.1.1.1	0x8345	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.820873976 CEST	192.168.2.4	1.1.1.1	0xb459	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:28.913836956 CEST	192.168.2.4	1.1.1.1	0x5bd7	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:28.914115906 CEST	192.168.2.4	1.1.1.1	0xbdbf	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:30.630914927 CEST	192.168.2.4	1.1.1.1	0x1f87	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:30.631081104 CEST	192.168.2.4	1.1.1.1	0x99d9	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:32.001648903 CEST	192.168.2.4	1.1.1.1	0xa77f	Standard query (0)	prod-cdn.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:32.002165079 CEST	192.168.2.4	1.1.1.1	0xaa9c	Standard query (0)	prod-cdn.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:34.151252031 CEST	192.168.2.4	1.1.1.1	0x23f1	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:34.151681900 CEST	192.168.2.4	1.1.1.1	0xe67b	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:35.773168087 CEST	192.168.2.4	1.1.1.1	0x8a83	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.773292065 CEST	192.168.2.4	1.1.1.1	0x848b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:35.818886042 CEST	192.168.2.4	1.1.1.1	0x1a25	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.819005013 CEST	192.168.2.4	1.1.1.1	0x273d	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:35.827948093 CEST	192.168.2.4	1.1.1.1	0xdcb4	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.828079939 CEST	192.168.2.4	1.1.1.1	0xa5cf	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:37.485783100 CEST	192.168.2.4	1.1.1.1	0x6004	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:37.485913038 CEST	192.168.2.4	1.1.1.1	0xadb4	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:16:38.419496059 CEST	192.168.2.4	1.1.1.1	0x5965	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.419641018 CEST	192.168.2.4	1.1.1.1	0x9024	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:16:38.669368029 CEST	192.168.2.4	1.1.1.1	0xa4b8	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.669522047 CEST	192.168.2.4	1.1.1.1	0x4f67	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:38.672040939 CEST	192.168.2.4	1.1.1.1	0xca83	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.672178984 CEST	192.168.2.4	1.1.1.1	0x3462	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:38.673300982 CEST	192.168.2.4	1.1.1.1	0x5126	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.673437119 CEST	192.168.2.4	1.1.1.1	0x474a	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:38.674559116 CEST	192.168.2.4	1.1.1.1	0x754a	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.674694061 CEST	192.168.2.4	1.1.1.1	0xf7b7	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:39.100044012 CEST	192.168.2.4	1.1.1.1	0x669e	Standard query (0)	wepresent.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.100423098 CEST	192.168.2.4	1.1.1.1	0x6a5f	Standard query (0)	wepresent.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:39.316584110 CEST	192.168.2.4	1.1.1.1	0x5962	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.316901922 CEST	192.168.2.4	1.1.1.1	0x7eec	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:39.380553961 CEST	192.168.2.4	1.1.1.1	0xb854	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.380693913 CEST	192.168.2.4	1.1.1.1	0xc5f7	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:39.545337915 CEST	192.168.2.4	1.1.1.1	0x4e92	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.545603991 CEST	192.168.2.4	1.1.1.1	0xf77e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:40.032052040 CEST	192.168.2.4	1.1.1.1	0xfacd	Standard query (0)	tracker.samplicio.us	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.032196999 CEST	192.168.2.4	1.1.1.1	0x98d6	Standard query (0)	tracker.samplicio.us	65	IN (0x0001)	false
Apr 24, 2024 04:16:40.120834112 CEST	192.168.2.4	1.1.1.1	0xb8a9	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.120984077 CEST	192.168.2.4	1.1.1.1	0x20d1	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:40.122214079 CEST	192.168.2.4	1.1.1.1	0xc1e6	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.122370958 CEST	192.168.2.4	1.1.1.1	0xac63	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:40.361550093 CEST	192.168.2.4	1.1.1.1	0x27e3	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.361763954 CEST	192.168.2.4	1.1.1.1	0x5d1c	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:40.492050886 CEST	192.168.2.4	1.1.1.1	0xacbf	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.492402077 CEST	192.168.2.4	1.1.1.1	0xbf44	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:41.062050104 CEST	192.168.2.4	1.1.1.1	0xf806	Standard query (0)	tracker.samplicio.us	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.062176943 CEST	192.168.2.4	1.1.1.1	0xa28a	Standard query (0)	tracker.samplicio.us	65	IN (0x0001)	false
Apr 24, 2024 04:16:41.211005926 CEST	192.168.2.4	1.1.1.1	0x3a74	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.211211920 CEST	192.168.2.4	1.1.1.1	0x6d08	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:47.813575029 CEST	192.168.2.4	1.1.1.1	0xbb73	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:47.814002991 CEST	192.168.2.4	1.1.1.1	0xe479	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:50.098398924 CEST	192.168.2.4	1.1.1.1	0xb04a	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:50.098524094 CEST	192.168.2.4	1.1.1.1	0x10a3	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 24, 2024 04:16:50.759018898 CEST	192.168.2.4	1.1.1.1	0xbbec	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:50.759140015 CEST	192.168.2.4	1.1.1.1	0x932b	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:16:54.944695950 CEST	192.168.2.4	1.1.1.1	0xfd3a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:54.946017981 CEST	192.168.2.4	1.1.1.1	0x6003	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:06.178792953 CEST	192.168.2.4	1.1.1.1	0x5a6e	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.179496050 CEST	192.168.2.4	1.1.1.1	0xd3ae	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:06.179932117 CEST	192.168.2.4	1.1.1.1	0x7b63	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.180519104 CEST	192.168.2.4	1.1.1.1	0xc34d	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:07.613500118 CEST	192.168.2.4	1.1.1.1	0x1c47	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:07.613631010 CEST	192.168.2.4	1.1.1.1	0x7ffb	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:09.332725048 CEST	192.168.2.4	1.1.1.1	0x2714	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.333025932 CEST	192.168.2.4	1.1.1.1	0x990f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:09.546751022 CEST	192.168.2.4	1.1.1.1	0xf135	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.547115088 CEST	192.168.2.4	1.1.1.1	0x3408	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:10.862936020 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	analytics.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:10.863126993 CEST	192.168.2.4	1.1.1.1	0x448e	Standard query (0)	analytics.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:10.878139973 CEST	192.168.2.4	1.1.1.1	0x6089	Standard query (0)	experiments.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:10.879858017 CEST	192.168.2.4	1.1.1.1	0xdd91	Standard query (0)	experiments.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:12.306979895 CEST	192.168.2.4	1.1.1.1	0xf2c7	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.307159901 CEST	192.168.2.4	1.1.1.1	0xfcc4	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:12.474056005 CEST	192.168.2.4	1.1.1.1	0x6	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.474260092 CEST	192.168.2.4	1.1.1.1	0xa6f2	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:12.481506109 CEST	192.168.2.4	1.1.1.1	0xf0ba	Standard query (0)	experiments.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.482048988 CEST	192.168.2.4	1.1.1.1	0x1546	Standard query (0)	experiments.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:12.485146999 CEST	192.168.2.4	1.1.1.1	0x289f	Standard query (0)	analytics.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.485352993 CEST	192.168.2.4	1.1.1.1	0xc926	Standard query (0)	analytics.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:13.511612892 CEST	192.168.2.4	1.1.1.1	0x60f0	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:13.511811018 CEST	192.168.2.4	1.1.1.1	0x55f2	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:15.515208006 CEST	192.168.2.4	1.1.1.1	0xb235	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.515336990 CEST	192.168.2.4	1.1.1.1	0xc662	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:15.534907103 CEST	192.168.2.4	1.1.1.1	0x6db9	Standard query (0)	cdn.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.535029888 CEST	192.168.2.4	1.1.1.1	0x9931	Standard query (0)	cdn.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:17:16.821780920 CEST	192.168.2.4	1.1.1.1	0x4b0a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:16.821940899 CEST	192.168.2.4	1.1.1.1	0x2615	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:17.118840933 CEST	192.168.2.4	1.1.1.1	0x687f	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.119086027 CEST	192.168.2.4	1.1.1.1	0x6d5b	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:17:17.750504971 CEST	192.168.2.4	1.1.1.1	0x553a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.750647068 CEST	192.168.2.4	1.1.1.1	0x9774	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:20.064234972 CEST	192.168.2.4	1.1.1.1	0xe506	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.064373016 CEST	192.168.2.4	1.1.1.1	0x47a2	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:20.066937923 CEST	192.168.2.4	1.1.1.1	0x9e39	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.067080975 CEST	192.168.2.4	1.1.1.1	0xd798	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:20.086807966 CEST	192.168.2.4	1.1.1.1	0x2240	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.087018013 CEST	192.168.2.4	1.1.1.1	0xc9b9	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:17:22.693447113 CEST	192.168.2.4	1.1.1.1	0xed6e	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:22.693603039 CEST	192.168.2.4	1.1.1.1	0x6e4d	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:24.374942064 CEST	192.168.2.4	1.1.1.1	0x484b	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:24.375075102 CEST	192.168.2.4	1.1.1.1	0xef9e	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:27.429127932 CEST	192.168.2.4	1.1.1.1	0xc68c	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:27.429315090 CEST	192.168.2.4	1.1.1.1	0xcbe5	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:30.397121906 CEST	192.168.2.4	1.1.1.1	0x6d19	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.397269964 CEST	192.168.2.4	1.1.1.1	0x95bd	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:30.415106058 CEST	192.168.2.4	1.1.1.1	0x83c7	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.415251017 CEST	192.168.2.4	1.1.1.1	0xa670	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:31.925981045 CEST	192.168.2.4	1.1.1.1	0x8db5	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:31.926141024 CEST	192.168.2.4	1.1.1.1	0xfee7	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:36.359925032 CEST	192.168.2.4	1.1.1.1	0x3275	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:36.360053062 CEST	192.168.2.4	1.1.1.1	0x5b13	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 04:16:02.826356888 CEST	1.1.1.1	192.168.2.4	0xf20e	No error (0)	we.tl		18.65.3.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:02.826356888 CEST	1.1.1.1	192.168.2.4	0xf20e	No error (0)	we.tl		18.65.3.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:02.826356888 CEST	1.1.1.1	192.168.2.4	0xf20e	No error (0)	we.tl		18.65.3.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:02.826356888 CEST	1.1.1.1	192.168.2.4	0xf20e	No error (0)	we.tl		18.65.3.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:04.063982010 CEST	1.1.1.1	192.168.2.4	0x8697	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:04.063982010 CEST	1.1.1.1	192.168.2.4	0x8697	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:04.063982010 CEST	1.1.1.1	192.168.2.4	0x8697	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:04.063982010 CEST	1.1.1.1	192.168.2.4	0x8697	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.170314074 CEST	1.1.1.1	192.168.2.4	0x9e1b	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.170314074 CEST	1.1.1.1	192.168.2.4	0x9e1b	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.170314074 CEST	1.1.1.1	192.168.2.4	0x9e1b	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.170314074 CEST	1.1.1.1	192.168.2.4	0x9e1b	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.373959064 CEST	1.1.1.1	192.168.2.4	0xffbe	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:05.374212980 CEST	1.1.1.1	192.168.2.4	0x5441	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:07.035471916 CEST	1.1.1.1	192.168.2.4	0x6049	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:07.036209106 CEST	1.1.1.1	192.168.2.4	0x57c8	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:07.036209106 CEST	1.1.1.1	192.168.2.4	0x57c8	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.036209106 CEST	1.1.1.1	192.168.2.4	0x57c8	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.036209106 CEST	1.1.1.1	192.168.2.4	0x57c8	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.036209106 CEST	1.1.1.1	192.168.2.4	0x57c8	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.052474022 CEST	1.1.1.1	192.168.2.4	0x5ec0	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.052474022 CEST	1.1.1.1	192.168.2.4	0x5ec0	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.052474022 CEST	1.1.1.1	192.168.2.4	0x5ec0	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:07.052474022 CEST	1.1.1.1	192.168.2.4	0x5ec0	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:10.915097952 CEST	1.1.1.1	192.168.2.4	0xa602	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:10.915097952 CEST	1.1.1.1	192.168.2.4	0xa602	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:10.915097952 CEST	1.1.1.1	192.168.2.4	0xa602	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:10.915097952 CEST	1.1.1.1	192.168.2.4	0xa602	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:11.924171925 CEST	1.1.1.1	192.168.2.4	0xc3c1	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:11.924171925 CEST	1.1.1.1	192.168.2.4	0xc3c1	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:11.924171925 CEST	1.1.1.1	192.168.2.4	0xc3c1	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:11.924171925 CEST	1.1.1.1	192.168.2.4	0xc3c1	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.511236906 CEST	1.1.1.1	192.168.2.4	0x2da1	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.511236906 CEST	1.1.1.1	192.168.2.4	0x2da1	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.511236906 CEST	1.1.1.1	192.168.2.4	0x2da1	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.511236906 CEST	1.1.1.1	192.168.2.4	0x2da1	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.850017071 CEST	1.1.1.1	192.168.2.4	0x855f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.850106001 CEST	1.1.1.1	192.168.2.4	0xbdc7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.850106001 CEST	1.1.1.1	192.168.2.4	0xbdc7	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.925242901 CEST	1.1.1.1	192.168.2.4	0xcfc4	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.925242901 CEST	1.1.1.1	192.168.2.4	0xcfc4	No error (0)	d1ykf07e75w7ss.cloudfront.net		52.85.204.136	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.925349951 CEST	1.1.1.1	192.168.2.4	0x25b5	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.926744938 CEST	1.1.1.1	192.168.2.4	0x3dc2	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.926744938 CEST	1.1.1.1	192.168.2.4	0x3dc2	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.87	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.926744938 CEST	1.1.1.1	192.168.2.4	0x3dc2	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.926744938 CEST	1.1.1.1	192.168.2.4	0x3dc2	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.926744938 CEST	1.1.1.1	192.168.2.4	0x3dc2	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.933677912 CEST	1.1.1.1	192.168.2.4	0xa69b	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:12.940529108 CEST	1.1.1.1	192.168.2.4	0x7f33	No error (0)	cdn.treasuredata.com		13.226.225.77	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.940529108 CEST	1.1.1.1	192.168.2.4	0x7f33	No error (0)	cdn.treasuredata.com		13.226.225.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.940529108 CEST	1.1.1.1	192.168.2.4	0x7f33	No error (0)	cdn.treasuredata.com		13.226.225.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:12.940529108 CEST	1.1.1.1	192.168.2.4	0x7f33	No error (0)	cdn.treasuredata.com		13.226.225.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.015700102 CEST	1.1.1.1	192.168.2.4	0x1a51	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:13.015700102 CEST	1.1.1.1	192.168.2.4	0x1a51	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.015700102 CEST	1.1.1.1	192.168.2.4	0x1a51	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.015700102 CEST	1.1.1.1	192.168.2.4	0x1a51	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.015700102 CEST	1.1.1.1	192.168.2.4	0x1a51	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.016290903 CEST	1.1.1.1	192.168.2.4	0x273e	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:13.118633032 CEST	1.1.1.1	192.168.2.4	0x9bc8	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.118633032 CEST	1.1.1.1	192.168.2.4	0x9bc8	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:13.118633032 CEST	1.1.1.1	192.168.2.4	0x9bc8	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.265001059 CEST	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.265001059 CEST	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.265001059 CEST	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.265001059 CEST	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.265001059 CEST	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.272897005 CEST	1.1.1.1	192.168.2.4	0x1709	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.743890047 CEST	1.1.1.1	192.168.2.4	0xcf7d	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.743890047 CEST	1.1.1.1	192.168.2.4	0xcf7d	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.743890047 CEST	1.1.1.1	192.168.2.4	0xcf7d	No error (0)	dualstack.pinterest.map.fastly.net		146.75.92.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.744750023 CEST	1.1.1.1	192.168.2.4	0xb9eb	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.744750023 CEST	1.1.1.1	192.168.2.4	0xb9eb	No error (0)	s-pinimg-com.gslb.pinterest.com	static.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.744750023 CEST	1.1.1.1	192.168.2.4	0xb9eb	No error (0)	static.gslb.pinterest.net	s.pinimg.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:14.745918036 CEST	1.1.1.1	192.168.2.4	0x5e2a	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.842118979 CEST	1.1.1.1	192.168.2.4	0x37a4	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:14.842118979 CEST	1.1.1.1	192.168.2.4	0x37a4	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.013396978 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.013396978 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.013396978 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.013396978 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.702363014 CEST	1.1.1.1	192.168.2.4	0x4191	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:15.702363014 CEST	1.1.1.1	192.168.2.4	0x4191	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.702363014 CEST	1.1.1.1	192.168.2.4	0x4191	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.702363014 CEST	1.1.1.1	192.168.2.4	0x4191	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.702363014 CEST	1.1.1.1	192.168.2.4	0x4191	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:15.703181982 CEST	1.1.1.1	192.168.2.4	0x64ea	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		54.200.174.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		44.239.212.98	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		35.162.126.211	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		52.42.215.144	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		54.189.132.192	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		44.224.18.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		52.33.152.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.945316076 CEST	1.1.1.1	192.168.2.4	0x5f10	No error (0)	api.amplitude.com		52.11.239.212	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.971415043 CEST	1.1.1.1	192.168.2.4	0xe7a1	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:16.972382069 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:16.972382069 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.972382069 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.972382069 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:16.972382069 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.046267986 CEST	1.1.1.1	192.168.2.4	0x766a	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.046267986 CEST	1.1.1.1	192.168.2.4	0x766a	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.79	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.046267986 CEST	1.1.1.1	192.168.2.4	0x766a	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.046267986 CEST	1.1.1.1	192.168.2.4	0x766a	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.257966042 CEST	1.1.1.1	192.168.2.4	0x9444	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.257966042 CEST	1.1.1.1	192.168.2.4	0x9444	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.257966042 CEST	1.1.1.1	192.168.2.4	0x9444	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.260155916 CEST	1.1.1.1	192.168.2.4	0x7606	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.813384056 CEST	1.1.1.1	192.168.2.4	0x1084	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.813384056 CEST	1.1.1.1	192.168.2.4	0x1084	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.982945919 CEST	1.1.1.1	192.168.2.4	0x7e3e	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:17.982945919 CEST	1.1.1.1	192.168.2.4	0x7e3e	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.983989000 CEST	1.1.1.1	192.168.2.4	0x43c7	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:17.985038042 CEST	1.1.1.1	192.168.2.4	0xfd3a	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.985038042 CEST	1.1.1.1	192.168.2.4	0xfd3a	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.985855103 CEST	1.1.1.1	192.168.2.4	0x6905	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:17.989691973 CEST	1.1.1.1	192.168.2.4	0xdaf5	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.79	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.989691973 CEST	1.1.1.1	192.168.2.4	0xdaf5	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.989691973 CEST	1.1.1.1	192.168.2.4	0xdaf5	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:17.989691973 CEST	1.1.1.1	192.168.2.4	0xdaf5	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.848578930 CEST	1.1.1.1	192.168.2.4	0x8ed8	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.849451065 CEST	1.1.1.1	192.168.2.4	0xbe7d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:18.855166912 CEST	1.1.1.1	192.168.2.4	0xf28e	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:18.855166912 CEST	1.1.1.1	192.168.2.4	0xf28e	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.855166912 CEST	1.1.1.1	192.168.2.4	0xf28e	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.855166912 CEST	1.1.1.1	192.168.2.4	0xf28e	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.855166912 CEST	1.1.1.1	192.168.2.4	0xf28e	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:18.856137037 CEST	1.1.1.1	192.168.2.4	0x9ba9	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.496567011 CEST	1.1.1.1	192.168.2.4	0x354d	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.496567011 CEST	1.1.1.1	192.168.2.4	0x354d	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.496567011 CEST	1.1.1.1	192.168.2.4	0x354d	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.512087107 CEST	1.1.1.1	192.168.2.4	0xe295	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.514384985 CEST	1.1.1.1	192.168.2.4	0x812	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.514384985 CEST	1.1.1.1	192.168.2.4	0x812	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.515100956 CEST	1.1.1.1	192.168.2.4	0xaf9d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:19.539392948 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.539392948 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.539392948 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.539392948 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541481018 CEST	1.1.1.1	192.168.2.4	0xf59b	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541481018 CEST	1.1.1.1	192.168.2.4	0xf59b	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541481018 CEST	1.1.1.1	192.168.2.4	0xf59b	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541481018 CEST	1.1.1.1	192.168.2.4	0xf59b	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541481018 CEST	1.1.1.1	192.168.2.4	0xf59b	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		44.224.18.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		44.239.212.98	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		35.162.126.211	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		54.200.174.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		54.189.132.192	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		52.11.239.212	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		52.33.152.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.541534901 CEST	1.1.1.1	192.168.2.4	0xdf90	No error (0)	api.amplitude.com		52.42.215.144	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.542992115 CEST	1.1.1.1	192.168.2.4	0xdddc	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.542992115 CEST	1.1.1.1	192.168.2.4	0xdddc	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.543076992 CEST	1.1.1.1	192.168.2.4	0xea4a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:19.545737028 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	adservice.google.com		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.545737028 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	adservice.google.com		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.545737028 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	adservice.google.com		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.545737028 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	adservice.google.com		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.546175003 CEST	1.1.1.1	192.168.2.4	0x74f	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:19.549356937 CEST	1.1.1.1	192.168.2.4	0x54b4	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.560024977 CEST	1.1.1.1	192.168.2.4	0x166c	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.560024977 CEST	1.1.1.1	192.168.2.4	0x166c	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.560024977 CEST	1.1.1.1	192.168.2.4	0x166c	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.560024977 CEST	1.1.1.1	192.168.2.4	0x166c	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.611264944 CEST	1.1.1.1	192.168.2.4	0xc976	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.611264944 CEST	1.1.1.1	192.168.2.4	0xc976	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700782061 CEST	1.1.1.1	192.168.2.4	0x8693	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700782061 CEST	1.1.1.1	192.168.2.4	0x8693	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700782061 CEST	1.1.1.1	192.168.2.4	0x8693	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700782061 CEST	1.1.1.1	192.168.2.4	0x8693	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700782061 CEST	1.1.1.1	192.168.2.4	0x8693	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.700861931 CEST	1.1.1.1	192.168.2.4	0xdf25	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754782915 CEST	1.1.1.1	192.168.2.4	0xe9c3	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:19.754829884 CEST	1.1.1.1	192.168.2.4	0xd390	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:20.369309902 CEST	1.1.1.1	192.168.2.4	0xcf0d	No error (0)	googleads.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.369309902 CEST	1.1.1.1	192.168.2.4	0xcf0d	No error (0)	googleads.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.369309902 CEST	1.1.1.1	192.168.2.4	0xcf0d	No error (0)	googleads.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.369309902 CEST	1.1.1.1	192.168.2.4	0xcf0d	No error (0)	googleads.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.369359016 CEST	1.1.1.1	192.168.2.4	0x4a5b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:20.422677040 CEST	1.1.1.1	192.168.2.4	0x240b	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:20.422677040 CEST	1.1.1.1	192.168.2.4	0x240b	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:20.422677040 CEST	1.1.1.1	192.168.2.4	0x240b	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.422677040 CEST	1.1.1.1	192.168.2.4	0x240b	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.422677040 CEST	1.1.1.1	192.168.2.4	0x240b	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.425097942 CEST	1.1.1.1	192.168.2.4	0xec05	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:20.425097942 CEST	1.1.1.1	192.168.2.4	0xec05	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:20.432662010 CEST	1.1.1.1	192.168.2.4	0x3bcb	No error (0)	adservice.google.com		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.432662010 CEST	1.1.1.1	192.168.2.4	0x3bcb	No error (0)	adservice.google.com		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.432662010 CEST	1.1.1.1	192.168.2.4	0x3bcb	No error (0)	adservice.google.com		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.432662010 CEST	1.1.1.1	192.168.2.4	0x3bcb	No error (0)	adservice.google.com		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.433151007 CEST	1.1.1.1	192.168.2.4	0xf4ea	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:20.909244061 CEST	1.1.1.1	192.168.2.4	0xc155	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:20.909244061 CEST	1.1.1.1	192.168.2.4	0xc155	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:20.909262896 CEST	1.1.1.1	192.168.2.4	0x8a1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162070990 CEST	1.1.1.1	192.168.2.4	0xe048	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162761927 CEST	1.1.1.1	192.168.2.4	0x6288	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162761927 CEST	1.1.1.1	192.168.2.4	0x6288	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.162761927 CEST	1.1.1.1	192.168.2.4	0x6288	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.717741013 CEST	1.1.1.1	192.168.2.4	0xf47b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:21.717741013 CEST	1.1.1.1	192.168.2.4	0xf47b	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:21.717860937 CEST	1.1.1.1	192.168.2.4	0x1ebb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.031215906 CEST	1.1.1.1	192.168.2.4	0xa401	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.032063961 CEST	1.1.1.1	192.168.2.4	0x362f	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.032063961 CEST	1.1.1.1	192.168.2.4	0x362f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.032063961 CEST	1.1.1.1	192.168.2.4	0x362f	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.067507029 CEST	1.1.1.1	192.168.2.4	0xd456	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.068306923 CEST	1.1.1.1	192.168.2.4	0xa293	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.068306923 CEST	1.1.1.1	192.168.2.4	0xa293	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.068306923 CEST	1.1.1.1	192.168.2.4	0xa293	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.111313105 CEST	1.1.1.1	192.168.2.4	0x6cc0	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.111313105 CEST	1.1.1.1	192.168.2.4	0x6cc0	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.111313105 CEST	1.1.1.1	192.168.2.4	0x6cc0	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.111491919 CEST	1.1.1.1	192.168.2.4	0xc9a0	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313298941 CEST	1.1.1.1	192.168.2.4	0x4297	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313298941 CEST	1.1.1.1	192.168.2.4	0x4297	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313298941 CEST	1.1.1.1	192.168.2.4	0x4297	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313298941 CEST	1.1.1.1	192.168.2.4	0x4297	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313298941 CEST	1.1.1.1	192.168.2.4	0x4297	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313355923 CEST	1.1.1.1	192.168.2.4	0xec3	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.313355923 CEST	1.1.1.1	192.168.2.4	0xec3	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:22.316523075 CEST	1.1.1.1	192.168.2.4	0xc1f9	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.316523075 CEST	1.1.1.1	192.168.2.4	0xc1f9	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.316523075 CEST	1.1.1.1	192.168.2.4	0xc1f9	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:22.316523075 CEST	1.1.1.1	192.168.2.4	0xc1f9	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.682265043 CEST	1.1.1.1	192.168.2.4	0xeacb	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.682265043 CEST	1.1.1.1	192.168.2.4	0xeacb	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.682265043 CEST	1.1.1.1	192.168.2.4	0xeacb	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:23.682265043 CEST	1.1.1.1	192.168.2.4	0xeacb	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.879482031 CEST	1.1.1.1	192.168.2.4	0x5032	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.879482031 CEST	1.1.1.1	192.168.2.4	0x5032	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.879482031 CEST	1.1.1.1	192.168.2.4	0x5032	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.882169008 CEST	1.1.1.1	192.168.2.4	0x3d2b	No error (0)	cdn.brandmetrics.com		104.26.1.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.882169008 CEST	1.1.1.1	192.168.2.4	0x3d2b	No error (0)	cdn.brandmetrics.com		172.67.69.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.882169008 CEST	1.1.1.1	192.168.2.4	0x3d2b	No error (0)	cdn.brandmetrics.com		104.26.0.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:24.882201910 CEST	1.1.1.1	192.168.2.4	0x60ea	No error (0)	cdn.brandmetrics.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:26.501425028 CEST	1.1.1.1	192.168.2.4	0x153f	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:26.501425028 CEST	1.1.1.1	192.168.2.4	0x153f	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:26.501425028 CEST	1.1.1.1	192.168.2.4	0x153f	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:26.532587051 CEST	1.1.1.1	192.168.2.4	0x73ca	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:26.532587051 CEST	1.1.1.1	192.168.2.4	0x73ca	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:26.532587051 CEST	1.1.1.1	192.168.2.4	0x73ca	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:27.969942093 CEST	1.1.1.1	192.168.2.4	0xa05f	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.969942093 CEST	1.1.1.1	192.168.2.4	0xa05f	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.969942093 CEST	1.1.1.1	192.168.2.4	0xa05f	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.969942093 CEST	1.1.1.1	192.168.2.4	0xa05f	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.974890947 CEST	1.1.1.1	192.168.2.4	0x8345	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.974890947 CEST	1.1.1.1	192.168.2.4	0x8345	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:27.974890947 CEST	1.1.1.1	192.168.2.4	0x8345	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:29.068219900 CEST	1.1.1.1	192.168.2.4	0x5bd7	No error (0)	www.datadoghq-browser-agent.com		18.164.171.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:30.785650969 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:30.785650969 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:30.785650969 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:30.785650969 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:32.175162077 CEST	1.1.1.1	192.168.2.4	0xa77f	No error (0)	prod-cdn.wetransfer.net		13.226.228.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:32.175162077 CEST	1.1.1.1	192.168.2.4	0xa77f	No error (0)	prod-cdn.wetransfer.net		13.226.228.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:32.175162077 CEST	1.1.1.1	192.168.2.4	0xa77f	No error (0)	prod-cdn.wetransfer.net		13.226.228.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:32.175162077 CEST	1.1.1.1	192.168.2.4	0xa77f	No error (0)	prod-cdn.wetransfer.net		13.226.228.94	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:33.028021097 CEST	1.1.1.1	192.168.2.4	0x7472	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:33.028021097 CEST	1.1.1.1	192.168.2.4	0x7472	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:34.305636883 CEST	1.1.1.1	192.168.2.4	0x23f1	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.926858902 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.926858902 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.927222013 CEST	1.1.1.1	192.168.2.4	0x848b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:35.973747969 CEST	1.1.1.1	192.168.2.4	0x1a25	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.973747969 CEST	1.1.1.1	192.168.2.4	0x1a25	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.973747969 CEST	1.1.1.1	192.168.2.4	0x1a25	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.973747969 CEST	1.1.1.1	192.168.2.4	0x1a25	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:35.982337952 CEST	1.1.1.1	192.168.2.4	0xdcb4	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:37.639235973 CEST	1.1.1.1	192.168.2.4	0x6004	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:37.639235973 CEST	1.1.1.1	192.168.2.4	0x6004	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:37.639235973 CEST	1.1.1.1	192.168.2.4	0x6004	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:37.639235973 CEST	1.1.1.1	192.168.2.4	0x6004	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.573390007 CEST	1.1.1.1	192.168.2.4	0x5965	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.573390007 CEST	1.1.1.1	192.168.2.4	0x5965	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.573679924 CEST	1.1.1.1	192.168.2.4	0x9024	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.823328972 CEST	1.1.1.1	192.168.2.4	0x4f67	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.823903084 CEST	1.1.1.1	192.168.2.4	0xa4b8	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.825773954 CEST	1.1.1.1	192.168.2.4	0xca83	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.825773954 CEST	1.1.1.1	192.168.2.4	0xca83	No error (0)	donny.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.825773954 CEST	1.1.1.1	192.168.2.4	0xca83	No error (0)	donny.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.826849937 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.826849937 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.828176022 CEST	1.1.1.1	192.168.2.4	0x754a	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.834606886 CEST	1.1.1.1	192.168.2.4	0x5126	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.834606886 CEST	1.1.1.1	192.168.2.4	0x5126	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:38.834606886 CEST	1.1.1.1	192.168.2.4	0x5126	No error (0)	tag.device9.com		54.151.109.234	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:38.834606886 CEST	1.1.1.1	192.168.2.4	0x5126	No error (0)	tag.device9.com		54.177.14.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.271029949 CEST	1.1.1.1	192.168.2.4	0x669e	No error (0)	wepresent.wetransfer.com		99.84.203.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.271029949 CEST	1.1.1.1	192.168.2.4	0x669e	No error (0)	wepresent.wetransfer.com		99.84.203.61	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.271029949 CEST	1.1.1.1	192.168.2.4	0x669e	No error (0)	wepresent.wetransfer.com		99.84.203.64	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.271029949 CEST	1.1.1.1	192.168.2.4	0x669e	No error (0)	wepresent.wetransfer.com		99.84.203.31	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.470834970 CEST	1.1.1.1	192.168.2.4	0x5962	No error (0)	cm.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.470834970 CEST	1.1.1.1	192.168.2.4	0x5962	No error (0)	cm.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.470834970 CEST	1.1.1.1	192.168.2.4	0x5962	No error (0)	cm.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.470834970 CEST	1.1.1.1	192.168.2.4	0x5962	No error (0)	cm.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.534672022 CEST	1.1.1.1	192.168.2.4	0xb854	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:39.534712076 CEST	1.1.1.1	192.168.2.4	0xc5f7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:39.698872089 CEST	1.1.1.1	192.168.2.4	0xf77e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 04:16:39.699266911 CEST	1.1.1.1	192.168.2.4	0x4e92	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:39.699266911 CEST	1.1.1.1	192.168.2.4	0x4e92	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		34.202.201.158	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		3.237.57.73	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		3.214.158.55	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		18.210.137.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		44.193.171.244	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		3.225.61.215	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		44.194.21.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.186083078 CEST	1.1.1.1	192.168.2.4	0xfacd	No error (0)	tracker.samplicio.us		52.70.253.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274945021 CEST	1.1.1.1	192.168.2.4	0xb8a9	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274945021 CEST	1.1.1.1	192.168.2.4	0xb8a9	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274945021 CEST	1.1.1.1	192.168.2.4	0xb8a9	No error (0)	tag.device9.com		54.151.109.234	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274945021 CEST	1.1.1.1	192.168.2.4	0xb8a9	No error (0)	tag.device9.com		54.177.14.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274992943 CEST	1.1.1.1	192.168.2.4	0x20d1	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.274992943 CEST	1.1.1.1	192.168.2.4	0x20d1	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.276135921 CEST	1.1.1.1	192.168.2.4	0xc1e6	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.515090942 CEST	1.1.1.1	192.168.2.4	0x5d1c	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.515330076 CEST	1.1.1.1	192.168.2.4	0x27e3	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:40.646928072 CEST	1.1.1.1	192.168.2.4	0xacbf	No error (0)	donny.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.646928072 CEST	1.1.1.1	192.168.2.4	0xacbf	No error (0)	donny.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:40.646928072 CEST	1.1.1.1	192.168.2.4	0xacbf	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		34.202.201.158	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		44.194.21.97	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		3.214.158.55	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		52.70.253.225	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		44.193.171.244	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		3.225.61.215	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		3.237.57.73	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.216442108 CEST	1.1.1.1	192.168.2.4	0xf806	No error (0)	tracker.samplicio.us		18.210.137.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:41.364339113 CEST	1.1.1.1	192.168.2.4	0x6d08	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:41.364864111 CEST	1.1.1.1	192.168.2.4	0x3a74	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:47.967123032 CEST	1.1.1.1	192.168.2.4	0xbb73	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:47.967123032 CEST	1.1.1.1	192.168.2.4	0xbb73	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:47.967716932 CEST	1.1.1.1	192.168.2.4	0xe479	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:50.252001047 CEST	1.1.1.1	192.168.2.4	0xb04a	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:50.252001047 CEST	1.1.1.1	192.168.2.4	0xb04a	No error (0)	user-data-us-west.bidswitch.net		35.212.133.238	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:50.252053976 CEST	1.1.1.1	192.168.2.4	0x10a3	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:50.912450075 CEST	1.1.1.1	192.168.2.4	0xbbec	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:50.912450075 CEST	1.1.1.1	192.168.2.4	0xbbec	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:50.912450075 CEST	1.1.1.1	192.168.2.4	0xbbec	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:50.913847923 CEST	1.1.1.1	192.168.2.4	0x932b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:50.913847923 CEST	1.1.1.1	192.168.2.4	0x932b	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:55.098361969 CEST	1.1.1.1	192.168.2.4	0xfd3a	No error (0)	ad.doubleclick.net		142.250.101.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:55.098361969 CEST	1.1.1.1	192.168.2.4	0xfd3a	No error (0)	ad.doubleclick.net		142.250.101.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:16:55.099853039 CEST	1.1.1.1	192.168.2.4	0x6003	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:16:55.602777958 CEST	1.1.1.1	192.168.2.4	0xed80	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:16:55.602777958 CEST	1.1.1.1	192.168.2.4	0xed80	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.332571983 CEST	1.1.1.1	192.168.2.4	0x5a6e	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.332571983 CEST	1.1.1.1	192.168.2.4	0x5a6e	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.332571983 CEST	1.1.1.1	192.168.2.4	0x5a6e	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.332571983 CEST	1.1.1.1	192.168.2.4	0x5a6e	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.349914074 CEST	1.1.1.1	192.168.2.4	0x7b63	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.349914074 CEST	1.1.1.1	192.168.2.4	0x7b63	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.349914074 CEST	1.1.1.1	192.168.2.4	0x7b63	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:06.349914074 CEST	1.1.1.1	192.168.2.4	0x7b63	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:07.783732891 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:07.783732891 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:07.783732891 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:07.783732891 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.486430883 CEST	1.1.1.1	192.168.2.4	0x2714	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.486430883 CEST	1.1.1.1	192.168.2.4	0x2714	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.487160921 CEST	1.1.1.1	192.168.2.4	0x990f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:17:09.700541973 CEST	1.1.1.1	192.168.2.4	0xf135	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.700541973 CEST	1.1.1.1	192.168.2.4	0xf135	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:09.700690985 CEST	1.1.1.1	192.168.2.4	0x3408	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:17:11.035254002 CEST	1.1.1.1	192.168.2.4	0x975d	No error (0)	analytics.wetransfer.net		13.226.210.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.035254002 CEST	1.1.1.1	192.168.2.4	0x975d	No error (0)	analytics.wetransfer.net		13.226.210.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.035254002 CEST	1.1.1.1	192.168.2.4	0x975d	No error (0)	analytics.wetransfer.net		13.226.210.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.035254002 CEST	1.1.1.1	192.168.2.4	0x975d	No error (0)	analytics.wetransfer.net		13.226.210.125	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.050386906 CEST	1.1.1.1	192.168.2.4	0x6089	No error (0)	experiments.wetransfer.net		18.65.3.33	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.050386906 CEST	1.1.1.1	192.168.2.4	0x6089	No error (0)	experiments.wetransfer.net		18.65.3.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.050386906 CEST	1.1.1.1	192.168.2.4	0x6089	No error (0)	experiments.wetransfer.net		18.65.3.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:11.050386906 CEST	1.1.1.1	192.168.2.4	0x6089	No error (0)	experiments.wetransfer.net		18.65.3.83	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.460778952 CEST	1.1.1.1	192.168.2.4	0xf2c7	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.460778952 CEST	1.1.1.1	192.168.2.4	0xf2c7	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.460778952 CEST	1.1.1.1	192.168.2.4	0xf2c7	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.460778952 CEST	1.1.1.1	192.168.2.4	0xf2c7	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.627724886 CEST	1.1.1.1	192.168.2.4	0x6	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.627724886 CEST	1.1.1.1	192.168.2.4	0x6	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.627724886 CEST	1.1.1.1	192.168.2.4	0x6	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.627724886 CEST	1.1.1.1	192.168.2.4	0x6	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.635759115 CEST	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	experiments.wetransfer.net		18.65.3.83	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.635759115 CEST	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	experiments.wetransfer.net		18.65.3.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.635759115 CEST	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	experiments.wetransfer.net		18.65.3.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.635759115 CEST	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	experiments.wetransfer.net		18.65.3.33	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.639856100 CEST	1.1.1.1	192.168.2.4	0x289f	No error (0)	analytics.wetransfer.net		13.226.210.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.639856100 CEST	1.1.1.1	192.168.2.4	0x289f	No error (0)	analytics.wetransfer.net		13.226.210.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.639856100 CEST	1.1.1.1	192.168.2.4	0x289f	No error (0)	analytics.wetransfer.net		13.226.210.125	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:12.639856100 CEST	1.1.1.1	192.168.2.4	0x289f	No error (0)	analytics.wetransfer.net		13.226.210.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:13.665596962 CEST	1.1.1.1	192.168.2.4	0x60f0	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:13.665596962 CEST	1.1.1.1	192.168.2.4	0x60f0	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:13.665596962 CEST	1.1.1.1	192.168.2.4	0x60f0	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:13.665596962 CEST	1.1.1.1	192.168.2.4	0x60f0	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.055943966 CEST	1.1.1.1	192.168.2.4	0x26e7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.055943966 CEST	1.1.1.1	192.168.2.4	0x26e7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.668821096 CEST	1.1.1.1	192.168.2.4	0xb235	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.668821096 CEST	1.1.1.1	192.168.2.4	0xb235	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.668821096 CEST	1.1.1.1	192.168.2.4	0xb235	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.669471979 CEST	1.1.1.1	192.168.2.4	0xc662	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.669471979 CEST	1.1.1.1	192.168.2.4	0xc662	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.669471979 CEST	1.1.1.1	192.168.2.4	0xc662	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:15.689174891 CEST	1.1.1.1	192.168.2.4	0x6db9	No error (0)	cdn.lamp.avct.cloud		18.65.25.15	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.689174891 CEST	1.1.1.1	192.168.2.4	0x6db9	No error (0)	cdn.lamp.avct.cloud		18.65.25.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.689174891 CEST	1.1.1.1	192.168.2.4	0x6db9	No error (0)	cdn.lamp.avct.cloud		18.65.25.72	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:15.689174891 CEST	1.1.1.1	192.168.2.4	0x6db9	No error (0)	cdn.lamp.avct.cloud		18.65.25.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:16.975938082 CEST	1.1.1.1	192.168.2.4	0x2615	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:17:16.976286888 CEST	1.1.1.1	192.168.2.4	0x4b0a	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:16.976286888 CEST	1.1.1.1	192.168.2.4	0x4b0a	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.281287909 CEST	1.1.1.1	192.168.2.4	0x687f	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.281287909 CEST	1.1.1.1	192.168.2.4	0x687f	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.281287909 CEST	1.1.1.1	192.168.2.4	0x687f	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.903928995 CEST	1.1.1.1	192.168.2.4	0x9774	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:17:17.904181004 CEST	1.1.1.1	192.168.2.4	0x553a	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:17.904181004 CEST	1.1.1.1	192.168.2.4	0x553a	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.218307972 CEST	1.1.1.1	192.168.2.4	0xe506	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.218307972 CEST	1.1.1.1	192.168.2.4	0xe506	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.218307972 CEST	1.1.1.1	192.168.2.4	0xe506	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.218307972 CEST	1.1.1.1	192.168.2.4	0xe506	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222100019 CEST	1.1.1.1	192.168.2.4	0xd798	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222100019 CEST	1.1.1.1	192.168.2.4	0xd798	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222100019 CEST	1.1.1.1	192.168.2.4	0xd798	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222140074 CEST	1.1.1.1	192.168.2.4	0x9e39	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222140074 CEST	1.1.1.1	192.168.2.4	0x9e39	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.222140074 CEST	1.1.1.1	192.168.2.4	0x9e39	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:20.241724968 CEST	1.1.1.1	192.168.2.4	0x2240	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.241724968 CEST	1.1.1.1	192.168.2.4	0x2240	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:20.241724968 CEST	1.1.1.1	192.168.2.4	0x2240	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:22.847409010 CEST	1.1.1.1	192.168.2.4	0xed6e	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:22.847409010 CEST	1.1.1.1	192.168.2.4	0xed6e	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:22.847409010 CEST	1.1.1.1	192.168.2.4	0xed6e	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:22.863328934 CEST	1.1.1.1	192.168.2.4	0x6e4d	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:24.528630018 CEST	1.1.1.1	192.168.2.4	0xef9e	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:24.529629946 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:24.529629946 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:24.529629946 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:27.590622902 CEST	1.1.1.1	192.168.2.4	0xc68c	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:27.590622902 CEST	1.1.1.1	192.168.2.4	0xc68c	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:27.590622902 CEST	1.1.1.1	192.168.2.4	0xc68c	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.550750017 CEST	1.1.1.1	192.168.2.4	0x6d19	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.550750017 CEST	1.1.1.1	192.168.2.4	0x6d19	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.550750017 CEST	1.1.1.1	192.168.2.4	0x6d19	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.588443041 CEST	1.1.1.1	192.168.2.4	0x83c7	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.588443041 CEST	1.1.1.1	192.168.2.4	0x83c7	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.588443041 CEST	1.1.1.1	192.168.2.4	0x83c7	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:30.588443041 CEST	1.1.1.1	192.168.2.4	0x83c7	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:32.080584049 CEST	1.1.1.1	192.168.2.4	0x8db5	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:32.080584049 CEST	1.1.1.1	192.168.2.4	0x8db5	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:32.080584049 CEST	1.1.1.1	192.168.2.4	0x8db5	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:32.080584049 CEST	1.1.1.1	192.168.2.4	0x8db5	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:36.513425112 CEST	1.1.1.1	192.168.2.4	0x3275	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:36.513425112 CEST	1.1.1.1	192.168.2.4	0x3275	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:36.513425112 CEST	1.1.1.1	192.168.2.4	0x3275	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:36.513425112 CEST	1.1.1.1	192.168.2.4	0x3275	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	18.65.3.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:03 UTC	660	OUT	GET /t-nsdjwtsB1E HTTP/1.1 Host: we.tl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:03 UTC	698	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close Cache-Control: public, max-age=3600 Date: Wed, 24 Apr 2024 02:16:03 GMT Expires: Wed, 24 Apr 2024 03:16:03 GMT Location: https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84 Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-request-id: e4486b9532ec678836c09d6a9069450d x-xss-protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 ad0709bedfde2db64fca0e2b4d741932.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P1 X-Amz-Cf-Id: SdDYSHNa2bkhumO-XToSWxLhnp18ThtZZcbb25Ar5tzTKHnnQ6YKOA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:04 UTC	720	OUT	GET /downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84 HTTP/1.1 Host: wetransfer.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:04 UTC	890	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10387 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:16:04 GMT ETag: "2893-AY59LTHPV/9v4PC6+cBn40vM1mI" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vOtGBmN3HtUAcI8P5HKIhIz-5NPoH_MbVjhyA8MRpXD2IqKtFThDuQ==
2024-04-24 02:16:04 UTC	10387	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:05 UTC	660	OUT	GET /c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
2024-04-24 02:16:05 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1601 Connection: close Cache-Control: public, max-age=315360000, s-maxage=31530000 Date: Tue, 23 Apr 2024 14:52:26 GMT Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BcT5DuguA6ip7zgGF0OuXWOjHlGZgxkvbBsnOPlfbUmGV9nfpfap_A== Age: 41019
2024-04-24 02:16:05 UTC	1601	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 77 2e 5f 5f 61 70 70 5f 63 6f 6e 66 69 67 3d 7b 65 6e 76 3a 7b 22 56 45 52 53 49 4f 4e 22 3a 22 63 39 38 62 65 39 65 62 39 66 32 30 36 35 34 37 61 65 61 31 30 64 34 36 66 32 35 33 65 61 33 37 65 61 33 64 33 64 62 37 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 54 52 49 50 45 5f 4b 45 59 22 3a 22 70 6b 5f 6c 69 76 65 5f 4d 72 32 4c 71 50 73 77 73 46 6a 7a 43 6a 42 54 4a 43 6d 4f 58 42 30 53 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 4e 4f 57 50 4c 4f 57 5f 43 4f 4c 4c 45 43 54 4f 52 22 3a 22 73 6e 6f 77 70 6c 6f 77 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 45 52 56 45 52 5f 45 4e 56 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 Data Ascii: (function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:05 UTC	663	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
2024-04-24 02:16:05 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 11:40:40 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HNmobPy18FBIF27lK1j33BLZzhf8YClPVxecAfZeqKyYwOhbMDMWrw== Age: 52526
2024-04-24 02:16:05 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-24 02:16:05 UTC	16384	IN	Data Raw: 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 30 36 32 35 65 6d Data Ascii: m,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;padding-left:0;padding-right:0}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons .button:nth-child(2){margin-top:1.0625em
2024-04-24 02:16:05 UTC	16384	IN	Data Raw: 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 70 61 79 6d 65 6e 74 5f 5f 63 61 6e 63 65 6c 2c 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 62 65 64 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 73 75 62 74 69 74 Data Ascii: e Medium,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif}.payment__cancel,.payment__reactivate{border-top:1px solid #e8ebed}.payment__reactivate--text{margin-bottom:1.5rem}.payment__reactivate--subtit
2024-04-24 02:16:06 UTC	15227	IN	Data Raw: 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 37 34 31 64 39 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: :not(:last-child){margin-right:1rem}.contact-item .contact-item__option:focus,.contact-item .contact-item__option:hover{color:#3741d9}.contact-item .contact-item__option--disabled,.contact-item .contact-item__option--disabled:focus,.contact-item .contact-
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 30 30 25 7d 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 68 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 Data Ascii: 00%}.account__content p{font-size:.875em;line-height:1.5em}.account__content h5{font-weight:500;font-family:-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Medium,-apple-s
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 31 32 35 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d Data Ascii: :#fff;margin-top:.25em;min-height:2.125em;width:100%}.form-notification__message{font-weight:500;font-family:-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Medium,-apple-
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 6f 75 6e 74 2d 74 69 65 72 73 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 54 20 53 75 70 65 72 20 57 54 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 Data Ascii: ount-tiers__title{font-weight:800;font-family:-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:GT Super WT,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Luci
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 70 61 64 64 69 6e 67 3a 31 65 6d 20 34 2e 32 38 Data Ascii: Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Medium,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;color:#fff;font-size:.875em;line-height:1.3;padding:1em 4.28
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 6f 70 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 73 2d 63 6f 6e Data Ascii: ontainer .nav__subitems-container{position:relative;box-shadow:none;top:0;display:none}.is-mobile-ready .nav__subitems-container .nav__subitems-container--open{display:flex;flex-direction:column}.is-mobile-ready .nav__subitems-container .nav__subitems-con
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 6f 72 74 61 6e 74 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 2e 73 63 72 6f 6c 6c 61 62 6c 65 2d 2d 6f 76 65 72 66 6c 6f 77 2d 62 6f 74 74 6f 6d 3a 61 66 74 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 36 70 78 20 36 70 78 20 2d 36 70 78 20 72 67 62 61 28 32 33 2c 32 34 2c 32 36 2c 2e 32 35 29 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 3a 61 66 74 65 72 2c 2e 73 63 72 6f 6c 6c 61 62 6c 65 3a 62 65 66 6f 72 65 7b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 20 65 61 73 65 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 7d 2e 73 63 72 6f Data Ascii: ortant}.scrollable.scrollable--overflow-bottom:after{box-shadow:inset 0 -6px 6px -6px rgba(23,24,26,.25)}.scrollable:after,.scrollable:before{bottom:0;content:"";height:10px;left:0;position:absolute;right:0;transition:box-shadow .3s ease;z-index:999}.scro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:05 UTC	663	OUT	GET /_next/static/css/bacf6ffa65b559f2.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
2024-04-24 02:16:05 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1718 Connection: close Date: Sun, 11 Feb 2024 18:16:35 GMT Last-Modified: Sat, 10 Feb 2024 08:28:19 GMT ETag: "7bc594d2f21c7b14c2bbb8ea785276a0" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6hTSMCBzdOU9lgQNZo6sIsQNm3crvKMPedilBqF9bbQvNnhHUiwWgQ== Age: 6249571
2024-04-24 02:16:05 UTC	1718	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:05 UTC	659	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=8e0fc05d-790a-463b-80a0-e1ece4c306c9.1713924964707.0.1713924964707.
2024-04-24 02:16:05 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 55LzR1W0mLVnS1IjLOaRDuHk_avvg2VOuSNeAGbL4gSRqqFhS7dyAg== Age: 41019
2024-04-24 02:16:05 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:05 UTC	661	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:06 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Thu, 22 Feb 2024 02:45:11 GMT Last-Modified: Wed, 21 Feb 2024 21:08:01 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ubHy5JY0WtJyOSXe41uXcc2B6dVC62QAi73HF1BEoYiNfch1qN18zA== Age: 5355056
2024-04-24 02:16:06 UTC	15775	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 4d 6f 75 73 65 45 6e 74 65 72 22 3a 28 72 3d 21 72 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 72 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 28 65 3d 65 2e 74 79 70 65 29 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 65 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 65 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 65 29 29 2c 65 3d 21 72 3b 62 72 65 61 6b 20 65 3b 64 65 66 61 75 6c 74 3a 65 3d 21 31 7d 69 66 28 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 33 31 2c 74 2c 74 79 70 65 6f 66 20 6e 29 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 6a 65 3d 21 31 3b 69 66 28 66 29 74 72 79 7b 76 61 72 20 42 65 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: MouseEnter":(r=!r.disabled)\|\|(r=!("button"===(e=e.type)\|\|"input"===e\|\|"select"===e\|\|"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!==typeof n)throw Error(o(231,t,typeof n));return n}var je=!1;if(f)try{var Be={};Object.defineP
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 29 2e 61 6e 63 68 6f 72 4e 6f 64 65 2c 61 6e 63 68 6f 72 4f 66 66 73 65 74 3a 72 2e 61 6e 63 68 6f 72 4f 66 66 73 65 74 2c 66 6f 63 75 73 4e 6f 64 65 3a 72 2e 66 6f 63 75 73 4e 6f 64 65 2c 66 6f 63 75 73 4f 66 66 73 65 74 3a 72 2e 66 6f 63 75 73 4f 66 66 73 65 74 7d 2c 6b 72 26 26 64 72 28 6b 72 2c 72 29 7c 7c 28 6b 72 3d 72 2c 30 3c 28 72 3d 44 72 28 77 72 2c 22 6f 6e 53 65 6c 65 63 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 74 3d 6e 65 77 20 70 6e 28 22 6f 6e 53 65 6c 65 63 74 22 2c 22 73 65 6c 65 63 74 22 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 65 2e 70 75 73 68 28 7b Data Ascii: wnerDocument&&r.ownerDocument.defaultView\|\|window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&dr(kr,r)\|\|(kr=r,0<(r=Dr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 29 7b 69 66 28 65 3d 74 2e 65 66 66 65 63 74 73 2c 74 2e 65 66 66 65 63 74 73 3d 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 65 29 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 2c 6c 3d 72 2e 63 61 6c 6c 62 61 63 6b 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 29 7b 69 66 28 72 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 72 3d 6e 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 39 31 2c 6c 29 29 3b 6c 2e 63 61 6c 6c 28 72 29 7d 7d 7d 76 61 72 20 6d 61 3d 28 6e 65 77 20 72 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2e 72 65 66 73 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 65 2c 74 2c 6e 2c 72 29 7b 6e 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 28 72 2c 74 3d 65 2e 6d 65 6d Data Ascii: ){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],l=r.callback;if(null!==l){if(r.callback=null,r=n,"function"!==typeof l)throw Error(o(191,l));l.call(r)}}}var ma=(new r.Component).refs;function va(e,t,n,r){n=null===(n=n(r,t=e.mem
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 65 72 72 65 64 56 61 6c 75 65 3a 6c 6f 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 6c 6f 2c 75 73 65 4d 75 74 61 62 6c 65 53 6f 75 72 63 65 3a 6c 6f 2c 75 73 65 4f 70 61 71 75 65 49 64 65 6e 74 69 66 69 65 72 3a 6c 6f 2c 75 6e 73 74 61 62 6c 65 5f 69 73 4e 65 77 52 65 63 6f 6e 63 69 6c 65 72 3a 21 31 7d 2c 52 6f 3d 7b 72 65 61 64 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 6f 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 5d 2c 65 7d 2c 75 73 65 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 45 66 66 65 63 74 3a 53 6f 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: erredValue:lo,useTransition:lo,useMutableSource:lo,useOpaqueIdentifier:lo,unstable_isNewReconciler:!1},Ro={readContext:oa,useCallback:function(e,t){return uo().memoizedState=[e,void 0===t?null:t],e},useContext:oa,useEffect:So,useImperativeHandle:function(
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 29 2c 74 2e 6c 61 6e 65 73 3d 33 33 35 35 34 34 33 32 29 7d 65 6c 73 65 7b 69 66 28 21 75 29 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 55 61 28 73 29 29 29 7b 69 66 28 74 2e 66 6c 61 67 73 7c 3d 36 34 2c 75 3d 21 30 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 28 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 2c 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6f 75 28 72 2c 21 30 29 2c 6e 75 6c 6c 3d 3d 3d 72 2e 74 61 69 6c 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 72 2e 74 61 69 6c 4d 6f 64 65 26 26 21 73 2e 61 6c 74 65 72 6e 61 74 65 26 26 21 6a 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 6c 61 73 74 45 66 66 65 63 74 3d 72 2e 6c 61 73 74 45 66 66 65 63 74 29 26 26 28 74 2e 6e 65 78 74 45 66 66 65 63 74 3d 6e 75 6c 6c Data Ascii: ),t.lanes=33554432)}else{if(!u)if(null!==(e=Ua(s))){if(t.flags\|=64,u=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags\|=4),ou(r,!0),null===r.tail&&"hidden"===r.tailMode&&!s.alternate&&!ja)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 3d 61 2e 70 69 6e 67 43 61 63 68 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 62 3f 28 62 3d 61 2e 70 69 6e 67 43 61 63 68 65 3d 6e 65 77 20 66 75 2c 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 3a 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 62 2e 67 65 74 28 73 29 29 26 26 28 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 2c 21 69 2e 68 61 73 28 75 29 29 7b 69 2e 61 64 64 28 75 29 3b 76 61 72 20 77 3d 6a 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 2c 73 2c 75 29 3b 73 2e 74 68 65 6e 28 77 2c 77 29 7d 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 64 2e 6c 61 6e 65 73 3d 74 3b 62 72 65 61 6b 20 65 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 3b 69 3d 45 72 72 6f 72 28 28 71 28 75 2e 74 79 70 65 29 7c 7c 22 41 20 Data Ascii: =a.pingCache;if(null===b?(b=a.pingCache=new fu,i=new Set,b.set(s,i)):void 0===(i=b.get(s))&&(i=new Set,b.set(s,i)),!i.has(u)){i.add(u);var w=ji.bind(null,a,s,u);s.then(w,w)}d.flags\|=4096,d.lanes=t;break e}d=d.return}while(null!==d);i=Error((q(u.type)\|\|"A
2024-04-24 02:16:06 UTC	15917	IN	Data Raw: 3d 75 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 63 72 28 69 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 69 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 75 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 6c 2e 63 68 69 6c 64 72 65 6e 26 26 21 68 6c 2e 63 75 72 72 65 6e 74 29 7b 74 3d 61 75 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 69 3d 74 2e 63 68 69 6c 64 29 26 26 28 69 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 69 3b 29 7b 76 61 72 20 73 3d 69 2e 64 65 70 65 6e 64 65 6e 63 69 65 73 3b 69 66 28 Data Ascii: =u.value,0===(a=cr(i,a)?0:0\|("function"===typeof r._calculateChangedBits?r._calculateChangedBits(i,a):1073741823))){if(u.children===l.children&&!hl.current){t=au(e,t,n);break e}}else for(null!==(i=t.child)&&(i.return=t);null!==i;){var s=i.dependencies;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	656	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:06 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Sat, 21 Oct 2023 16:35:10 GMT Last-Modified: Fri, 20 Oct 2023 16:44:07 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MAB_wsiN8-pnLXFGWjM2OyCPdBpGI1j3piQyDSVDamIITR2TdXZ2dA== Age: 16018856
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 69 66 28 65 3d 65 26 26 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 74 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 29 7d 29 2c 30 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7d 7d 5d 29 2c 72 7d 28 66 2e 64 65 66 61 75 6c 74 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 29 7b 72 65 74 75 72 6e Data Ascii: e:function(){var e=location.hash;if(e=e&&e.substring(1)){var t=document.getElementById(e);t&&setTimeout((function(){return t.scrollIntoView()}),0)}}},{key:"render",value:function(){return this.props.children}}]),r}(f.default.Component);function Q(){return
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 65 7d 7d 29 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 6e 2e 67 65 74 28 65 29 3b 72 26 26 22 72 65 73 6f 6c 76 65 22 69 6e 20 72 3f 74 26 26 28 6e 2e 73 65 74 28 65 2c 74 29 2c 72 2e 72 65 73 6f 6c 76 65 28 74 29 29 3a 28 74 3f 6e 2e 73 65 74 28 65 2c 74 29 3a 6e 2e 64 65 6c 65 74 65 28 65 29 2c 66 2e 64 65 6c 65 74 65 28 65 29 29 7d 29 29 7d 2c 6c 6f 61 64 52 6f 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 6f 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 69 28 61 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 75 3b 72 65 74 75 72 6e 20 6c 28 64 28 65 2c 61 29 2e 74 68 65 Data Ascii: ){return{error:e}})):Promise.resolve(void 0)).then((function(t){var r=n.get(e);r&&"resolve"in r?t&&(n.set(e,t),r.resolve(t)):(t?n.set(e,t):n.delete(e),f.delete(e))}))},loadRoute:function(a,o){var u=this;return i(a,f,(function(){var i=u;return l(d(e,a).the
2024-04-24 02:16:06 UTC	14808	IN	Data Raw: 22 64 61 74 61 2d 6f 70 74 69 6d 69 7a 65 64 2d 66 6f 6e 74 73 22 5d 3d 21 30 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 65 2c 69 29 7d 72 65 74 75 72 6e 20 6f 2e 64 65 66 61 75 6c 74 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 65 2c 7b 6b 65 79 3a 61 7d 29 7d 29 29 7d 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 72 3d 6f 2e 75 73 65 43 6f 6e 74 65 78 74 28 75 2e 41 6d 70 53 74 61 74 65 43 6f 6e 74 65 78 74 29 2c 6e 3d 6f 2e 75 73 65 43 6f 6e 74 65 78 74 28 63 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 3b 72 65 74 75 72 6e 20 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 64 65 66 61 75 6c 74 2c 7b 72 65 64 75 63 65 43 6f Data Ascii: "data-optimized-fonts"]=!0,o.default.cloneElement(e,i)}return o.default.cloneElement(e,{key:a})}))}var v=function(e){var t=e.children,r=o.useContext(u.AmpStateContext),n=o.useContext(c.HeadManagerContext);return o.default.createElement(i.default,{reduceCo
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 73 65 20 37 3a 72 65 74 75 72 6e 20 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 2c 4d 3d 7b 64 61 74 61 48 72 65 66 3a 79 2e 70 61 67 65 4c 6f 61 64 65 72 2e 67 65 74 44 61 74 61 48 72 65 66 28 7b 68 72 65 66 3a 6a 2e 66 6f 72 6d 61 74 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 28 7b 70 61 74 68 6e 61 6d 65 3a 72 2c 71 75 65 72 79 3a 61 7d 29 2c 73 6b 69 70 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 3a 21 30 2c 61 73 50 61 74 68 3a 69 2c 6c 6f 63 61 6c 65 3a 6c 7d 29 2c 68 61 73 4d 69 64 64 6c 65 77 61 72 65 3a 21 30 2c 69 73 53 65 72 76 65 72 52 65 6e 64 65 72 3a 79 2e 69 73 53 73 72 2c 70 61 72 73 65 4a 53 4f 4e 3a 21 30 2c 69 6e 66 6c 69 67 68 74 43 61 63 68 65 3a 79 2e 73 64 63 2c 70 65 72 73 69 73 74 43 61 63 Data Ascii: se 7:return O=S&&!("initial"in S)?S:void 0,M={dataHref:y.pageLoader.getDataHref({href:j.formatWithValidation({pathname:r,query:a}),skipInterpolation:!0,asPath:i,locale:l}),hasMiddleware:!0,isServerRender:y.isSsr,parseJSON:!0,inflightCache:y.sdc,persistCac
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 61 72 20 74 3d 61 28 29 3b 69 66 28 74 26 26 74 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 28 65 29 3b 76 61 72 20 72 3d 7b 7d 2c 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6f 29 29 7b 76 61 72 20 69 3d 6e 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6f 29 3a 6e 75 6c 6c 3b 69 26 26 28 69 2e 67 65 74 7c 7c 69 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 Data Ascii: ar t=a();if(t&&t.has(e))return t.get(e);var r={},n=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var o in e)if(Object.prototype.hasOwnProperty.call(e,o)){var i=n?Object.getOwnPropertyDescriptor(e,o):null;i&&(i.get\|\|i.set)?Object.definePropert
2024-04-24 02:16:06 UTC	16384	IN	Data Raw: 2e 73 75 62 73 74 72 69 6e 67 28 33 29 2c 6e 3d 21 30 29 2c 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 5b 22 29 7c 7c 69 2e 65 6e 64 73 57 69 74 68 28 22 5d 22 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 65 67 6d 65 6e 74 20 6e 61 6d 65 73 20 6d 61 79 20 6e 6f 74 20 73 74 61 72 74 20 6f 72 20 65 6e 64 20 77 69 74 68 20 65 78 74 72 61 20 62 72 61 63 6b 65 74 73 20 28 27 22 2e 63 6f 6e 63 61 74 28 69 2c 22 27 29 2e 22 29 29 3b 69 66 28 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 65 67 6d 65 6e 74 20 6e 61 6d 65 73 20 6d 61 79 20 6e 6f 74 20 73 74 61 72 74 20 77 69 74 68 20 65 72 72 6f 6e 65 6f 75 73 20 70 65 72 69 6f 64 73 20 28 27 22 2e 63 6f 6e 63 61 74 28 69 2c 22 27 29 2e 22 Data Ascii: .substring(3),n=!0),i.startsWith("[")\|\|i.endsWith("]"))throw new Error("Segment names may not start or end with extra brackets ('".concat(i,"')."));if(i.startsWith("."))throw new Error("Segment names may not start with erroneous periods ('".concat(i,"')."
2024-04-24 02:16:06 UTC	7300	IN	Data Raw: 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 74 5d 3b 69 66 28 72 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 72 2e 63 6f 6d 70 6c 65 74 69 6f 6e 2c 72 2e 61 66 74 65 72 4c 6f 63 29 2c 4f 28 72 29 2c 68 7d 7d 2c 63 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 74 5d 3b 69 66 28 72 2e 74 72 79 4c 6f 63 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6d 70 6c 65 74 Data Ascii: this.tryEntries.length-1;t>=0;--t){var r=this.tryEntries[t];if(r.finallyLoc===e)return this.complete(r.completion,r.afterLoc),O(r),h}},catch:function(e){for(var t=this.tryEntries.length-1;t>=0;--t){var r=this.tryEntries[t];if(r.tryLoc===e){var n=r.complet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	662	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:06 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 03 Feb 2024 10:04:07 GMT Last-Modified: Fri, 02 Feb 2024 17:50:15 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lii-lcNK64pwh6vJ53Zu6l2wA9eXkqeiup0H9Tfc6fjkWjRoH33vXQ== Age: 6970320
2024-04-24 02:16:06 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	655	OUT	GET /_next/static/chunks/404-d60ba40552f46991.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:06 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 17274 Connection: close Date: Tue, 23 Apr 2024 10:53:31 GMT Last-Modified: Tue, 23 Apr 2024 10:34:49 GMT ETag: "227dcd2826f29b0374c5cda69996b745" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WuP7hAEZnxPEKfjc3mucba3joSAzTVCVI3PY-pcS7leGC6KnfqmNdQ== Age: 55356
2024-04-24 02:16:06 UTC	15990	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 34 5d 2c 7b 37 30 33 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 36 31 31 32 29 7d 2c 31 39 35 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 37 30 38 36 35 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 69 3d 6e 28 32 35 32 33 37 29 2c 61 3d 6e 2e 6e 28 69 29 2c 75 3d 6e 28 32 37 38 34 29 2c 73 3d 6e 28 36 32 32 32 35 29 2c 6c 3d 6e 28 33 38 35 37 37 29 2c 63 3d 6e 28 37 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(7
2024-04-24 02:16:06 UTC	1284	IN	Data Raw: 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 45 72 72 6f 72 53 74 61 74 65 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 22 2c 4c 6f 67 6f 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 22 2c 45 72 72 6f 72 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 22 2c 57 72 61 70 70 65 72 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 57 72 61 70 70 65 72 5f 5f 32 49 34 46 6e 22 2c 53 70 69 72 61 6c 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 53 70 69 72 61 6c 5f 5f 72 39 35 42 32 22 2c 54 69 74 6c 65 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 54 69 74 6c 65 5f 5f 76 51 75 30 44 22 2c 44 65 73 63 72 69 70 74 69 6f 6e 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 44 65 73 63 72 69 70 Data Ascii: ion(e){e.exports={ErrorState:"ErrorState_ErrorState__R2wCf",Logo:"ErrorState_Logo__ROPMn",Error:"ErrorState_Error__Y_UhO",Wrapper:"ErrorState_Wrapper__2I4Fn",Spiral:"ErrorState_Spiral__r95B2",Title:"ErrorState_Title__vQu0D",Description:"ErrorState_Descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	702	OUT	GET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:06 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1193 Connection: close Date: Sat, 24 Feb 2024 15:29:17 GMT Last-Modified: Fri, 23 Feb 2024 20:10:35 GMT ETag: "65123faaba2e6ce6af74685759b7c08a" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pucfPEgkbqkSoZ8fk13MTu7mVV7zWmW6_wVsOabSJA2QtTPS3Vm02g== Age: 5136410
2024-04-24 02:16:06 UTC	1193	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 30 5d 2c 7b 31 35 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 5b 74 72 61 6e 73 66 65 72 49 64 5d 2f 5b 72 65 63 69 70 69 65 6e 74 49 64 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 34 36 35 34 29 7d 5d 29 7d 2c 31 38 34 36 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 65 28 32 37 38 34 29 3b 6e 2e 5a 3d 66 75 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9210],{15184:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]",function(){return e(4654)}])},18469:function(t,n,e){"use strict";var i=e(2784);n.Z=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	683	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	605	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QZEIeQbcuqsKFO2PF3-6KyDABCr6WWGn9e2sxlAKIs4WG9UVSU0Hkg== Age: 41021
2024-04-24 02:16:07 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:06 UTC	681	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 db5074d02aa0b9851d4e5d66a6fc3826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kvEmEYKnSJlBHD1MQvGq0fwRe8xDSk01Zcw_-wIpl_R0RQKuCVzJ4A== Age: 41021
2024-04-24 02:16:07 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	23.40.26.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 02:16:07 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/254A) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=17261 Date: Wed, 24 Apr 2024 02:16:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	663	OUT	GET /_next/static/css/03d589055b9fa8a0.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	601	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 501856 Connection: close Date: Mon, 22 Apr 2024 16:53:08 GMT Last-Modified: Mon, 22 Apr 2024 16:51:34 GMT ETag: "7bbf99584cacbc02a1d6ee0813153c1d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iA2fQLAjLJxbuv-ELoD5Ix4FqbwmkPO2S1FxRqmWELHtGJf93B2LhQ== Age: 120180
2024-04-24 02:16:07 UTC	15783	IN	Data Raw: 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 42 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 5f 5f 48 37 6f 4b 52 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 6e 61 72 72 6f 77 5f 5f 6a 74 57 33 4f 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 49 34 76 51 33 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 Data Ascii: .WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-displa
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 75 6e 74 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 25 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 42 61 6e 6e 65 72 2d 64 69 73 63 6f 75 6e 74 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 Data Ascii: unt__title{font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:16px;font-weight:700;line-height:150%}@media(min-width:768px){.Banner-discount__title{font-size:1
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 42 75 74 74 6f 6e 5f 6c 69 6e 6b 5f 5f 49 76 67 37 74 2e 42 75 74 74 6f 6e 5f 70 72 69 6d 61 72 79 5f 5f 45 76 6c 65 33 3a 66 6f 63 75 73 2c 2e 42 75 74 74 6f 6e 5f 6c 69 6e 6b 5f 5f 49 76 67 37 74 2e 42 75 74 74 6f 6e 5f 70 72 69 6d 61 72 79 5f 5f 45 76 6c 65 33 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 2e 42 75 74 74 6f 6e 5f 6c 69 6e 6b 5f 5f 49 76 67 37 74 2e 42 75 74 74 6f 6e 5f 70 72 69 6d 61 72 79 5f 5f 45 76 6c 65 33 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 7b 63 6f 6c 6f 72 3a 23 33 37 34 31 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 35 72 65 6d 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 72 67 62 61 28 38 32 2c 31 30 34 2c 32 35 35 2c 2e 32 29 7d 2e 42 75 74 74 6f Data Ascii: or:not-allowed}.Button_link__Ivg7t.Button_primary__Evle3:focus,.Button_link__Ivg7t.Button_primary__Evle3:focus-visible,.Button_link__Ivg7t.Button_primary__Evle3:focus-within{color:#3741d9;border-radius:.5rem;box-shadow:0 0 0 3px rgba(82,104,255,.2)}.Butto
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 65 63 6b 6d 61 72 6b 5f 5f 44 31 52 78 30 2e 43 68 65 63 6b 62 6f 78 5f 63 68 65 63 6b 65 64 5f 5f 6d 43 6c 30 30 2c 2e 43 68 65 63 6b 62 6f 78 5f 43 68 65 63 6b 62 6f 78 5f 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 34 73 31 36 50 20 69 6e 70 75 74 3a 66 6f 63 75 73 7e 2e 43 68 65 63 6b 62 6f 78 5f 63 68 65 63 6b 6d 61 72 6b 5f 5f 44 31 52 78 30 2e 43 68 65 63 6b 62 6f 78 5f 63 68 65 63 6b 65 64 5f 5f 6d 43 6c 30 30 2e 43 68 65 63 6b 62 6f 78 5f 64 61 72 6b 5f 5f 5a 5f 77 6e 4d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 37 34 31 64 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 37 34 31 64 39 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 35 70 78 20 72 67 62 61 28 38 32 2c 31 30 34 2c 32 35 35 2c 2e 32 29 7d 2e 43 68 65 63 6b 62 6f 78 5f Data Ascii: eckmark__D1Rx0.Checkbox_checked__mCl00,.Checkbox_Checkbox__container__4s16P input:focus~.Checkbox_checkmark__D1Rx0.Checkbox_checked__mCl00.Checkbox_dark__Z_wnM{background:#3741d9;border:1px solid #3741d9;box-shadow:0 0 0 5px rgba(82,104,255,.2)}.Checkbox_
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 4d 52 39 53 42 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 5f 5f 55 65 4c 52 46 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 6e 61 72 72 6f 77 5f 5f 4a 6c 33 54 39 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 77 69 64 65 5f 5f 54 4d 4a 4a 72 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 5f 5f 39 62 71 75 77 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 Data Ascii: lay-heading-large-bold-wide__MR9SB,.BannerCsat_wt-display-heading-large-bold__UeLRF,.BannerCsat_wt-display-heading-large-narrow__Jl3T9,.BannerCsat_wt-display-heading-large-wide__TMJJr,.BannerCsat_wt-display-heading-large__9bquw,.BannerCsat_wt-display-head
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 32 65 6d 7d 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 6e 61 72 72 6f 77 5f 5f 4d 58 57 5f 39 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 31 65 6d 7d 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 33 4a 38 79 78 2c 2e 41 63 63 6f 75 Data Ascii: 400;font-size:64px;line-height:1;letter-spacing:-.02em}.AccountStorageWidget_wt-display-heading-large-narrow__MXW_9{font-weight:400;font-size:40px;line-height:1.1;letter-spacing:-.01em}.AccountStorageWidget_wt-display-heading-large-bold-wide__3J8yx,.Accou
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 70 78 7d 2e 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 54 72 61 6e 73 66 65 72 41 63 63 6f 75 6e 74 4d 65 6e 75 5f 5f 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 2d 2d 75 70 73 65 6c 6c 2c 2e 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 2d 73 65 6d 69 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 77 74 2d 6c 61 62 65 6c 2d 78 2d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 7d 2e Data Ascii: px}.wt-label-small{font-weight:400;font-size:12px}.TransferAccountMenu__AccountStorageWidget--upsell,.wt-label-small-semi{font-weight:500;font-size:12px}.wt-label-small-bold{font-weight:700;font-size:12px}.wt-label-x-small{font-weight:400;font-size:10px}.
2024-04-24 02:16:07 UTC	14930	IN	Data Raw: 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 78 2d 77 69 64 74 68 3a 32 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 37 35 72 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 70 61 64 64 69 6e 67 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 50 72 69 63 69 6e 67 50 61 6e 65 6c 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 50 72 69 63 69 6e 67 50 61 6e 65 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 Data Ascii: ue,Lucida Grande,sans-serif;max-width:21.25rem;border-radius:.75rem;border:1px solid #e5e5e5;padding:2rem;margin-bottom:1.25rem;align-self:baseline;position:relative}@media(min-width:47.9375em){.PricingPanel{border:none}.PricingPanel:first-child{margin-ri
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 73 6d 61 6c 6c 2d 62 6f 6c 64 5f 5f 56 4f 53 55 34 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 73 6d 61 6c 6c 2d 6e 61 72 72 6f 77 5f 5f 62 42 42 45 4c 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 73 6d 61 6c 6c 2d 77 69 64 65 5f 5f 5a 4f 30 48 57 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 73 6d 61 6c 6c 5f 5f 51 74 43 6a 34 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 78 2d 6c 61 72 67 65 2d 6e 61 72 72 6f 77 5f 5f 71 64 66 4b 34 2c 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f Data Ascii: res_wt-text-heading-small-bold__VOSU4,.JumpToFeatures_wt-text-heading-small-narrow__bBBEL,.JumpToFeatures_wt-text-heading-small-wide__ZO0HW,.JumpToFeatures_wt-text-heading-small__QtCj4,.JumpToFeatures_wt-text-heading-x-large-narrow__qdfK4,.JumpToFeatures_
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 2d 61 72 72 6f 77 2d 6c 65 66 74 2d 2d 64 61 72 6b 5f 5f 45 79 45 41 52 3a 61 66 74 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 2c 31 70 78 20 31 70 78 20 30 20 30 20 23 36 37 36 37 36 37 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 7a 2d 6c 65 76 65 6c 2d 61 75 74 6f 5f 5f 6e 4c 72 73 38 7b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 7a 2d 6c 65 76 65 6c 2d 30 5f 5f 72 7a 52 44 53 7b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 7a 2d 6c 65 76 65 6c 2d 31 5f 5f 35 79 57 6b 36 7b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 Data Ascii: -arrow-left--dark__EyEAR:after{box-shadow:inset 0 1px 0 0 rgba(0,0,0,.1),1px 1px 0 0 #676767}.JumpToFeatures_wt-z-level-auto__nLrs8{z-index:auto}.JumpToFeatures_wt-z-level-0__rzRDS{z-index:0}.JumpToFeatures_wt-z-level-1__5yWk6{z-index:10}.JumpToFeatures_w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	660	OUT	GET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 26464 Connection: close Date: Wed, 20 Dec 2023 13:08:37 GMT Last-Modified: Wed, 20 Dec 2023 11:49:09 GMT ETag: "02cd96af1fe12399200b70e7bf8fa6cd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DElckT8RHyX7WTJvFCy7vhLe_LeJxWkbz_7ZGtHq0QSAGp2D2ytc-Q== Age: 10847251
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 30 5d 2c 7b 34 34 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 6e 65 77 20 42 6c 6f 62 28 5b 22 28 22 2e 63 6f 6e 63 61 74 28 69 2c 22 29 28 73 65 6c 66 29 22 29 5d 29 29 29 2c 6e 65 77 20 57 6f 72 6b 65 72 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{retu
2024-04-24 02:16:07 UTC	10080	IN	Data Raw: 64 5f 6d 61 74 63 68 3d 30 2c 74 68 69 73 2e 6e 69 63 65 5f 6d 61 74 63 68 3d 30 2c 74 68 69 73 2e 64 79 6e 5f 6c 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 50 74 29 2c 74 68 69 73 2e 64 79 6e 5f 64 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 28 32 2a 59 74 2b 31 29 29 2c 74 68 69 73 2e 62 6c 5f 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 28 32 2a 4b 74 2b 31 29 29 2c 6f 65 28 74 68 69 73 2e 64 79 6e 5f 6c 74 72 65 65 29 2c 6f 65 28 74 68 69 73 2e 64 79 6e 5f 64 74 72 65 65 29 2c 6f 65 28 74 68 69 73 2e 62 6c 5f 74 72 65 65 29 2c 74 68 69 73 2e 6c 5f 64 65 73 63 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 5f 64 65 73 63 3d 6e 75 6c 6c 2c 74 68 69 73 2e 62 6c 5f 64 65 73 63 3d 6e 75 6c 6c Data Ascii: d_match=0,this.nice_match=0,this.dyn_ltree=new Uint16Array(2Pt),this.dyn_dtree=new Uint16Array(2(2Yt+1)),this.bl_tree=new Uint16Array(2(2*Kt+1)),oe(this.dyn_ltree),oe(this.dyn_dtree),oe(this.bl_tree),this.l_desc=null,this.d_desc=null,this.bl_desc=null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	660	OUT	GET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 58253 Connection: close Date: Wed, 17 Apr 2024 14:06:21 GMT Last-Modified: Wed, 17 Apr 2024 14:06:09 GMT ETag: "633a43876f294113b67a16bac7c21511" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EAfMShnkNLbgDj0V0wk-LC3lQMImsWQARVt57bfK4DfWBiRbhx8WjQ== Age: 562187
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 35 35 5d 2c 7b 38 30 33 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 61 7d 2c 42 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 61 7d 2c 5a 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 61 7d 2c 67 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 6d 7d 2c 7a 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 6d 7d 7d 29 3b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==ty
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 65 72 22 2c 65 2e 4d 6f 62 69 6c 65 49 6f 73 52 65 6e 64 65 72 65 72 3d 22 6d 6f 62 69 6c 65 2d 69 6f 73 2d 72 65 6e 64 65 72 65 72 22 2c 65 2e 44 65 73 6b 74 6f 70 57 65 62 52 65 6e 64 65 72 65 72 3d 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 7d 28 6f 61 7c 7c 28 6f 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 72 74 3d 22 73 74 61 72 74 22 2c 65 2e 46 69 72 73 74 51 75 61 72 74 69 6c 65 3d 22 66 69 72 73 74 51 75 61 72 74 69 6c 65 22 2c 65 2e 4d 69 64 70 6f 69 6e 74 3d 22 6d 69 64 70 6f 69 6e 74 22 2c 65 2e 54 68 69 72 64 51 75 61 72 74 69 6c 65 3d 22 74 68 69 72 64 51 75 61 72 74 69 6c 65 22 2c 65 2e 43 6f 6d 70 6c 65 74 65 3d 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 4d 75 74 65 3d 22 6d 75 74 65 22 2c 65 Data Ascii: er",e.MobileIosRenderer="mobile-ios-renderer",e.DesktopWebRenderer="desktop-web-renderer"}(oa\|\|(oa={})),function(e){e.Start="start",e.FirstQuartile="firstQuartile",e.Midpoint="midpoint",e.ThirdQuartile="thirdQuartile",e.Complete="complete",e.Mute="mute",e
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 38 22 2c 22 29 22 3a 22 25 32 39 22 2c 22 7e 22 3a 22 25 37 45 22 2c 22 25 32 30 22 3a 22 2b 22 7d 2c 5f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 43 70 5b 65 5d 7d 2c 4e 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 70 28 62 70 28 65 29 2c 49 70 2c 5f 70 29 7d 2c 4d 70 3d 48 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 70 28 74 68 69 73 2c 7b 74 79 70 65 3a 75 70 2c 74 61 72 67 65 74 3a 63 70 28 65 29 2e 65 6e 74 72 69 65 73 2c 69 6e 64 65 78 3a 30 2c 6b 69 6e 64 3a 74 7d 29 7d 29 2c 61 70 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 70 28 74 68 69 73 29 2c 74 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 65 2e 69 6e 64 Data Ascii: "!":"%21","'":"%27","(":"%28",")":"%29","~":"%7E","%20":"+"},_p=function(e){return Cp[e]},Np=function(e){return Ep(bp(e),Ip,_p)},Mp=Hh((function(e,t){sp(this,{type:up,target:cp(e).entries,index:0,kind:t})}),ap,(function(){var e=fp(this),t=e.target,n=e.ind
2024-04-24 02:16:07 UTC	9101	IN	Data Raw: 29 2c 5a 70 28 78 76 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 48 6f 73 74 6e 61 6d 65 22 2c 22 73 65 74 48 6f 73 74 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 70 6f 72 74 22 2c 6b 76 28 22 67 65 74 50 6f 72 74 22 2c 22 73 65 74 50 6f 72 74 22 29 29 2c 5a 70 28 78 76 2c 22 70 61 74 68 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 50 61 74 68 6e 61 6d 65 22 2c 22 73 65 74 50 61 74 68 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 22 2c 22 73 65 74 53 65 61 72 63 68 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 50 61 72 61 6d 73 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 50 61 72 61 6d 73 22 29 29 2c 5a 70 28 78 76 2c 22 68 61 73 68 22 2c 6b 76 28 22 67 65 74 48 61 73 68 22 2c 22 Data Ascii: ),Zp(xv,"hostname",kv("getHostname","setHostname")),Zp(xv,"port",kv("getPort","setPort")),Zp(xv,"pathname",kv("getPathname","setPathname")),Zp(xv,"search",kv("getSearch","setSearch")),Zp(xv,"searchParams",kv("getSearchParams")),Zp(xv,"hash",kv("getHash","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	660	OUT	GET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 44642 Connection: close Date: Mon, 15 Apr 2024 16:51:31 GMT Last-Modified: Mon, 15 Apr 2024 16:22:24 GMT ETag: "0117ded66314d5d48929f64d97591068" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wQefFzpqOdSg-ihvU9kRFoawvA3D3VzLGbCq5NC_kYqi7sOpIjGhfA== Age: 725077
2024-04-24 02:16:07 UTC	15777	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 35 32 5d 2c 7b 38 39 33 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 2c 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 21 65 2e 6a 51 75 65 72 79 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 66 6e 2e 69 6e 69 74 28 65 2c 72 29 7d 3b 74 2e 69 73 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 74 2e 74 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 6e 3c 3d 38 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 6e 61 6d 65 22 3a 72 65 74 75 72 6e 22 66 69 6c 74 65 72 22 3b 63 61 73 65 22 65 78 74 72 61 63 74 22 3a 76 61 72 20 61 3d 72 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6d 61 74 63 68 28 2f 61 6c 70 68 61 5c 28 6f 70 61 63 69 74 79 3d 28 2e 2a 29 5c 29 2f 69 29 3b 72 65 74 75 72 6e 20 72 3d 61 3f 61 5b 31 5d 2f 31 30 30 3a 31 3b 63 61 73 65 22 69 6e 6a 65 63 74 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 2c 70 61 72 73 65 46 6c 6f 61 74 28 72 29 3e 3d 31 3f 22 22 3a 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 22 2b 70 61 72 73 65 49 6e 74 28 31 30 30 2a 70 61 72 73 65 46 6c 6f 61 74 28 72 29 2c 31 30 29 2b 22 29 22 7d 65 6c 73 65 20 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 Data Ascii: n<=8)switch(e){case"name":return"filter";case"extract":var a=r.toString().match(/alpha$opacity=(.)$/i);return r=a?a[1]/100:1;case"inject":return t.style.zoom=1,parseFloat(r)>=1?"":"alpha(opacity="+parseInt(100parseFloat(r),10)+")"}else switch(e){case"
2024-04-24 02:16:07 UTC	12481	IN	Data Raw: 52 29 52 3d 22 2e 2e 22 3b 65 6c 73 65 20 69 66 28 21 2f 5c 64 2f 2e 74 65 73 74 28 4f 29 29 62 72 65 61 6b 3b 71 2b 3d 4f 7d 66 6f 72 28 3b 2b 2b 43 3c 68 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 28 6a 3d 68 5b 43 5d 29 3d 3d 3d 4d 29 4d 3d 22 2e 2e 22 3b 65 6c 73 65 20 69 66 28 21 2f 5c 64 2f 2e 74 65 73 74 28 6a 29 29 62 72 65 61 6b 3b 4c 2b 3d 6a 7d 76 61 72 20 24 3d 79 2e 48 6f 6f 6b 73 2e 67 65 74 55 6e 69 74 28 78 2c 54 29 2c 42 3d 79 2e 48 6f 6f 6b 73 2e 67 65 74 55 6e 69 74 28 68 2c 43 29 3b 69 66 28 54 2b 3d 24 2e 6c 65 6e 67 74 68 2c 43 2b 3d 42 2e 6c 65 6e 67 74 68 2c 24 3d 3d 3d 42 29 71 3d 3d 3d 4c 3f 6c 2b 3d 71 2b 24 3a 28 6c 2b 3d 22 7b 22 2b 41 2e 6c 65 6e 67 74 68 2b 28 4e 3f 22 21 22 3a 22 22 29 2b 22 7d 22 2b 24 2c 41 2e 70 75 73 68 28 Data Ascii: R)R="..";else if(!/\d/.test(O))break;q+=O}for(;++C<h.length;){if((j=h[C])===M)M="..";else if(!/\d/.test(j))break;L+=j}var $=y.Hooks.getUnit(x,T),B=y.Hooks.getUnit(h,C);if(T+=$.length,C+=B.length,$===B)q===L?l+=q+$:(l+="{"+A.length+(N?"!":"")+"}"+$,A.push(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	660	OUT	GET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 71691 Connection: close Date: Wed, 17 Apr 2024 19:37:02 GMT Last-Modified: Wed, 17 Apr 2024 18:02:05 GMT ETag: "42eaceaa10ced1bc091c1d9097c4897f" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eCRJVTTZfJcb1x2E2WWrf_puJlrFarHw-Mc628b2XQORSaa6hnS0PA== Age: 542346
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 38 32 5d 2c 7b 37 36 36 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 65 3b 6e 3d 72 2e 6e 6d 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 2c 69 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6f 3d 22 5f 5f 6c 6f 64 61 73 68 5f 68 61 73 68 5f 75 6e 64 65 66 69 6e 65 64 5f 5f 22 2c 66 3d 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 2c 61 3d 31 36 2c 63 3d 33 32 2c 6c 3d 36 34 2c 73 3d 31 32 38 2c 68 3d 32 35 36 2c 70 3d 31 2f 30 2c 76 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 2c 5f 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 3a 42 6e 2e 63 61 6c 6c 28 74 2c 6e 29 7d 2c 4b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 7a 65 2b 3d 74 68 69 73 2e 68 61 73 28 6e 29 3f 30 3a 31 2c 72 5b 6e 5d 3d 7a 72 26 26 74 3d 3d 3d 75 3f 6f 3a 74 2c 74 68 69 73 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 5b 5d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 72 3d 65 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 21 28 Data Ascii: :Bn.call(t,n)},Kr.prototype.set=function(n,t){var r=this.__data__;return this.size+=this.has(n)?0:1,r[n]=zr&&t===u?o:t,this},Vr.prototype.clear=function(){this.__data__=[],this.size=0},Vr.prototype.delete=function(n){var t=this.__data__,r=ee(t,n);return!(
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 75 28 63 2c 61 2c 74 5b 34 5d 29 3a 61 2c 6e 5b 34 5d 3d 63 3f 6c 72 28 6e 5b 33 5d 2c 66 29 3a 74 5b 34 5d 7d 28 61 3d 74 5b 35 5d 29 26 26 28 63 3d 6e 5b 35 5d 2c 6e 5b 35 5d 3d 63 3f 52 75 28 63 2c 61 2c 74 5b 36 5d 29 3a 61 2c 6e 5b 36 5d 3d 63 3f 6c 72 28 6e 5b 35 5d 2c 66 29 3a 74 5b 36 5d 29 3b 28 61 3d 74 5b 37 5d 29 26 26 28 6e 5b 37 5d 3d 61 29 3b 65 26 73 26 26 28 6e 5b 38 5d 3d 6e 75 6c 6c 3d 3d 6e 5b 38 5d 3f 74 5b 38 5d 3a 77 72 28 6e 5b 38 5d 2c 74 5b 38 5d 29 29 3b 6e 75 6c 6c 3d 3d 6e 5b 39 5d 26 26 28 6e 5b 39 5d 3d 74 5b 39 5d 29 3b 6e 5b 30 5d 3d 74 5b 30 5d 2c 6e 5b 31 5d 3d 75 7d 28 78 2c 6d 29 2c 6e 3d 78 5b 30 5d 2c 74 3d 78 5b 31 5d 2c 65 3d 78 5b 32 5d 2c 6f 3d 78 5b 33 5d 2c 70 3d 78 5b 34 5d 2c 21 28 67 3d 78 5b 39 5d 3d 78 5b Data Ascii: u(c,a,t[4]):a,n[4]=c?lr(n[3],f):t[4]}(a=t[5])&&(c=n[5],n[5]=c?Ru(c,a,t[6]):a,n[6]=c?lr(n[5],f):t[6]);(a=t[7])&&(n[7]=a);e&s&&(n[8]=null==n[8]?t[8]:wr(n[8],t[8]));null==n[9]&&(n[9]=t[9]);n[0]=t[0],n[1]=u}(x,m),n=x[0],t=x[1],e=x[2],o=x[3],p=x[4],!(g=x[9]=x[
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 69 73 2c 75 3d 6a 65 28 74 2c 4c 66 28 74 29 29 29 3b 76 61 72 20 69 3d 21 28 72 66 28 72 29 26 26 22 63 68 61 69 6e 22 69 6e 20 72 29 7c 7c 21 21 72 2e 63 68 61 69 6e 2c 6f 3d 58 6f 28 6e 29 3b 72 65 74 75 72 6e 20 45 74 28 75 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 74 5b 72 5d 3b 6e 5b 72 5d 3d 65 2c 6f 26 26 28 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 63 68 61 69 6e 5f 5f 3b 69 66 28 69 7c 7c 74 29 7b 76 61 72 20 72 3d 6e 28 74 68 69 73 2e 5f 5f 77 72 61 70 70 65 64 5f 5f 29 2c 75 3d 72 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 3d 7a 75 28 74 68 69 73 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 28 7b 66 75 6e 63 3a 65 2c 61 72 Data Ascii: is,u=je(t,Lf(t)));var i=!(rf(r)&&"chain"in r)\|\|!!r.chain,o=Xo(n);return Et(u,(function(r){var e=t[r];n[r]=e,o&&(n.prototype[r]=function(){var t=this.__chain__;if(i\|\|t){var r=n(this.__wrapped__),u=r.__actions__=zu(this.__actions__);return u.push({func:e,ar
2024-04-24 02:16:08 UTC	3198	IN	Data Raw: 69 3d 76 72 28 74 29 3b 72 65 74 75 72 6e 20 78 75 28 65 2c 74 72 28 65 2c 69 29 2c 72 72 28 65 2c 69 29 2b 31 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 4d 72 2e 74 72 69 6d 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 28 6e 3d 6d 66 28 6e 29 29 26 26 28 72 7c 7c 74 3d 3d 3d 75 29 29 72 65 74 75 72 6e 20 6e 2e 73 6c 69 63 65 28 30 2c 5f 72 28 6e 29 2b 31 29 3b 69 66 28 21 6e 7c 7c 21 28 74 3d 6c 75 28 74 29 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 65 3d 76 72 28 6e 29 3b 72 65 74 75 72 6e 20 78 75 28 65 2c 30 2c 72 72 28 65 2c 76 72 28 74 29 29 2b 31 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 4d 72 2e 74 72 69 6d 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 28 6e 3d 6d 66 28 6e 29 29 26 26 28 72 7c 7c 74 3d 3d Data Ascii: i=vr(t);return xu(e,tr(e,i),rr(e,i)+1).join("")},Mr.trimEnd=function(n,t,r){if((n=mf(n))&&(r\|\|t===u))return n.slice(0,_r(n)+1);if(!n\|\|!(t=lu(t)))return n;var e=vr(n);return xu(e,0,rr(e,vr(t))+1).join("")},Mr.trimStart=function(n,t,r){if((n=mf(n))&&(r\|\|t==
2024-04-24 02:16:08 UTC	2957	IN	Data Raw: 72 2c 55 74 28 5b 6e 5d 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 26 26 68 3f 74 5b 30 5d 3a 74 7d 3b 6c 26 26 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 31 21 3d 63 2e 6c 65 6e 67 74 68 26 26 28 61 3d 6c 3d 21 31 29 3b 76 61 72 20 68 3d 74 68 69 73 2e 5f 5f 63 68 61 69 6e 5f 5f 2c 70 3d 21 21 74 68 69 73 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 2e 6c 65 6e 67 74 68 2c 76 3d 6f 26 26 21 68 2c 5f 3d 61 26 26 21 70 3b 69 66 28 21 6f 26 26 6c 29 7b 74 3d 5f 3f 74 3a 6e 65 77 20 5a 72 28 74 68 69 73 29 3b 76 61 72 20 67 3d 6e 2e 61 70 70 6c 79 28 74 2c 66 29 3b 72 65 74 75 72 6e 20 67 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 2e 70 75 73 68 28 7b 66 75 6e 63 3a 76 6f 2c 61 72 67 73 3a 5b 73 5d 2c 74 68 69 73 41 72 67 3a 75 7d 29 2c 6e 65 77 Data Ascii: r,Ut([n],f));return e&&h?t[0]:t};l&&r&&"function"==typeof c&&1!=c.length&&(a=l=!1);var h=this.__chain__,p=!!this.__actions__.length,v=o&&!h,_=a&&!p;if(!o&&l){t=_?t:new Zr(this);var g=n.apply(t,f);return g.__actions__.push({func:vo,args:[s],thisArg:u}),new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	151.101.1.229	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	568	OUT	GET /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:07 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79831 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.23.0 X-JSD-Version-Type: version ETag: W/"137d7-KpZaAxY2fq10BSqIt+3sXsUCrzY" Accept-Ranges: bytes Age: 123036 Date: Wed, 24 Apr 2024 02:16:07 GMT X-Served-By: cache-fra-eddf8230096-FRA, cache-lax-kwhp1940039-LAX X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 6b 69 70 70 65 64 20 6d 69 6e 69 66 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 73 20 61 70 70 65 61 72 73 20 74 6f 20 62 65 20 61 6c 72 65 61 64 79 20 6d 69 6e 69 66 69 65 64 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 40 73 6e 6f 77 70 6c 6f 77 2f 6a 61 76 61 73 63 72 69 70 74 2d 74 72 61 63 6b 65 72 40 33 2e 32 33 2e 30 2f 64 69 73 74 2f 73 70 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f Data Ascii: /** * Skipped minification because the original files appears to be already minified. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 2c 77 69 74 68 4a 73 6f 6e 50 72 6f 63 65 73 73 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 7d 2c 62 75 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 65 28 74 68 69 73 2c 6f 2c 69 29 2c 6e 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 72 29 7b 69 66 28 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 65 29 7b 69 66 28 72 3d 74 2e 61 64 64 2c 6e 29 7b 76 61 72 20 69 3d 30 2c 61 3d 30 2c 63 3d 5b 5d 3b 69 66 28 6e 29 7b 6e 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 29 3b 64 6f 7b 76 61 72 20 73 3d 6e Data Ascii: ,withJsonProcessor:function(n){e=n},build:function(){return null==e\|\|e(this,o,i),n}}}function o(e){return function(t,o,r){for(var i=function(n,o,r){if(n=JSON.stringify(n),e){if(r=t.add,n){var i=0,a=0,c=[];if(n){n=unescape(encodeURIComponent(n));do{var s=n
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 61 29 3a 6e 3d 6f 2c 6e 7d 2c 63 3d 76 6f 69 64 20 30 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 6f 5b 73 5d 3b 22 63 78 22 3d 3d 3d 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 3f 63 3d 61 28 63 2c 75 2e 6a 73 6f 6e 29 3a 69 28 75 2e 6a 73 6f 6e 2c 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 2c 75 2e 6b 65 79 49 66 4e 6f 74 45 6e 63 6f 64 65 64 29 7d 6f 2e 6c 65 6e 67 74 68 3d 30 2c 72 2e 6c 65 6e 67 74 68 26 26 28 63 3d 61 28 63 2c 6f 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 63 6f 6e 74 65 78 74 73 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 28 5b 5d 2c 72 2c 21 30 29 7d 29 2c 72 2e 6c 65 6e 67 Data Ascii: a):n=o,n},c=void 0,s=0;s<o.length;s++){var u=o[s];"cx"===u.keyIfEncoded?c=a(c,u.json):i(u.json,u.keyIfEncoded,u.keyIfNotEncoded)}o.length=0,r.length&&(c=a(c,o={schema:"iglu:com.snowplowanalytics.snowplow/contexts/jsonschema/1-0-0",data:n([],r,!0)}),r.leng
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 28 65 29 7b 65 3a 7b 69 66 28 67 28 65 29 29 7b 76 61 72 20 72 3d 65 5b 30 5d 2c 69 3d 21 31 3b 74 72 79 7b 69 3d 72 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 21 31 7d 69 66 28 21 30 3d 3d 3d 69 29 7b 65 3d 41 28 65 5b 31 5d 2c 6e 2c 74 2c 6f 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 68 28 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 30 2c 6f 3d 30 2c 72 3d 65 2e 61 63 63 65 70 74 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 65 2e 61 63 63 65 70 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 28 65 2c 6e 29 Data Ascii: (e){e:{if(g(e)){var r=e[0],i=!1;try{i=r({event:n.getPayload(),eventType:t,eventSchema:o})}catch(e){i=!1}if(!0===i){e=A(e[1],n,t,o);break e}}else if(h(e)&&function(e,n){var t=0,o=0,r=e.accept;return Array.isArray(r)?e.accept.some((function(e){return w(e,n)
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 29 3f 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 29 7d 29 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 21 21 28 72 28 65 29 26 26 22 73 63 68 65 6d 61 22 69 6e 20 65 26 26 22 64 61 74 61 22 69 6e 20 65 29 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 63 68 65 6d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: eturn Array.isArray(e)&&e.every((function(e){return"string"==typeof e}))}function f(e){return d(e)?e.every((function(e){return l(e)})):"string"==typeof e&&l(e)}function m(e){return!!(r(e)&&"schema"in e&&"data"in e)&&("string"==typeof e.schema&&"object"==t
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 6f 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 65 3d 62 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3a 69 66 28 6d 28 65 29 29 65 3d 5b 65 5d 3b 65 6c 73 65 7b 69 66 28 70 28 65 29 29 7b 6e 3a 7b 76 61 72 20 72 3d 76 6f 69 64 20 30 3b 74 72 79 7b 69 66 28 72 3d 65 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 65 76 65 72 79 28 6d 29 7c 7c 6d 28 72 29 29 7b 76 61 72 20 69 3d 72 3b 62 72 65 61 6b 20 6e 7d 69 3d 76 6f 69 64 20 30 3b Data Ascii: return Array.isArray(e)?e:[e]}function A(e,n,t,o){var r;return e=b(e).map((function(e){e:if(m(e))e=[e];else{if(p(e)){n:{var r=void 0;try{if(r=e({event:n.getPayload(),eventType:t,eventSchema:o}),Array.isArray(r)&&r.every(m)\|\|m(r)){var i=r;break n}i=void 0;
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 7d 3a 76 6f 69 64 20 30 29 26 26 65 2e 61 64 64 4a 73 6f 6e 28 22 63 78 22 2c 22 63 6f 22 2c 6e 29 2c 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 26 26 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 28 65 29 7d 63 61 74 63 68 28 65 29 7b 5a 65 2e 65 72 72 6f 72 28 22 50 6c 75 67 69 6e 20 62 65 66 6f 72 65 54 72 61 63 6b 22 2c 65 29 7d 7d 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 28 65 29 3b 76 61 72 20 69 3d 65 2e 62 75 69 6c 64 28 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 65 2e 61 66 74 65 72 54 72 61 63 6b 26 26 65 Data Ascii: jsonschema/1-0-0",data:n}:void 0)&&e.addJson("cx","co",n),r.forEach((function(n){try{n.beforeTrack&&n.beforeTrack(e)}catch(e){Ze.error("Plugin beforeTrack",e)}})),"function"==typeof c&&c(e);var i=e.build();return r.forEach((function(e){try{e.afterTrack&&e
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 3d 65 2e 6c 6f 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 63 61 6c 6c 28 65 2c 5a 65 29 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 61 63 74 69 76 61 74 65 43 6f 72 65 50 6c 75 67 69 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 61 6c 6c 28 65 2c 76 29 7d 29 29 2c 76 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 6e 3d 65 2e 65 76 65 6e 74 3b 72 65 74 75 72 6e 20 65 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 75 6e 73 74 72 75 63 74 5f 65 76 65 6e 74 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 7b 73 63 68 65 6d 61 3a 65 3d 6e 2e 73 63 68 65 6d 61 2c 64 61 74 61 3a 6e 2e 64 61 74 61 7d 7d 2c 28 6e 3d Data Ascii: =e.logger)\|\|void 0===n\|\|n.call(e,Ze),null===(t=e.activateCorePlugin)\|\|void 0===t\|\|t.call(e,v)})),v}function T(e){var n=e.event;return e={schema:"iglu:com.snowplowanalytics.snowplow/unstruct_event/jsonschema/1-0-0",data:{schema:e=n.schema,data:n.data}},(n=
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 22 74 69 74 6c 65 22 29 3b 6e 26 26 6e 75 6c 6c 21 3d 6e 5b 30 5d 26 26 28 65 3d 6e 5b 30 5d 2e 74 65 78 74 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 6e 3d 2f 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 66 74 70 29 3a 29 5c 2f 2a 28 3f 3a 5b 5e 40 5d 2b 40 29 3f 28 5b 5e 3a 2f 23 5d 2b 29 2f 2e 65 78 65 63 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 31 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 22 2e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 2d 2d 6e 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 30 2c 6e 29 29 2c 22 2a 2e 22 3d 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 32 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 Data Ascii: ByTagName("title");n&&null!=n[0]&&(e=n[0].text)}return e}function D(e){var n=/^(?:(?:https?\|ftp):)\/(?:[^@]+@)?([^:/#]+)/.exec(e);return n?n[1]:e}function N(e){var n=e.length;return"."===e.charAt(--n)&&(e=e.slice(0,n)),"."===e.slice(0,2)&&(e=e.slice(1))
2024-04-24 02:16:07 UTC	1378	IN	Data Raw: 76 61 72 20 6f 3d 30 3b 66 6f 72 28 65 3d 47 28 65 29 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 74 5b 65 5b 6f 5d 5d 29 7b 6f 3d 21 30 3b 62 72 65 61 6b 20 65 7d 6f 3d 21 31 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 6e 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 6c 6f 77 6c 69 73 74 22 29 2c 74 3d 4a 28 65 29 3b 72 65 74 75 72 6e 20 71 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 20 69 6e 20 Data Ascii: var o=0;for(e=G(e);o<e.length;o++)if(t[e[o]]){o=!0;break e}o=!1}return o===n}))}function H(e){if(null==e\|\|"object"!=typeof e\|\|Array.isArray(e))return function(){return!0};var n=e.hasOwnProperty("allowlist"),t=J(e);return q(e,(function(e){return e.name in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	637	OUT	GET /gtm.js?id=GTM-NS54WBW HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:07 UTC	536	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 474109 Connection: close cache-control: private, max-age=900 Date: Wed, 24 Apr 2024 02:16:07 GMT expires: Wed, 24 Apr 2024 02:31:03 GMT last-modified: Wed, 24 Apr 2024 00:56:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5b04a01f48583fc1372237be2a8b3964.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: GZ7fVpcMh6h5zeOQHrIUh3G_iNY5EPhC1AuOrutOl31FD8-fi3wJWQ==
2024-04-24 02:16:07 UTC	3793	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 67 29 7b 77 5b 67 5d 3d 77 5b 67 5d 7c 7c 7b 7d 3b 0a 20 77 5b 67 5d 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 73 29 3b 7d 3b 7d 29 28 77 69 6e 64 6f 77 2c 27 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 27 29 3b 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 32 32 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(w,g){w[g]=w[g]\|\|{}; w[g].e=function(s){return eval(s);};})(window,'google_tag_manager'); (function(){var data = {"resource": { "version":"122", "macros":[{"function":"__e"},{"fu
2024-04-24 02:16:07 UTC	16384	IN	Data Raw: 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6e 61 76 69 67 61 74 6f 72 5f 6c 61 6e 67 75 61 67 65 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 36 5d 2c 38 2c 31 36 5d 2c 22 2c 65 76 65 6e 74 5f 69 64 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 35 5d 2c 38 2c 31 36 5d 2c 22 2c 61 63 74 69 6f 6e 5f 73 6f 75 72 63 65 3a 5c 22 77 65 62 5c 22 2c 62 69 6c 6c 69 6e 67 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 37 5d 2c 38 2c 31 36 5d 2c 22 2c 74 69 65 72 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 38 5d 2c 38 Data Ascii: ","vtp_javascript":["template","(function(){return JSON.stringify({navigator_language:",["escape",["macro",26],8,16],",event_id:",["escape",["macro",25],8,16],",action_source:\"web\",billing:",["escape",["macro",27],8,16],",tier:",["escape",["macro",28],8
2024-04-24 02:16:07 UTC	4096	IN	Data Raw: 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 5c 22 3f 5c 22 29 5b 31 5d 3b 72 65 74 75 72 6e 20 61 7d 29 28 29 3b 22 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 63 6f 6e 76 65 72 74 5f 63 61 73 65 5f 74 6f 22 3a 31 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 51 55 45 52 59 22 2c 22 76 74 70 5f 71 75 65 72 79 4b 65 79 22 3a 22 73 6f 75 72 63 65 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4d 75 6c 74 69 51 75 65 72 79 4b 65 79 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 49 67 6e 6f 72 65 45 6d 70 74 79 51 75 65 72 79 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d Data Ascii: ,"vtp_javascript":["template","(function(){var a=location.href.split(\"?\")[1];return a})();"]},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"source","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false}
2024-04-24 02:16:07 UTC	12288	IN	Data Raw: 22 2c 22 69 6e 64 65 78 22 2c 22 31 31 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 32 31 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 32 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 32 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 33 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 32 33 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 34 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 35 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 32 34 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 36 22 2c 22 64 69 6d 65 6e 73 Data Ascii: ","index","11","dimension",["macro",121]],["map","index","12","dimension",["macro",122]],["map","index","13","dimension",["macro",123]],["map","index","14","dimension",["macro",1]],["map","index","15","dimension",["macro",124]],["map","index","16","dimens
2024-04-24 02:16:08 UTC	4096	IN	Data Raw: 6f 72 67 5c 2f 65 6e 2d 55 53 5c 2f 66 69 72 65 66 6f 78 5c 2f 61 64 64 6f 6e 5c 2f 77 65 74 72 61 6e 73 66 65 72 5c 2f 22 2c 22 76 61 6c 75 65 22 2c 22 46 69 72 65 66 6f 78 20 41 70 70 22 5d 2c 5b 22 6d 61 70 22 2c 22 6b 65 79 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 65 2e 74 6c 5c 2f 69 6f 73 61 70 70 22 2c 22 76 61 6c 75 65 22 2c 22 69 4f 53 20 41 70 70 22 5d 2c 5b 22 6d 61 70 22 2c 22 6b 65 79 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 68 72 6f 6d 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 77 65 62 73 74 6f 72 65 5c 2f 64 65 74 61 69 6c 5c 2f 77 65 74 72 61 6e 73 66 65 72 5c 2f 62 6f 6e 69 6b 62 6c 66 6a 67 6e 6a 6b 67 67 62 6f 66 6f 61 63 63 6a 66 62 6a 69 66 61 67 65 61 22 2c 22 76 61 6c 75 65 22 2c 22 43 68 72 6f 6d 65 20 41 70 70 22 5d 2c 5b 22 6d Data Ascii: org\/en-US\/firefox\/addon\/wetransfer\/","value","Firefox App"],["map","key","https:\/\/we.tl\/iosapp","value","iOS App"],["map","key","https:\/\/chrome.google.com\/webstore\/detail\/wetransfer\/bonikblfjgnjkggbofoaccjfbjifagea","value","Chrome App"],["m
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 67 72 61 6e 74 65 64 22 5d 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 78 70 5f 76 61 72 69 61 6e 74 5f 73 74 72 69 6e 67 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6b 22 2c 22 76 74 70 5f 64 65 63 6f 64 65 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 77 74 5f 63 62 61 6e 6e 65 72 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 76 74 70 5f 73 74 72 69 70 57 77 77 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 48 4f 53 54 22 2c 22 76 74 70 5f 65 6e 61 62 6c Data Ascii: granted"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"exp_variant_string"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"wt_cbanner"},{"function":"__u","vtp_stripWww":true,"vtp_component":"HOST","vtp_enabl
2024-04-24 02:16:08 UTC	1514	IN	Data Raw: 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 61 67 5f 69 64 22 3a 32 32 32 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 76 74 5f 39 30 33 36 34 36 36 30 5f 32 31 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 75 72 72 65 6e 63 79 22 3a 5b 22 6d 61 63 72 6f 22 2c 36 30 5d 2c 22 76 74 70 5f 69 64 22 3a 5b 22 6d 61 63 72 6f 22 2c 37 36 5d 2c 22 76 74 70 5f 65 76 65 6e 74 54 79 70 65 22 3a 22 50 75 72 63 68 61 73 65 22 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 Data Ascii: ,"vtp_advancedMatching":false,"tag_id":222},{"function":"__cvt_90364660_211","metadata":["map"],"once_per_event":true,"vtp_enableFirstPartyCookies":true,"vtp_currency":["macro",60],"vtp_id":["macro",76],"vtp_eventType":"Purchase","vtp_advancedMatching":fa
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 2c 22 76 74 70 5f 69 74 65 6d 43 6f 75 6e 74 22 3a 22 31 22 2c 22 74 61 67 5f 69 64 22 3a 32 33 34 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 67 61 61 77 65 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 73 65 6e 64 45 63 6f 6d 6d 65 72 63 65 44 61 74 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 76 65 6e 74 53 65 74 74 69 6e 67 73 54 61 62 6c 65 22 3a 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 65 74 65 72 22 2c 22 68 69 74 5f 74 69 6d 65 73 74 61 6d 70 5f 6c 6f 63 61 6c 22 2c 22 70 61 72 61 6d 65 74 65 72 56 61 6c 75 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 39 5d 5d 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 65 74 65 72 22 2c 22 68 69 Data Ascii: ,"vtp_itemCount":"1","tag_id":234},{"function":"__gaawe","metadata":["map"],"once_per_event":true,"vtp_sendEcommerceData":false,"vtp_eventSettingsTable":["list",["map","parameter","hit_timestamp_local","parameterValue",["macro",19]],["map","parameter","hi
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 76 74 70 5f 65 6e 61 62 6c 65 4c 69 6e 6b 49 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 45 63 6f 6d 6d 65 72 63 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 52 65 63 61 70 74 63 68 61 4f 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 61 52 6c 73 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 73 65 49 6e 74 65 72 6e 61 6c 56 65 72 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 65 62 61 73 65 43 61 6d 70 61 69 67 6e 44 61 74 61 22 3a 74 72 75 65 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 49 73 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 47 41 34 53 63 68 65 6d 61 22 3a 74 72 75 65 2c 22 74 61 67 5f 69 64 22 3a 34 32 32 7d 2c Data Ascii: vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enableGA4Schema":true,"tag_id":422},
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 6e 22 3a 22 64 6f 75 62 74 20 63 6c 69 63 6b 22 2c 22 76 74 70 5f 65 76 65 6e 74 4c 61 62 65 6c 22 3a 22 56 69 64 65 6f 20 69 6e 74 65 72 61 63 74 69 6f 6e 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 45 63 6f 6d 6d 65 72 63 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 52 65 63 61 70 74 63 68 61 4f 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 61 52 6c 73 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 73 65 49 6e 74 65 72 6e 61 6c 56 65 72 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 65 62 61 73 65 43 61 6d 70 61 69 67 6e 44 61 74 61 22 3a 74 72 75 65 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 49 73 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 Data Ascii: n":"doubt click","vtp_eventLabel":"Video interaction","vtp_enableEcommerce":false,"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	23.40.26.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 02:16:08 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2578) X-CID: 11 Cache-Control: public, max-age=17281 Date: Wed, 24 Apr 2024 02:16:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 02:16:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49761	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	660	OUT	GET /_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:08 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 55308 Connection: close Date: Tue, 16 Apr 2024 14:10:17 GMT Last-Modified: Tue, 16 Apr 2024 13:36:38 GMT ETag: "1c0b4e457c62548d0e46c380bed9cb82" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: GpoULQcVYioIJa8vuI1ixs3o5U0_NNwjZOC_EqT-vtgFHc_nsq8MEQ== Age: 648352
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 33 36 5d 2c 7b 35 33 33 30 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 74 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 37 37 39 35 29 2c 69 3d 6e 28 32 33 31 39 36 29 2c 72 3d 6e 2e 6e 28 69 29 2c 73 3d 6e 28 38 35 31 39 34 29 2c 61 3d 6e 28 34 32 30 35 31 29 2c 75 3d 6e 2e 6e 28 61 29 2c 70 3d 6e 28 35 38 31 31 37 29 2c 63 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 65 2e 64 65 76 69 63 65 49 64 2c 6e 3d 65 2e 75 73 65 72 49 64 2c 6f 3d 65 2e 6f 70 74 4f 75 74 2c 69 3d 65 2e 73 65 73 73 69 6f 6e 49 64 2c 72 3d 65 2e 6c 61 73 74 45 76 65 6e 74 54 69 6d 65 2c 73 3d 65 2e 65 76 65 6e 74 49 64 2c 61 3d 65 2e 69 64 65 6e 74 69 66 79 49 64 2c 75 3d 65 2e 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 3b 69 66 28 74 68 69 73 2e 73 74 6f 72 61 67 65 21 3d 3d 42 29 7b 76 61 72 20 70 3d 5b 74 2c 64 65 2e 65 6e 63 6f 64 65 28 6e 7c 7c 22 22 29 2c 6f 3f 22 31 22 3a 22 22 2c 69 3f 69 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 72 3f 72 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 73 3f 73 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 61 3f 61 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 Data Ascii: e){var t=e.deviceId,n=e.userId,o=e.optOut,i=e.sessionId,r=e.lastEventTime,s=e.eventId,a=e.identifyId,u=e.sequenceNumber;if(this.storage!==B){var p=[t,de.encode(n\|\|""),o?"1":"",i?i.toString(32):"0",r?r.toString(32):"0",s?s.toString(32):"0",a?a.toString(32)
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6f 6e 4e 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 73 73 69 6f 6e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 45 76 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 2b 2b 2c 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 49 64 65 6e 74 69 66 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ewSessionStart=function(e){this._onNewSessionStartCallbacks.push(e)},St.prototype.getSessionId=function(){return this._sessionId},St.prototype.nextEventId=function(){return this._eventId++,this._eventId},St.prototype.nextIdentifyId=function(){return this.
2024-04-24 02:16:08 UTC	6156	IN	Data Raw: 31 33 3d 3d 3d 65 26 26 28 31 3d 3d 3d 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 26 26 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 65 2c 6e 29 2c 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 3d 4d 61 74 68 2e 63 65 69 6c 28 74 2f 32 29 2c 70 2e 73 65 6e 64 45 76 65 6e 74 73 28 29 29 29 7d 63 61 74 63 68 28 46 74 29 7b 7d 7d 29 29 7d 63 61 74 63 68 28 46 74 29 7b 76 61 72 20 63 3d 22 52 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 3b 4e 65 2e 65 72 72 6f 72 28 63 29 2c 70 2e 5f 6c 6f 67 45 72 72 6f 72 73 4f 6e 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 29 2c 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 2c 7b 72 65 61 73 6f 6e 3a 46 74 2e 6d Data Ascii: 13===e&&(1===p.options.uploadBatchSize&&p.removeEvents(o,i,e,n),p.options.uploadBatchSize=Math.ceil(t/2),p.sendEvents()))}catch(Ft){}}))}catch(Ft){var c="Request failed to send";Ne.error(c),p._logErrorsOnEvents(o,i,0,c),p.removeEvents(o,i,0,c,{reason:Ft.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	656	OUT	GET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:08 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 181528 Connection: close Date: Sun, 14 Apr 2024 16:28:09 GMT Last-Modified: Fri, 12 Apr 2024 16:56:55 GMT ETag: "30c77f1c465ffebc4a34178e9e87e6b9" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jtz25pyY2cXLFh4mSUB7C6ug14V7m2Fl-g84Es5Beyq8k0x8LwsZBQ== Age: 812880
2024-04-24 02:16:08 UTC	15776	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 36 30 5d 2c 7b 32 30 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 61 7d 7d 29 3b 76 61 72 20 72 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++
2024-04-24 02:16:08 UTC	214	IN	Data Raw: 70 6c 69 6e 67 2d 70 72 69 6f 72 69 74 79 22 3a 6e 3f 22 31 22 3a 22 30 22 2c 22 78 2d 64 61 74 61 64 6f 67 2d 74 72 61 63 65 2d 69 64 22 3a 74 2e 74 6f 44 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 72 61 63 65 63 6f 6e 74 65 78 74 22 3a 76 28 6f 2c 7b 74 72 61 63 65 70 61 72 65 6e 74 3a 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 65 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 2d Data Ascii: pling-priority":n?"1":"0","x-datadog-trace-id":t.toDecimalString()});break;case"tracecontext":v(o,{traceparent:"00-0000000000000000".concat(t.toPaddedHexadecimalString(),"-").concat(e.toPaddedHexadecimalString(),"-
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 30 22 29 2e 63 6f 6e 63 61 74 28 6e 3f 22 31 22 3a 22 30 22 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 33 22 3a 76 28 6f 2c 7b 62 33 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 65 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6e 3f 22 31 22 3a 22 30 22 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 33 6d 75 6c 74 69 22 3a 76 28 6f 2c 7b 22 58 2d 42 33 2d 54 72 61 63 65 49 64 22 3a 74 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 58 2d 42 33 2d 53 70 61 6e 49 64 22 3a 65 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 Data Ascii: 0").concat(n?"1":"0")});break;case"b3":v(o,{b3:"".concat(t.toPaddedHexadecimalString(),"-").concat(e.toPaddedHexadecimalString(),"-").concat(n?"1":"0")});break;case"b3multi":v(o,{"X-B3-TraceId":t.toPaddedHexadecimalString(),"X-B3-SpanId":e.toPaddedHexadec
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 6e 21 31 3b 21 31 3d 3d 3d 61 26 26 6f 2e 77 61 72 6e 28 22 43 61 6e 27 74 20 64 69 73 6d 69 73 73 20 76 69 65 77 20 65 76 65 6e 74 73 20 75 73 69 6e 67 20 62 65 66 6f 72 65 53 65 6e 64 21 22 29 7d 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 72 5b 74 2e 74 79 70 65 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 73 4c 69 6d 69 74 52 65 61 63 68 65 64 28 29 29 7d 28 78 2c 74 2e 62 65 66 6f 72 65 53 65 6e 64 2c 67 2c 6c 29 26 26 28 49 28 78 2e 63 6f 6e 74 65 78 74 29 26 26 64 65 6c 65 74 65 20 78 2e 63 6f 6e 74 65 78 74 2c 65 2e 6e 6f 74 69 66 79 28 31 31 2c 78 29 29 7d 7d 29 29 7d 76 61 72 20 61 6e 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 26 26 75 6e Data Ascii: n!1;!1===a&&o.warn("Can't dismiss view events using beforeSend!")}return!(null===(i=r[t.type])\|\|void 0===i?void 0:i.isLimitReached())}(x,t.beforeSend,g,l)&&(I(x.context)&&delete x.context,e.notify(11,x))}}))}var an=[];function sn(){document.hasFocus()&&un
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 76 65 6e 74 7d 29 29 29 29 3a 28 65 2e 64 69 73 63 61 72 64 28 29 2c 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 76 61 6c 69 64 61 74 65 28 29 7d 29 29 29 7d 28 74 2c 65 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 26 26 72 2e 73 74 6f 70 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 74 2c 65 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 61 3d 79 28 29 2c 73 3d 51 28 29 2c 75 3d 65 2e 61 64 64 28 61 2c 73 2e 72 65 6c 61 74 69 76 65 29 2c 63 3d 5f 6e 28 7b 6c 69 66 65 43 79 63 6c 65 3a 74 2c 69 73 43 68 69 6c 64 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 2e 61 63 74 69 6f 6e 26 26 28 41 72 72 Data Ascii: t){return t.event})))):(e.discard(),t.forEach((function(t){return t.validate()})))}(t,e)}))}}function u(){r&&r.stop()}}function dr(t,e,n,r,o){var i,a=y(),s=Q(),u=e.add(a,s.relative),c=_n({lifeCycle:t,isChildEvent:function(t){return void 0!==t.action&&(Arr
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 66 79 28 29 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 63 72 65 61 74 65 64 7c 7c 59 28 29 2d 4e 75 6d 62 65 72 28 74 2e 63 72 65 61 74 65 64 29 3c 68 6e 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 65 78 70 69 72 65 7c 7c 59 28 29 3c 4e 75 6d 62 65 72 28 74 2e 65 78 70 69 72 65 29 29 7d 72 65 74 75 72 6e 7b 65 78 70 61 6e 64 4f 72 52 65 6e 65 77 53 65 73 73 69 6f 6e 3a 67 28 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3b 4a 72 28 7b 6f 70 74 69 6f 6e 73 3a 74 2c 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 73 28 74 29 3b 72 65 74 75 72 6e 20 Data Ascii: fy())),t}function u(){return void 0!==a[e]}function c(t){return(void 0===t.created\|\|Y()-Number(t.created)<hn)&&(void 0===t.expire\|\|Y()<Number(t.expire))}return{expandOrRenewSession:g(l((function(){var o;Jr({options:t,process:function(t){var r=s(t);return
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 20 41 69 28 74 2c 65 2c 6e 2c 72 29 7b 69 66 28 65 3d 3d 3d 69 69 2e 48 49 44 44 45 4e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 29 3b 69 66 28 65 3d 3d 3d 69 69 2e 4d 41 53 4b 26 26 6e 21 3d 3d 61 69 26 26 21 59 6e 2e 69 6e 63 6c 75 64 65 73 28 6e 29 26 26 6e 21 3d 3d 72 2e 61 63 74 69 6f 6e 4e 61 6d 65 41 74 74 72 69 62 75 74 65 29 7b 76 61 72 20 69 3d 74 2e 74 61 67 4e 61 6d 65 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 61 6c 74 22 3a 63 61 73 65 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 72 65 74 75 72 6e 20 75 69 7d 69 66 28 28 22 49 4d 47 22 3d 3d 3d 69 7c 7c 22 53 4f 55 52 43 45 22 3d 3d 3d 69 29 26 26 28 22 73 72 63 22 3d 3d 3d 6e 7c 7c 22 73 72 Data Ascii: Ai(t,e,n,r){if(e===ii.HIDDEN)return null;var o=t.getAttribute(n);if(e===ii.MASK&&n!==ai&&!Yn.includes(n)&&n!==r.actionNameAttribute){var i=t.tagName;switch(n){case"title":case"alt":case"placeholder":return ui}if(("IMG"===i\|\|"SOURCE"===i)&&("src"===n\|\|"sr
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 20 74 28 6e 29 7d 29 29 2c 64 61 3d 7b 73 74 61 74 75 73 3a 33 2c 77 6f 72 6b 65 72 3a 6e 7d 29 29 7d 29 29 29 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 61 63 74 69 6f 6e 3a 22 69 6e 69 74 22 7d 29 7d 63 61 74 63 68 28 6e 29 7b 68 61 28 6e 29 7d 7d 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 64 61 2e 63 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 28 64 61 2e 77 6f 72 6b 65 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 74 29 7b 31 3d 3d 3d 64 61 2e 73 74 61 74 75 73 3f 28 6f 2e 65 72 72 6f 72 28 22 53 65 73 73 69 6f 6e 20 52 65 70 6c 61 79 20 72 65 63 6f 72 64 69 6e 67 20 66 61 69 6c 65 64 20 74 6f 20 73 74 61 72 74 3a 20 61 6e 20 65 72 72 6f Data Ascii: t(n)})),da={status:3,worker:n}))}))),e.postMessage({action:"init"})}catch(n){ha(n)}}(e);break;case 1:da.callbacks.push(t);break;case 2:t();break;case 3:t(da.worker)}}function ha(t){1===da.status?(o.error("Session Replay recording failed to start: an erro
2024-04-24 02:16:08 UTC	15605	IN	Data Raw: 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6e 5b 72 5d 3b 22 20 22 3d 3d 3d 6f 2e 63 68 61 72 41 74 28 30 29 3b 29 6f 3d 6f 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 6f 2e 6c 65 6e 67 74 68 29 3b 69 66 28 30 3d 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 65 29 29 72 65 74 75 72 6e 20 6f 2e 73 75 62 73 74 72 69 6e 67 28 65 2e 6c 65 6e 67 74 68 2c 6f 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 67 3d 7b 6e 61 6d 65 3a 22 63 6f 6f 6b 69 65 22 2c 6c 6f 6f 6b 75 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 6c 6f 6f 6b 75 70 43 6f 6f 6b 69 65 26 26 Data Ascii: concat(t,"="),n=document.cookie.split(";"),r=0;r<n.length;r++){for(var o=n[r];" "===o.charAt(0);)o=o.substring(1,o.length);if(0===o.indexOf(e))return o.substring(e.length,o.length)}return null},g={name:"cookie",lookup:function(t){var e;if(t.lookupCookie&&
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 6f 6e 73 2e 66 61 6c 6c 62 61 63 6b 4c 6e 67 2c 65 2e 6c 6e 67 7c 7c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 29 3b 69 66 28 22 66 61 6c 6c 62 61 63 6b 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 61 76 65 4d 69 73 73 69 6e 67 54 6f 26 26 6e 26 26 6e 5b 30 5d 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 2e 70 75 73 68 28 6e 5b 65 5d 29 3b 65 6c 73 65 22 61 6c 6c 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 61 76 65 4d 69 73 73 69 6e 67 54 6f 3f 74 3d 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 55 74 69 6c 73 2e 74 6f 52 65 73 6f 6c 76 65 48 69 65 72 61 72 63 68 79 28 65 2e 6c 6e 67 7c 7c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 29 3a 74 2e 70 75 73 68 28 65 2e 6c 6e 67 7c 7c 74 68 69 73 2e 6c 61 6e 67 75 Data Ascii: ons.fallbackLng,e.lng\|\|this.language);if("fallback"===this.options.saveMissingTo&&n&&n[0])for(let e=0;e<n.length;e++)t.push(n[e]);else"all"===this.options.saveMissingTo?t=this.languageUtils.toResolveHierarchy(e.lng\|\|this.language):t.push(e.lng\|\|this.langu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	656	OUT	GET /_next/static/chunks/9216.2fed4395c6aaaa86.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:08 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1056103 Connection: close Date: Mon, 22 Apr 2024 10:04:00 GMT Last-Modified: Mon, 22 Apr 2024 08:43:48 GMT ETag: "12e84f18d00fcbab4bbb6e73a50db8e6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pK1EoJnfW1DAYbLz99xPRgNASrZcEs3kygfPQ0CoCAIg59O1AsszYg== Age: 144729
2024-04-24 02:16:08 UTC	15775	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 36 5d 2c 7b 39 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 2c 6f 3d 72 28 33 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 61 3d 72 28 31 35 33 32 37 29 2c 73 3d 72 28 39 34 30 39 37 29 2c 75 3d 72 28 38 34 31 30 39 29 2c 63 3d 72 28 36 37 39 38 35 29 2c 6c 3d 72 28 37 37 38 37 34 29 2c 66 3d 72 28 38 32 36 34 38 29 2c 64 3d 72 28 36 30 36 34 34 29 2c 70 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 22 2b 61 29 3b 72 2e 70 75 73 68 28 6e 29 2c 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 72 29 29 7b 76 61 72 20 73 2c 75 3d 61 3f 61 2b 22 2e 22 2b 6e 3a 6e 3b 69 66 28 72 26 26 21 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 72 29 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 7b 7d 22 29 29 72 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 3b 65 6c 73 65 20 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 5b 5d 22 29 26 26 28 73 3d 6f 2e 74 6f 41 72 72 61 79 28 72 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 Data Ascii: "+a);r.push(n),o.forEach(n,(function(r,n){if(!o.isUndefined(r)){var s,u=a?a+"."+n:n;if(r&&!a&&"object"===typeof r)if(o.endsWith(n,"{}"))r=JSON.stringify(r);else if(o.endsWith(n,"[]")&&(s=o.toArray(r)))return void s.forEach((function(e){!o.isUndefined(e)&&
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 55 29 2e 65 78 65 63 28 74 29 3b 69 66 28 72 29 7b 76 61 72 20 6e 3d 4e 75 6d 62 65 72 28 72 5b 31 5d 29 2c 6f 3d 4e 75 6d 62 65 72 28 72 5b 32 5d 29 3b 69 66 28 21 69 73 4e 61 4e 28 6e 29 26 26 21 69 73 4e 61 4e 28 6f 29 29 72 65 74 75 72 6e 20 6e 65 77 20 65 28 6e 2c 6f 2c 4e 75 6d 62 65 72 28 72 5b 34 5d 29 7c 7c 30 2c 72 5b 35 5d 7c 7c 76 6f 69 64 20 30 29 7d 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 61 72 65 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 6a 6f 72 3e 65 2e 6d 61 6a 6f 72 3f 31 3a 74 68 69 73 2e 6d 61 6a 6f 72 3c 65 2e 6d 61 6a 6f 72 3f 2d 31 3a 74 68 69 73 2e 6d 69 6e 6f 72 3e 65 2e 6d 69 6e 6f 72 3f 31 3a 74 68 69 73 2e Data Ascii: t){var r=new RegExp(U).exec(t);if(r){var n=Number(r[1]),o=Number(r[2]);if(!isNaN(n)&&!isNaN(o))return new e(n,o,Number(r[4])\|\|0,r[5]\|\|void 0)}}},e.prototype.compareTo=function(e){return this.major>e.major?1:this.major<e.major?-1:this.minor>e.minor?1:this.
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 79 3a 6e 7d 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6f 3d 61 2e 73 65 6e 74 28 29 2c 69 3d 7b 73 74 61 74 75 73 3a 6f 2e 73 74 61 74 75 73 7d 2c 5b 34 2c 6f 2e 74 65 78 74 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 69 2e 62 6f 64 79 3d 61 2e 73 65 6e 74 28 29 2c 5b 32 2c 69 5d 7d 7d 29 29 7d 29 29 2c 6f 29 7d 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 3d 22 69 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 22 7d 28 6d 65 7c 7c 28 6d 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 73 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 Data Ascii: y:n})];case 1:return o=a.sent(),i={status:o.status},[4,o.text()];case 2:return i.body=a.sent(),[2,i]}}))})),o)}};!function(e){e.LocalStorage="localStorage",e.InitialVariants="initialVariants"}(me\|\|(me={})),function(e){e.LocalStorage="storage",e.InitialVar
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 31 2c 74 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 2e 73 65 6e 74 28 29 2c 5b 32 5d 7d 7d 29 29 7d 29 29 7d 29 29 2c 5b 32 5d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 52 65 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 74 72 69 65 73 42 61 63 6b 6f 66 66 26 26 74 68 69 73 2e 72 65 74 72 69 65 73 42 61 63 6b 6f 66 66 2e 63 61 6e 63 65 6c 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 75 73 65 72 50 72 6f 76 69 64 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 55 73 65 72 28 29 2c 6f 3d 66 65 28 66 65 28 7b 7d Data Ascii: 1,t)];case 1:return r.sent(),[2]}}))}))})),[2]}))}))},e.prototype.stopRetries=function(){this.retriesBackoff&&this.retriesBackoff.cancel()},e.prototype.addContext=function(e){var t,r,n=null===(t=this.userProvider)\|\|void 0===t?void 0:t.getUser(),o=fe(fe({}
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 5d 5d 2c 6f 73 3a 5b 5b 2f 6d 69 63 72 6f 73 6f 66 74 20 28 77 69 6e 64 6f 77 73 29 20 28 76 69 73 74 61 7c 78 70 29 2f 69 5d 2c 5b 66 2c 68 5d 2c 5b 2f 28 77 69 6e 64 6f 77 73 29 20 6e 74 20 36 5c 2e 32 3b 20 28 61 72 6d 29 2f 69 2c 2f 28 77 69 6e 64 6f 77 73 20 28 3f 3a 70 68 6f 6e 65 28 3f 3a 20 6f 73 29 3f 7c 6d 6f 62 69 6c 65 29 29 5b 5c 2f 20 5d 3f 28 5b 5c 64 5c 2e 5c 77 20 5d 2a 29 2f 69 2c 2f 28 77 69 6e 64 6f 77 73 29 5b 5c 2f 20 5d 3f 28 5b 6e 74 63 65 5c 64 5c 2e 20 5d 2b 5c 77 29 28 3f 21 2e 2b 78 62 6f 78 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 48 2c 57 5d 5d 2c 5b 2f 28 77 69 6e 28 3f 3d 33 7c 39 7c 6e 29 7c 77 69 6e 20 39 78 20 29 28 5b 6e 74 5c 64 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 66 2c 22 57 69 6e 64 6f 77 73 22 5d 2c 5b 68 2c 48 2c 57 5d 5d 2c Data Ascii: ]],os:[[/microsoft (windows) (vista\|xp)/i],[f,h],[/(windows) nt 6\.2; (arm)/i,/(windows (?:phone(?: os)?\|mobile))[\/ ]?([\d\.\w ]*)/i,/(windows)[\/ ]?([ntce\d\. ]+\w)(?!.+xbox)/i],[f,[h,H,W]],[/(win(?=3\|9\|n)\|win 9x )([nt\d\.]+)/i],[[f,"Windows"],[h,H,W]],
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 5d 2a 62 75 6e 64 6c 65 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 73 2a 24 2f 69 2c 45 65 3d 2f 28 5c 53 2b 29 20 6c 69 6e 65 20 28 5c 64 2b 29 28 3f 3a 20 3e 20 65 76 61 6c 20 6c 69 6e 65 20 5c 64 2b 29 2a 20 3e 20 65 76 61 6c 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 74 20 69 6e 20 65 29 7b 76 61 72 20 72 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 72 3f 72 3a 76 6f 69 64 20 30 7d 7d 76 61 72 20 6b 65 3d 22 61 67 65 6e 74 22 2c 53 65 3d 22 63 6f 6e 73 6f 6c 65 22 2c 43 65 3d 22 6c 6f 67 67 65 72 22 2c 54 65 3d 22 6e 65 74 77 6f 72 6b 22 2c 50 65 3d 22 73 6f 75 72 63 65 22 2c 41 65 Data Ascii: ]bundle)(?::(\d+))?(?::(\d+))?\s$/i,Ee=/(\S+) line (\d+)(?: > eval line \d+)* > eval/i;function Oe(e,t){if("object"===typeof e&&e&&t in e){var r=e[t];return"string"===typeof r?r:void 0}}var ke="agent",Se="console",Ce="logger",Te="network",Pe="source",Ae
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 65 7d 7d 76 61 72 20 4d 74 3b 66 75 6e 63 74 69 6f 6e 20 46 74 28 65 29 7b 76 61 72 20 74 3d 42 74 28 65 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 2c 22 6c 6f 67 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 30 22 3d 3d 3d 65 7c 7c 22 31 22 3d 3d 3d 65 7d 28 74 29 3f 74 3a 55 74 28 65 29 3b 72 65 74 75 72 6e 7b 74 72 61 63 6b 69 6e 67 54 79 70 65 3a 72 2c 69 73 54 72 61 63 6b 65 64 3a 22 31 22 3d 3d 3d 72 7d 7d 28 65 2c 74 29 7d 29 29 3b 72 65 74 75 72 6e 7b 66 69 6e 64 54 72 61 63 6b 65 64 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 66 69 6e 64 41 63 74 69 76 65 53 65 73 73 69 Data Ascii: e}}var Mt;function Ft(e){var t=Bt(e.cookieOptions,"logs",(function(t){return function(e,t){var r=function(e){return"0"===e\|\|"1"===e}(t)?t:Ut(e);return{trackingType:r,isTracked:"1"===r}}(e,t)}));return{findTrackedSession:function(e){var r=t.findActiveSessi
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 72 2c 6c 5b 30 5d 29 3a 76 6f 69 64 20 30 3d 3d 3d 73 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 74 63 4d 6f 64 65 6c 3f 74 68 69 73 2e 63 61 6c 6c 51 75 65 75 65 2e 70 75 73 68 28 6f 28 5b 65 2c 74 2c 72 5d 2c 6c 29 29 3a 74 68 69 73 2e 69 73 43 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 28 65 29 26 26 74 68 69 73 2e 69 73 42 75 69 6c 74 49 6e 43 6f 6d 6d 61 6e 64 28 65 29 3f 6e 65 77 20 61 2e 43 6f 6d 6d 61 6e 64 4d 61 70 5b 65 5d 28 74 68 69 73 2e 63 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 73 5b 65 5d 2c 6c 5b 30 5d 2c 6e 75 6c 6c 2c 72 29 3a 6e 65 77 20 61 2e 43 6f 6d 6d 61 6e 64 4d 61 70 5b 65 5d 28 72 2c 6c 5b 30 5d 29 3a 72 28 6e 75 6c 6c 2c 21 31 29 7d 65 6c 73 65 20 72 28 6e 75 6c 6c 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 72 67 65 51 75 65 Data Ascii: r,l[0]):void 0===s.CmpApiModel.tcModel?this.callQueue.push(o([e,t,r],l)):this.isCustomCommand(e)&&this.isBuiltInCommand(e)?new a.CommandMap[e](this.customCommands[e],l[0],null,r):new a.CommandMap[e](r,l[0]):r(null,!1)}else r(null,!1)},e.prototype.purgeQue
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 49 53 49 42 4c 45 3d 22 76 69 73 69 62 6c 65 22 2c 65 2e 48 49 44 44 45 4e 3d 22 68 69 64 64 65 6e 22 2c 65 2e 44 49 53 41 42 4c 45 44 3d 22 64 69 73 61 62 6c 65 64 22 7d 28 74 2e 44 69 73 70 6c 61 79 53 74 61 74 75 73 7c 7c 28 74 2e 44 69 73 70 6c 61 79 53 74 61 74 75 73 3d 7b 7d 29 29 7d 2c 35 39 36 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 43 5f 4c 4f 41 44 45 44 3d 22 74 63 6c 6f Data Ascii: rty(t,"__esModule",{value:!0}),function(e){e.VISIBLE="visible",e.HIDDEN="hidden",e.DISABLED="disabled"}(t.DisplayStatus\|\|(t.DisplayStatus={}))},59680:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),function(e){e.TC_LOADED="tclo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	656	OUT	GET /_next/static/chunks/5835-418bbb9fccea5315.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:08 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21801 Connection: close Date: Mon, 22 Apr 2024 17:40:48 GMT Last-Modified: Mon, 22 Apr 2024 16:51:30 GMT ETag: "fc8d876a973a29258c6f89b62bed455a" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uHObJBQ-1qx7tKxx4RfsdSTGrRAx6xThh9nyXOceWtSkbw_COobSpw== Age: 117321
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 33 35 5d 2c 7b 38 38 35 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 22 3a 5b 36 36 37 39 31 2c 39 2c 31 32 33 34 2c 37 34 38 33 2c 32 38 37 30 2c 31 38 37 39 2c 34 38 36 30 2c 31 37 31 36 2c 31 30 31 36 2c 37 33 39 34 2c 39 30 37 33 2c 33 32 39 38 2c 32 34 34 32 2c 35 39 32 31 2c 39 35 39 38 2c 38 37 34 35 2c 36 37 39 31 5d 2c 22 2e 2f 64 61 22 3a 5b 38 35 39 32 31 2c 39 2c 35 39 32 31 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 5b 39 34 31 38 30 2c 33 2c 34 31 38 30 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/tran
2024-04-24 02:16:08 UTC	5417	IN	Data Raw: 20 66 72 65 65 21 20 3c 61 20 74 61 72 67 65 74 3d 5c 27 5f 62 6c 61 6e 6b 5c 27 20 68 72 65 66 3d 5c 27 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 78 70 6c 6f 72 65 2f 6e 65 77 2d 66 72 65 65 2d 62 61 73 69 63 2d 61 63 63 6f 75 6e 74 5c 27 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 22 7d 2c 22 70 61 69 64 54 72 61 6e 73 66 65 72 45 6d 61 69 6c 54 65 6d 70 6c 61 74 65 22 3a 7b 22 70 72 6f 64 75 63 74 5f 64 65 74 61 69 6c 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 65 78 74 22 3a 22 43 6f 6e 74 65 6e 74 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 5f 74 65 78 74 22 3a 22 45 78 70 69 72 61 74 69 6f 6e 22 2c 22 74 6f 74 61 6c 5f 74 65 78 74 22 3a 22 54 6f 74 61 6c 22 2c 22 70 72 69 63 65 5f 74 65 78 74 22 3a 22 50 72 69 63 65 22 2c 22 Data Ascii: free! <a target=\'_blank\' href=\'https://wetransfer.com/explore/new-free-basic-account\'>Learn more</a>"},"paidTransferEmailTemplate":{"product_details":{"content_text":"Content","expiration_text":"Expiration","total_text":"Total","price_text":"Price","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49765	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	656	OUT	GET /_next/static/chunks/6878.ce0a8a7f3f44187c.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:08 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1593702 Connection: close Date: Tue, 23 Apr 2024 15:34:30 GMT Last-Modified: Tue, 23 Apr 2024 13:52:35 GMT ETag: "1cb6370c120798bfaf71d83b6465b7e8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4pXeKi24DScbeyIrMG-R0D7qELrwHouZXqQAjjGZPU8nW1hCqbFAxw== Age: 38499
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 37 38 5d 2c 7b 39 34 39 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 63 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 38 37 38 38 29 2c 69 3d 6e 28 39 34 37 37 36 29 2c 61 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 73 3d 28 6e 28 38 36 35 33 34 29 2c 6e 28 32 37 38 34 29 29 2c 6c 3d 6e 28 31 37 36 33 35 29 2c 63 3d 6e 28 33 34 34 30 32 29 2c 64 3d 6e 28 36 36 31 34 35 29 2c 75 3d 6e 28 34 32 34 39 39 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499)
2024-04-24 02:16:08 UTC	16384	IN	Data Raw: 6c 64 72 65 6e 3a 74 7d 29 2c 69 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 72 6c 2c 6e 3d 65 2e 70 6c 61 74 66 6f 72 6d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 65 74 2c 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 2c 6e 29 7d 2c 70 6c 61 74 66 6f 72 6d 3a 6e 7d 2c 74 29 7d 29 29 5d 7d 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 49 4d 41 47 45 3d 22 69 6d 61 67 65 22 2c 65 2e 56 49 44 45 4f 3d 22 76 69 64 65 6f 22 7d 28 52 65 7c 7c 28 52 65 3d 7b 7d 29 29 3b 76 61 72 20 61 74 3d 6e 28 36 39 35 30 31 29 2c 6f 74 3d 6e 2e 6e 28 61 74 29 3b 76 61 72 20 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 76 65 57 61 6c 6c 70 61 Data Ascii: ldren:t}),i.map((function(e){var t=e.url,n=e.platform;return(0,o.jsx)(et,{onClick:function(){return r(t,n)},platform:n},t)}))]})};!function(e){e.IMAGE="image",e.VIDEO="video"}(Re\|\|(Re={}));var at=n(69501),ot=n.n(at);var st=function(e){var t=e.activeWallpa
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 4d 6a 45 67 4e 54 59 75 4e 7a 51 33 4e 45 4d 30 4d 79 34 33 4d 6a 6b 33 49 44 55 79 4c 6a 67 79 4d 44 63 67 4e 54 49 75 4d 6a 59 32 49 44 51 33 4c 6a 49 7a 4e 44 51 67 4e 54 59 75 4e 6a 67 35 4f 43 41 30 4d 43 34 31 4f 54 51 79 54 44 55 34 4c 6a 6b 33 4f 54 4d 67 4e 44 49 75 4d 54 45 35 4e 55 4d 31 4e 43 34 77 4f 44 63 31 49 44 51 35 4c 6a 51 32 4d 6a 4d 67 4e 44 51 75 4f 54 45 31 4f 53 41 31 4e 53 34 7a 4d 54 67 30 49 44 4d 7a 4c 6a 59 31 4e 7a 49 67 4e 54 6b 75 4d 7a 4d 34 4d 30 4d 79 4d 69 34 7a 4e 6a 4d 32 49 44 59 7a 4c 6a 4d 33 4d 44 59 67 4f 43 34 34 4d 44 49 31 4e 43 41 32 4e 53 34 32 4d 54 63 78 49 43 30 31 4c 6a 41 35 4d 54 45 32 49 44 59 31 4c 6a 59 78 4e 7a 46 4d 4c 54 55 75 4d 44 6b 78 4d 54 59 67 4e 6a 49 75 4f 44 59 32 4d 56 6f 69 49 47 5a Data Ascii: MjEgNTYuNzQ3NEM0My43Mjk3IDUyLjgyMDcgNTIuMjY2IDQ3LjIzNDQgNTYuNjg5OCA0MC41OTQyTDU4Ljk3OTMgNDIuMTE5NUM1NC4wODc1IDQ5LjQ2MjMgNDQuOTE1OSA1NS4zMTg0IDMzLjY1NzIgNTkuMzM4M0MyMi4zNjM2IDYzLjM3MDYgOC44MDI1NCA2NS42MTcxIC01LjA5MTE2IDY1LjYxNzFMLTUuMDkxMTYgNjIuODY2MVoiIGZ
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 6c 61 6e 54 69 65 72 2c 63 3a 6e 2e 72 65 67 69 6f 6e 2e 63 6f 75 6e 74 72 79 2c 75 3a 74 2e 69 64 7d 2c 6f 6e 53 75 62 6d 69 74 3a 67 2c 6f 6e 52 65 61 64 79 3a 70 2c 6f 6e 43 6c 6f 73 65 3a 75 2c 63 68 69 6c 64 72 65 6e 3a 22 41 6e 73 77 65 72 20 32 20 71 75 65 73 74 69 6f 6e 73 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 62 6e 2e 68 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 54 6e 28 29 2e 63 6c 6f 73 65 43 74 61 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 63 6c 6f 73 65 2d 62 61 6e 6e 65 72 22 2c 69 63 6f 6e 3a 79 6e 2e 4b 78 2c 73 69 7a 65 3a 22 6d 65 64 69 75 6d 22 2c 61 70 70 65 61 72 61 6e 63 65 3a 22 74 65 72 74 69 61 72 79 22 2c 76 61 72 69 61 74 69 6f 6e 3a 22 6e 65 75 74 72 61 6c 22 2c 6d 6f 64 65 3a 22 64 61 72 6b 22 2c 6f 6e 43 6c 69 63 6b 3a 64 Data Ascii: lanTier,c:n.region.country,u:t.id},onSubmit:g,onReady:p,onClose:u,children:"Answer 2 questions"}),(0,o.jsx)(bn.h,{className:Tn().closeCta,"data-testid":"close-banner",icon:yn.Kx,size:"medium",appearance:"tertiary",variation:"neutral",mode:"dark",onClick:d
2024-04-24 02:16:09 UTC	1622	IN	Data Raw: 65 70 61 72 61 74 6f 72 22 7d 29 5d 7d 29 7d 2c 64 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 72 65 66 2c 6e 3d 65 2e 65 78 74 65 72 6e 61 6c 2c 72 3d 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2c 69 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 61 3d 65 2e 61 63 74 69 76 65 2c 73 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 6c 3d 65 2e 69 73 4e 65 77 46 65 61 74 75 72 65 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 2c 64 3d 65 2e 69 73 42 65 74 61 46 65 61 74 75 72 65 2c 75 3d 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 70 3d 65 2e 6f 6e 53 65 6c 65 63 74 2c 67 3d 28 30 2c 73 72 2e 5a 29 28 65 2c 5b 22 68 72 65 66 22 2c 22 65 78 74 65 72 6e 61 6c 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 61 63 74 69 76 65 22 2c 22 69 73 4e 65 77 46 65 61 74 Data Ascii: eparator"})]})},dr=function(e){var t=e.href,n=e.external,r=void 0!==n&&n,i=e.children,a=e.active,s=void 0!==a&&a,l=e.isNewFeature,c=void 0!==l&&l,d=e.isBetaFeature,u=void 0!==d&&d,p=e.onSelect,g=(0,sr.Z)(e,["href","external","children","active","isNewFeat
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 61 63 63 6f 75 6e 74 2d 73 74 6f 72 61 67 65 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 6f 2e 6a 73 78 29 28 70 72 2e 6b 2c 7b 76 61 6c 75 65 3a 64 2c 73 69 7a 65 3a 22 73 6d 61 6c 6c 22 2c 6d 61 78 3a 31 30 30 2c 61 70 70 65 61 72 61 6e 63 65 3a 22 6e 65 75 74 72 61 6c 22 2c 72 6f 75 6e 64 65 64 3a 21 30 7d 29 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6d 72 28 29 2e 53 75 62 74 69 74 6c 65 2c 63 68 69 6c 64 72 65 6e 3a 50 74 2e 5a 2e 74 28 22 6e 61 76 69 67 61 74 69 6f 6e 2e 61 63 63 6f 75 6e 74 5f 73 74 6f 72 61 67 65 5f 63 6f 75 6e 74 65 72 2e 74 65 78 74 22 29 7d 29 2c 63 28 29 26 26 74 5d 7d 29 7d 2c 77 72 3d 6e 28 33 34 31 38 37 29 2c 5f 72 3d 6e 28 39 30 38 31 37 29 2c Data Ascii: account-storage-progress-bar",children:(0,o.jsx)(pr.k,{value:d,size:"small",max:100,appearance:"neutral",rounded:!0})}),(0,o.jsx)("p",{className:mr().Subtitle,children:Pt.Z.t("navigation.account_storage_counter.text")}),c()&&t]})},wr=n(34187),_r=n(90817),
2024-04-24 02:16:09 UTC	15596	IN	Data Raw: 2e 70 61 74 68 3d 3d 3d 76 72 2e 74 72 61 6e 73 66 65 72 73 49 74 65 6d 2e 70 61 74 68 2c 6f 6e 53 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 76 72 2e 74 72 61 6e 73 66 65 72 73 49 74 65 6d 2e 74 72 61 63 6b 45 76 65 6e 74 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 50 74 2e 5a 2e 74 28 76 72 2e 74 72 61 6e 73 66 65 72 73 49 74 65 6d 2e 6e 61 6d 65 29 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 64 72 2c 7b 68 72 65 66 3a 76 72 2e 63 6f 6e 74 61 63 74 73 49 74 65 6d 2e 70 61 74 68 2c 61 63 74 69 76 65 3a 62 2e 70 61 74 68 3d 3d 3d 76 72 2e 63 6f 6e 74 61 63 74 73 49 74 65 6d 2e 70 61 74 68 2c 6f 6e 53 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 76 72 2e 63 6f 6e 74 61 63 74 73 49 74 65 6d 2e 74 72 61 Data Ascii: .path===vr.transfersItem.path,onSelect:function(){return p(vr.transfersItem.trackEvent)},children:Pt.Z.t(vr.transfersItem.name)}),(0,o.jsx)(dr,{href:vr.contactsItem.path,active:b.path===vr.contactsItem.path,onSelect:function(){return p(vr.contactsItem.tra
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 71 75 69 72 65 64 2c 61 75 74 68 3a 44 28 29 2e 6f 62 6a 65 63 74 2e 69 73 52 65 71 75 69 72 65 64 7d 3b 76 61 72 20 50 69 3d 28 30 2c 6b 2e 5a 29 28 7b 73 69 67 6e 6f 75 74 3a 6e 6e 2e 5a 2e 55 73 65 72 2e 73 69 67 6e 6f 75 74 2e 62 69 6e 64 28 6e 6e 2e 5a 2e 55 73 65 72 29 7d 2c 6e 6e 2e 5a 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 29 2c 6a 69 3d 28 30 2c 6c 2e 24 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 61 63 63 6f 75 6e 74 3a 65 2e 61 63 63 6f 75 6e 74 2c 6c 61 79 6f 75 74 3a 65 2e 6c 61 79 6f 75 74 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 65 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 72 6f 75 74 65 3a 65 2e 72 6f 75 74 65 2c 75 73 65 72 3a 65 2e 75 73 65 72 2c 70 65 6e 64 69 6e 67 3a 65 2e 70 65 6e 64 69 6e 67 2c 61 75 74 68 Data Ascii: quired,auth:D().object.isRequired};var Pi=(0,k.Z)({signout:nn.Z.User.signout.bind(nn.Z.User)},nn.Z.Notification),ji=(0,l.$j)((function(e){return{account:e.account,layout:e.layout,notification:e.notification,route:e.route,user:e.user,pending:e.pending,auth
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 2e 6a 73 78 29 28 22 68 31 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6c 65 67 61 6c 5f 5f 74 69 74 6c 65 22 2c 63 68 69 6c 64 72 65 6e 3a 50 74 2e 5a 2e 74 28 22 61 63 63 6f 75 6e 74 2e 63 6f 6e 73 65 6e 74 5f 6d 61 6e 61 67 65 72 2e 64 61 74 61 5f 6f 70 74 5f 69 6e 2e 74 69 74 6c 65 22 29 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 70 61 2c 7b 69 73 4c 6f 67 67 65 64 49 6e 3a 64 2e 6c 6f 67 67 65 64 49 6e 7d 29 2c 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 63 6f 6e 73 65 6e 74 2d 6d 61 6e 61 67 65 72 5f 5f 63 6f 6e 73 65 6e 74 2d 70 72 65 66 65 72 65 6e 63 65 73 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 63 6f 6e 73 65 6e 74 2d 6d 61 6e Data Ascii: .jsx)("h1",{className:"legal__title",children:Pt.Z.t("account.consent_manager.data_opt_in.title")}),(0,o.jsx)(pa,{isLoggedIn:d.loggedIn}),(0,o.jsxs)("div",{className:"consent-manager__consent-preferences",children:[(0,o.jsxs)("div",{className:"consent-man
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 2e 5a 2e 6e 61 76 69 67 61 74 65 54 6f 28 22 2f 75 70 6c 6f 61 64 22 29 7d 2c 74 65 78 74 3a 50 74 2e 5a 2e 74 28 22 70 61 6e 65 6c 2e 77 61 72 6e 69 6e 67 2e 65 6d 61 69 6c 5f 75 6e 76 65 72 69 66 69 65 64 5f 6d 6f 62 69 6c 65 5f 63 74 61 22 29 7d 29 5d 7d 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 61 6b 65 41 63 63 6f 75 6e 74 56 65 72 69 66 69 63 61 74 69 6f 6e 4c 6f 67 69 6e 57 61 72 6e 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 57 69 2e 5a 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 2d 6c 6f 67 69 6e 22 2c 63 68 69 6c 64 72 Data Ascii: nction(){return N.Z.navigateTo("/upload")},text:Pt.Z.t("panel.warning.email_unverified_mobile_cta")})]},"notification")}},{key:"makeAccountVerificationLoginWarning",value:function(){return(0,o.jsx)(Wi.Z,{className:"notification--verification-login",childr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49766	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:08 UTC	735	OUT	GET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424 HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:16:09 UTC	490	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 255661 Connection: close cache-control: private, max-age=900 Date: Wed, 24 Apr 2024 02:16:09 GMT expires: Wed, 24 Apr 2024 02:30:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5b04a01f48583fc1372237be2a8b3964.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 3lED9b7iiWyjtvJ8csssYZjmZzfLmLu3L8NqYlB2ghrf2KarNf7BGw==
2024-04-24 02:16:09 UTC	3839	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 76 74 70 5f 73 69 67 6e 61 6c 22 3a 31 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"9", "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_valu
2024-04-24 02:16:09 UTC	8192	IN	Data Raw: 22 2c 33 5d 5d 5d 0a 7d 2c 0a 22 72 75 6e 74 69 6d 65 22 3a 5b 20 5b 35 30 2c 22 5f 5f 63 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 33 36 2c 5b 31 37 2c 5b 31 35 2c 22 61 22 5d 2c 22 76 61 6c 75 65 22 5d 5d 5d 0a 20 2c 5b 35 30 2c 22 5f 5f 63 63 64 5f 61 75 74 6f 5f 72 65 64 61 63 74 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 35 30 2c 22 76 22 2c 5b 34 36 2c 22 62 6b 22 5d 2c 5b 33 36 2c 5b 32 2c 5b 31 35 2c 22 62 6b 22 5d 2c 22 72 65 70 6c 61 63 65 22 2c 5b 37 2c 5b 31 35 2c 22 75 22 5d 2c 22 5c 5c 24 31 22 5d 5d 5d 5d 2c 5b 35 30 2c 22 77 22 2c 5b 34 36 2c 22 62 6b 22 5d 2c 5b 35 32 2c 22 62 6c 22 2c 5b 22 63 22 2c 5b 31 35 2c 22 62 6b 22 5d 5d 5d 2c 5b 35 32 2c 22 62 6d 22 2c 5b 37 5d 5d 2c 5b 36 35 2c 22 62 6e 22 2c 5b 32 2c 5b 31 35 2c 22 62 6c 22 5d 2c 22 73 70 Data Ascii: ",3]]]},"runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]] ,[50,"__ccd_auto_redact",[46,"a"],[50,"v",[46,"bk"],[36,[2,[15,"bk"],"replace",[7,[15,"u"],"\\$1"]]]],[50,"w",[46,"bk"],[52,"bl",["c",[15,"bk"]]],[52,"bm",[7]],[65,"bn",[2,[15,"bl"],"sp
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 6e 61 74 69 6f 6e 49 64 22 5d 2c 5b 35 31 2c 22 22 2c 5b 37 2c 22 6b 22 5d 2c 5b 35 32 2c 22 6c 22 2c 5b 32 2c 5b 31 35 2c 22 6b 22 5d 2c 22 67 65 74 48 69 74 44 61 74 61 22 2c 5b 37 2c 5b 31 37 2c 5b 31 37 2c 5b 31 35 2c 22 63 22 5d 2c 22 45 76 65 6e 74 50 61 72 61 6d 65 74 65 72 73 22 5d 2c 22 55 53 45 52 5f 49 44 22 5d 5d 5d 5d 2c 5b 32 32 2c 5b 32 38 2c 5b 31 35 2c 22 6c 22 5d 5d 2c 5b 34 36 2c 5b 33 36 5d 5d 5d 2c 5b 35 32 2c 22 6d 22 2c 5b 22 64 22 2c 5b 31 37 2c 5b 31 35 2c 22 62 22 5d 2c 22 53 48 41 52 45 44 5f 55 53 45 52 5f 49 44 22 5d 5d 5d 2c 5b 32 32 2c 5b 31 35 2c 22 6d 22 5d 2c 5b 34 36 2c 5b 33 36 5d 5d 5d 2c 5b 22 67 22 2c 5b 31 37 2c 5b 31 35 2c 22 62 22 5d 2c 22 53 48 41 52 45 44 5f 55 53 45 52 5f 49 44 22 5d 2c 5b 31 35 2c 22 6c 22 5d Data Ascii: nationId"],[51,"",[7,"k"],[52,"l",[2,[15,"k"],"getHitData",[7,[17,[17,[15,"c"],"EventParameters"],"USER_ID"]]]],[22,[28,[15,"l"]],[46,[36]]],[52,"m",["d",[17,[15,"b"],"SHARED_USER_ID"]]],[22,[15,"m"],[46,[36]]],["g",[17,[15,"b"],"SHARED_USER_ID"],[15,"l"]
2024-04-24 02:16:09 UTC	12288	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 46 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 2d 31 21 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 6e 61 74 69 76 65 20 63 6f 64 65 22 29 3f 43 61 3a 45 61 3b 72 65 74 75 72 6e 20 46 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 47 61 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 61 3b 74 68 69 73 Data Ascii: rn function(){return a.apply(b,arguments)}},Fa=function(a,b,c){Fa=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?Ca:Ea;return Fa.apply(null,arguments)},Ga=function(a){return a};var Ha=function(a,b){this.type=a;this
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 77 2c 48 3d 64 6f 63 75 6d 65 6e 74 2c 41 63 3d 6e 61 76 69 67 61 74 6f 72 2c 42 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 74 72 79 7b 61 3d 41 63 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 61 7d 2c 43 63 3d 48 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 48 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2c 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 44 5b 61 5d 3b 44 5b 61 5d 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 62 3a 63 3b 72 65 74 75 72 6e 20 44 5b 61 5d 7d 2c 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 26 26 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 6f 6e 6c 6f 61 64 3d 62 3a 61 2e 6f 6e 72 65 61 64 Data Ascii: w,H=document,Ac=navigator,Bc=function(){var a;try{a=Ac.serviceWorker}catch(b){return}return a},Cc=H.currentScript&&H.currentScript.src,Dc=function(a,b){var c=D[a];D[a]=void 0===c?b:c;return D[a]},Ec=function(a,b){b&&(a.addEventListener?a.onload=b:a.onread
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 70 65 45 72 72 6f 72 3a 20 43 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 22 2b 61 2b 22 20 28 72 65 61 64 69 6e 67 20 27 22 2b 62 2b 22 27 29 22 3b 69 66 28 70 64 28 29 29 74 68 72 6f 77 20 6e 65 77 20 72 64 28 64 29 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 64 29 3b 7d 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 62 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 64 29 63 3d 61 2e 67 65 74 28 62 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 22 6c 65 6e 67 74 68 22 3d 3d 3d 62 3f 63 3d 61 2e 6c 65 6e 67 74 68 3a 59 61 28 62 29 26 26 28 63 3d 61 5b 62 5d 29 3b 65 6c 73 65 20 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 6b 64 Data Ascii: peError: Cannot read properties of "+a+" (reading '"+b+"')";if(pd())throw new rd(d);throw Error(d);}if(a instanceof ab\|\|a instanceof Za\|\|a instanceof fd)c=a.get(b);else if("string"===typeof a)"length"===b?c=a.length:Ya(b)&&(c=a[b]);else if(a instanceof kd
2024-04-24 02:16:09 UTC	11977	IN	Data Raw: 63 68 20 72 65 71 75 69 72 65 64 20 74 79 70 65 20 22 2b 28 4d 67 5b 68 5d 7c 7c 68 29 2b 22 2e 22 29 3b 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4e 67 28 61 29 7b 72 65 74 75 72 6e 22 22 2b 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 72 65 74 75 72 6e 20 63 7d 3b 76 61 72 20 53 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 66 64 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 2c 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 5b 65 5d 3d 4a 28 74 68 69 73 2c 64 5b 65 5d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 2e 61 70 70 6c 79 28 Data Ascii: ch required type "+(Mg[h]\|\|h)+".");}}};function Ng(a){return""+a}function Og(a,b){var c=[];return c};var Sg=function(a,b){var c=new fd(a,function(){for(var d=Array.prototype.slice.call(arguments,0),e=0;e<d.length;e++)d[e]=J(this,d[e]);try{return b.apply(
2024-04-24 02:16:09 UTC	16384	IN	Data Raw: 61 6d 65 22 2c 53 63 3a 22 63 61 6d 70 61 69 67 6e 22 2c 54 63 3a 22 63 61 6d 70 61 69 67 6e 5f 73 6f 75 72 63 65 22 2c 55 63 3a 22 63 61 6d 70 61 69 67 6e 5f 74 65 72 6d 22 2c 6b 62 3a 22 63 6c 69 65 6e 74 5f 69 64 22 2c 73 69 3a 22 72 6e 64 22 2c 75 69 3a 22 63 6f 6e 73 65 6e 74 5f 75 70 64 61 74 65 5f 74 79 70 65 22 2c 76 69 3a 22 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 22 2c 0a 77 69 3a 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 2c 57 61 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 63 6f 6f 6b 69 65 5f 70 72 65 66 69 78 22 2c 56 63 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 69 64 22 2c 73 61 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 6c 69 6e 6b 65 72 22 2c 78 69 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 6c 69 6e 6b 65 72 5f 64 69 73 61 62 6c 65 64 22 2c 52 62 3a 22 63 Data Ascii: ame",Sc:"campaign",Tc:"campaign_source",Uc:"campaign_term",kb:"client_id",si:"rnd",ui:"consent_update_type",vi:"content_group",wi:"content_type",Wa:"conversion_cookie_prefix",Vc:"conversion_id",sa:"conversion_linker",xi:"conversion_linker_disabled",Rb:"c
2024-04-24 02:16:09 UTC	1514	IN	Data Raw: 69 64 20 30 2c 79 6b 3d 7b 7d 2c 7a 6b 3d 76 6f 69 64 20 30 2c 41 6b 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 35 3b 30 3c 6f 6b 2e 57 6a 26 26 28 61 3d 6f 6b 2e 57 6a 29 3b 74 68 69 73 2e 6d 3d 30 3b 74 68 69 73 2e 48 3d 5b 5d 3b 74 68 69 73 2e 46 3d 61 7d 2c 42 6b 3d 31 45 33 3b 0a 66 75 6e 63 74 69 6f 6e 20 43 6b 28 61 2c 62 29 7b 76 61 72 20 63 3d 78 6b 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 29 69 66 28 62 29 63 3d 49 69 28 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 64 3d 5b 4b 6a 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 29 2c 77 6b 5d 2c 65 3d 6d 61 28 70 6b 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 65 2e Data Ascii: id 0,yk={},zk=void 0,Ak=new function(){var a=5;0<ok.Wj&&(a=ok.Wj);this.m=0;this.H=[];this.F=a},Bk=1E3;function Ck(a,b){var c=xk;if(void 0===c)if(b)c=Ii();else return"";for(var d=[Kj("https://www.googletagmanager.com"),wk],e=ma(pk),f=e.next();!f.done;f=e.
2024-04-24 02:16:09 UTC	8949	IN	Data Raw: 71 63 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 71 63 28 22 4d 53 49 45 22 29 3b 71 63 28 22 45 64 67 65 22 29 3b 21 71 63 28 22 47 65 63 6b 6f 22 29 7c 7c 2d 31 21 3d 6d 63 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 71 63 28 22 45 64 67 65 22 29 7c 7c 71 63 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 71 63 28 22 4d 53 49 45 22 29 7c 7c 71 63 28 22 45 64 67 65 22 29 3b 2d 31 21 3d 6d 63 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 71 63 28 22 45 64 67 65 22 29 26 26 71 63 28 22 4d 6f 62 69 6c 65 22 29 3b 4e 6b 28 29 7c 7c 71 63 28 22 4d 61 63 69 6e 74 6f 73 68 22 29 3b 4e 6b 28 29 7c 7c 71 63 28 22 57 69 6e 64 6f 77 73 22 29 3b 28 Data Ascii: qc("Trident")\|\|qc("MSIE");qc("Edge");!qc("Gecko")\|\|-1!=mc().toLowerCase().indexOf("webkit")&&!qc("Edge")\|\|qc("Trident")\|\|qc("MSIE")\|\|qc("Edge");-1!=mc().toLowerCase().indexOf("webkit")&&!qc("Edge")&&qc("Mobile");Nk()\|\|qc("Macintosh");Nk()\|\|qc("Windows");(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:10 UTC	2025	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7327&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:10 UTC	911	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:10 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 409c44fe5aec2ede2c5cd6cb59aad7d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: mxflc6eoBeVjkqZlqzUk_17rD_j_YFOD3wbMjzbQpl0lEK3_TChqyQ==
2024-04-24 02:16:10 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:10 UTC	799	OUT	GET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US
2024-04-24 02:16:11 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 164599 Connection: close Date: Thu, 11 Apr 2024 14:11:20 GMT Last-Modified: Thu, 11 Apr 2024 13:54:46 GMT ETag: "6095c9597989539e31fb82efbb0997a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zUGvYBHFg0ZrFH1oMHNOeSKQYuT-oauP4iaGtDF1TD6dFdp8AIu6uQ== Age: 1080291
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 34 35 5d 2c 7b 38 37 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 7b 64 61 74 65 3a 7b 66 6f 72 6d 61 74 73 3a 7b 64 65 66 61 75 6c 74 3a 22 25 64 2d 25 6d 2d 25 59 22 2c 73 68 6f 72 74 3a 22 25 2d 64 20 25 42 22 2c 6c 6f 6e 67 3a 22 25 2d 64 20 25 42 2c 20 25 59 22 2c 77 69 74 68 5f 64 61 79 3a 22 25 41 2c 20 25 2d 64 20 25 42 22 2c 77 69 74 68 6f 75 74 5f 64 61 79 3a 22 25 2d 64 20 25 42 20 25 59 22 7d 2c 64 61 79 5f 6e 61 6d 65 73 3a 5b 22 53 75 6e 64 61 79 22 2c 22 4d 6f 6e 64 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Mond
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 70 61 79 6d 65 6e 74 20 64 65 74 61 69 6c 73 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 22 2c 64 69 73 63 6f 75 6e 74 3a 22 44 69 73 63 6f 75 6e 74 22 2c 70 72 6f 64 75 63 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4f 6e 65 20 25 7b 64 75 72 61 74 69 6f 6e 7d 20 6f 66 20 57 65 54 72 61 6e 73 66 65 72 20 50 72 6f 22 2c 74 69 74 6c 65 3a 22 59 6f 75 27 72 65 20 6e 65 61 72 6c 79 20 74 68 65 72 65 21 22 2c 74 6f 74 61 6c 3a 22 54 6f 74 61 6c 22 2c 76 61 74 3a 22 56 41 54 22 2c 79 6f 75 72 5f 64 65 74 61 69 6c 73 3a 22 59 6f 75 72 20 64 65 74 61 69 6c 73 22 2c 79 6f 75 72 5f 6f 72 64 65 72 3a 22 59 6f 75 72 20 6f 72 64 65 72 22 2c 74 69 74 6c 65 5f 65 72 72 6f 72 3a 22 48 6d 6d 6d 20 74 68 65 72 65 20 73 65 65 6d 73 20 74 6f 20 62 65 20 61 6e 20 69 73 73 75 Data Ascii: payment details and try again",discount:"Discount",product_description:"One %{duration} of WeTransfer Pro",title:"You're nearly there!",total:"Total",vat:"VAT",your_details:"Your details",your_order:"Your order",title_error:"Hmmm there seems to be an issu
2024-04-24 02:16:11 UTC	11977	IN	Data Raw: 20 74 72 61 6e 73 66 65 72 22 7d 2c 6d 6f 64 61 6c 3a 7b 64 69 73 63 6c 61 69 6d 65 72 3a 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 73 77 69 74 63 68 20 74 6f 20 61 20 62 69 6c 6c 69 6e 67 20 63 79 63 6c 65 20 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 74 69 74 6c 65 3a 22 53 77 69 74 63 68 20 74 6f 20 25 7b 70 6c 61 6e 5f 74 69 65 72 7d 20 66 6f 72 20 25 7b 70 72 69 63 65 7d 22 2c 70 6c 61 6e 5f 69 6e 66 6f 3a 22 25 7b 70 6c 61 6e 5f 74 65 72 6d 7d 20 25 7b 70 6c 61 6e 5f 6e 61 6d 65 7d 20 70 6c 61 6e 20 28 70 72 6f 72 61 74 65 64 29 22 2c 79 65 61 72 6c 79 3a 22 79 65 61 72 6c 79 22 2c 6d 6f 6e 74 68 6c 79 3a 22 6d 6f 6e 74 68 6c 79 22 2c 66 69 6e 61 6c 5f 70 72 69 63 65 3a 22 50 61 79 20 Data Ascii: transfer"},modal:{disclaimer:"You can only switch to a billing cycle based on your current subscription",title:"Switch to %{plan_tier} for %{price}",plan_info:"%{plan_term} %{plan_name} plan (prorated)",yearly:"yearly",monthly:"monthly",final_price:"Pay
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 6c 20 64 65 74 61 69 6c 73 22 7d 2c 66 72 65 65 5f 6f 6e 62 6f 61 72 64 69 6e 67 3a 7b 63 6c 6f 73 65 3a 22 43 6c 6f 73 65 22 2c 66 69 6e 69 73 68 5f 74 6f 75 72 3a 22 44 6f 6e 65 22 2c 6e 65 78 74 3a 22 4e 65 78 74 22 2c 73 65 6e 64 5f 66 69 6c 65 73 3a 22 4a 75 73 74 20 67 6f 20 74 6f 20 73 65 6e 64 20 66 69 6c 65 73 20 6e 6f 77 22 2c 73 74 61 72 74 5f 74 6f 75 72 3a 22 53 65 65 20 77 68 61 74 20 65 6c 73 65 20 77 65 27 76 65 20 67 6f 74 22 2c 73 74 65 70 5f 6f 6e 65 3a 7b 62 6f 64 79 5f 31 3a 22 4e 6f 77 20 74 68 61 74 20 79 6f 75 5c 75 32 30 31 39 76 65 20 76 65 72 69 66 69 65 64 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 66 6f 72 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2c 20 74 68 65 72 65 5c 75 32 30 31 39 73 20 6e 6f 20 6e 65 65 64 Data Ascii: l details"},free_onboarding:{close:"Close",finish_tour:"Done",next:"Next",send_files:"Just go to send files now",start_tour:"See what else we've got",step_one:{body_1:"Now that you\u2019ve verified your email address for your account, there\u2019s no need
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 6e 65 65 64 20 74 6f 20 76 65 72 69 66 79 20 74 72 61 6e 73 66 65 72 73 22 2c 66 65 61 74 75 72 65 5f 33 3a 22 54 72 79 20 6f 75 74 20 70 6f 72 74 61 6c 73 20 61 6e 64 20 72 65 76 69 65 77 73 22 7d 7d 2c 70 72 65 6d 69 75 6d 3a 7b 73 75 62 74 69 74 6c 65 3a 22 53 68 61 72 65 20 77 6f 72 6b 20 77 69 74 68 20 6e 6f 20 6c 69 6d 69 74 73 22 2c 74 69 74 6c 65 3a 22 50 72 65 6d 69 75 6d 22 2c 75 73 70 3a 7b 66 65 61 74 75 72 65 5f 31 3a 22 4e 6f 20 73 69 7a 65 20 6c 69 6d 69 74 20 6f 6e 20 74 72 61 6e 73 66 65 72 73 22 2c 66 65 61 74 75 72 65 5f 32 3a 22 55 6e 6c 69 6d 69 74 65 64 20 73 74 6f 72 61 67 65 22 2c 66 65 61 74 75 72 65 5f 32 5f 73 75 62 74 69 74 6c 65 3a 22 2a 49 6e 69 74 69 61 6c 6c 79 20 25 7b 73 74 6f 72 61 67 65 4c 69 6d 69 74 7d 20 73 74 6f 72 Data Ascii: need to verify transfers",feature_3:"Try out portals and reviews"}},premium:{subtitle:"Share work with no limits",title:"Premium",usp:{feature_1:"No size limit on transfers",feature_2:"Unlimited storage",feature_2_subtitle:"*Initially %{storageLimit} stor
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 20 69 6e 20 79 6f 75 72 20 74 72 61 6e 73 66 65 72 20 6f 76 65 72 76 69 65 77 22 2c 79 6f 75 72 5f 65 6d 61 69 6c 3a 22 50 6f 70 20 79 6f 75 72 20 6f 77 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 6e 20 68 65 72 65 20 73 6f 20 77 65 20 63 61 6e 20 6c 65 74 20 79 6f 75 20 6b 6e 6f 77 20 77 68 65 6e 20 79 6f 75 72 20 66 69 6c 65 73 20 68 61 76 65 20 62 65 65 6e 20 64 6f 77 6e 6c 6f 61 64 65 64 22 2c 6c 69 6e 6b 5f 74 72 61 6e 73 66 65 72 3a 22 44 69 64 20 79 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 61 6e 20 67 65 74 20 79 6f 75 72 20 74 72 61 6e 73 66 65 72 20 6c 69 6e 6b 20 69 6e 73 74 65 61 64 3f 22 2c 70 72 65 76 69 65 77 73 5f 72 65 63 65 69 76 65 72 3a 22 49 6d 61 67 65 73 20 73 65 6e 74 20 62 79 20 50 72 6f 20 75 73 65 72 73 20 63 61 6e 20 62 65 Data Ascii: in your transfer overview",your_email:"Pop your own email address in here so we can let you know when your files have been downloaded",link_transfer:"Did you know you can get your transfer link instead?",previews_receiver:"Images sent by Pro users can be
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 77 61 72 65 20 74 68 65 20 6c 69 6e 6b 73 20 69 6e 20 74 68 69 73 20 42 6f 61 72 64 20 77 6f 6e 5c 75 32 30 31 39 74 20 73 68 6f 77 20 75 70 20 5c 75 32 30 31 33 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 30 35 30 36 32 39 36 33 22 20 72 65 6c 3d 22 65 78 74 65 72 6e 61 6c 22 3e 72 65 61 64 20 6d 6f 72 65 3c 2f 61 3e 2e 27 7d 2c 65 78 70 69 72 65 64 3a 7b 74 69 74 6c 65 3a 22 54 72 61 6e 73 66 65 72 20 65 78 70 69 72 65 64 22 2c 74 65 78 74 3a 22 53 6f 72 72 79 2c 20 74 68 69 73 20 74 72 61 6e 73 66 65 72 20 68 61 73 20 65 78 70 69 72 65 64 20 61 6e 64 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 61 6e Data Ascii: ware the links in this Board won\u2019t show up \u2013 <a href="https://wetransfer.zendesk.com/hc/en-us/articles/115005062963" rel="external">read more</a>.'},expired:{title:"Transfer expired",text:"Sorry, this transfer has expired and is not available an
2024-04-24 02:16:11 UTC	14808	IN	Data Raw: 20 62 69 6c 6c 69 6e 67 22 2c 65 6d 61 69 6c 3a 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 6e 6f 74 5f 72 65 71 75 69 72 65 64 3a 22 28 6f 70 74 69 6f 6e 61 6c 29 22 2c 63 75 72 72 65 6e 74 5f 70 61 73 73 77 6f 72 64 3a 22 43 75 72 72 65 6e 74 20 70 61 73 73 77 6f 72 64 22 2c 6e 65 77 5f 70 61 73 73 77 6f 72 64 3a 22 4e 65 77 20 70 61 73 73 77 6f 72 64 22 2c 72 65 70 65 61 74 5f 6e 65 77 5f 70 61 73 73 77 6f 72 64 3a 22 43 6f 6e 66 69 72 6d 20 6e 65 77 20 70 61 73 73 77 6f 72 64 22 2c 70 61 73 73 77 6f 72 64 3a 22 50 61 73 73 77 6f 72 64 22 2c 70 61 73 73 77 6f 72 64 5f 63 6f 6e 66 69 72 6d 3a 22 43 6f 6e 66 69 72 6d 20 70 61 73 73 77 6f 72 64 22 2c 66 75 6c 6c 5f 6e 61 6d 65 3a 22 46 75 6c 6c 20 6e 61 6d 65 22 2c 63 6f 6d 70 61 6e 79 3a 22 43 6f 6d Data Ascii: billing",email:"Email address",not_required:"(optional)",current_password:"Current password",new_password:"New password",repeat_new_password:"Confirm new password",password:"Password",password_confirm:"Confirm password",full_name:"Full name",company:"Com
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 65 6c 3a 22 25 7b 63 6f 75 70 6f 6e 5f 63 6f 64 65 5f 6e 61 6d 65 7d 20 5c 75 32 30 31 33 20 25 7b 64 69 73 63 6f 75 6e 74 5f 61 6d 6f 75 6e 74 7d 25 20 6f 66 66 22 2c 70 69 6c 6c 5f 6c 61 62 65 6c 5f 32 30 32 33 3a 22 25 7b 64 69 73 63 6f 75 6e 74 5f 61 6d 6f 75 6e 74 7d 25 20 6f 66 66 20 57 65 54 72 61 6e 73 66 65 72 20 50 72 6f 22 7d 7d 2c 65 78 74 65 72 6e 61 6c 5f 6c 69 6e 6b 73 3a 7b 61 6e 64 72 6f 69 64 5f 61 70 70 3a 22 68 74 74 70 73 3a 2f 2f 77 65 2e 74 6c 2f 61 6e 64 72 6f 69 64 22 2c 69 6f 73 5f 61 70 70 3a 22 68 74 74 70 73 3a 2f 2f 77 65 2e 74 6c 2f 69 6f 73 61 70 70 22 2c 66 61 63 65 62 6f 6f 6b 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 77 65 74 72 61 6e 73 66 65 72 22 2c 68 6f 6d 65 72 75 6e 3a 22 68 Data Ascii: el:"%{coupon_code_name} \u2013 %{discount_amount}% off",pill_label_2023:"%{discount_amount}% off WeTransfer Pro"}},external_links:{android_app:"https://we.tl/android",ios_app:"https://we.tl/iosapp",facebook:"https://www.facebook.com/wetransfer",homerun:"h
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: 70 74 69 6f 6e 3a 22 59 6f 75 72 20 77 6f 72 6b 73 70 61 63 65 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 65 6c 6c 65 64 20 61 6e 64 20 77 69 6c 6c 20 65 6e 64 20 6f 6e 20 3c 62 3e 25 7b 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5f 64 61 74 65 7d 3c 2f 62 3e 2e 22 2c 70 65 6e 64 69 6e 67 5f 64 6f 77 6e 67 72 61 64 65 5f 72 65 61 63 74 69 76 61 74 65 5f 74 65 78 74 3a 22 43 68 61 6e 67 65 64 20 79 6f 75 72 20 6d 69 6e 64 3f 20 44 6f 6e 5c 75 32 30 31 39 74 20 70 61 6e 69 63 2c 20 69 74 5c 75 32 30 31 39 73 20 65 61 73 79 20 74 6f 20 67 65 74 20 74 68 69 6e 67 73 20 62 61 63 6b 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 22 2c 70 65 6e 64 69 6e 67 5f 64 6f 77 6e 67 72 61 64 65 5f 72 65 61 63 74 69 76 61 74 65 5f 63 74 61 Data Ascii: ption:"Your workspace subscription has been cancelled and will end on <b>%{cancellation_date}</b>.",pending_downgrade_reactivate_text:"Changed your mind? Don\u2019t panic, it\u2019s easy to get things back up and running.",pending_downgrade_reactivate_cta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49772	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:10 UTC	824	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US
2024-04-24 02:16:11 UTC	743	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:11 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 15pws8_3gcX_gpXzfz2wf9WNUmkK-6PNCyu9NurqkFquLNfEl3iJCQ==
2024-04-24 02:16:11 UTC	15641	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-24 02:16:11 UTC	16384	IN	Data Raw: ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 da 1a 18 17 13 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 05 1a 18 17 df 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 c9 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 0c 1a 18 17 9f 1a 18 17 fe 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 c3 1a 18 17 18 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 20 1a 18 17 99 1a 18 17 d6 1a 18 17 f9 1a 18 17 ff 1a 18 17 ff 1a 18 Data Ascii:
2024-04-24 02:16:11 UTC	9541	IN	Data Raw: ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 96 1a 18 17 01 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 62 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 fc 1a 18 17 47 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 3b 1a 18 17 d1 1a 18 17 ff 1a 18 17 ff 1a 18 Data Ascii: bG;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49775	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	2010	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7327&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
2024-04-24 02:16:11 UTC	816	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:11 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=OgfRct8t40xxC1%2F0%2BY6lvYAPYnZCXSZcgMCA9N8B53DQhfZlG%2FVam5GjrAwZT2G7yVq1ufKqtAzFSjNe2DneuLgnDF7TO%2BCmQWH%2FhZ9HrSXOO1cnBg3nvm4s48pevA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: IyR6bj0genSI3h9ujvBZbIKi87wm85Y40novM9juvwxo3cSwD0xjEg==
2024-04-24 02:16:11 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	1028	OUT	GET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
2024-04-24 02:16:12 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 168399 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:54 GMT ETag: "5439e51f20378de7d73ba350c0b4b85b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BUqLyC689A3ZMd4dqy9MjWz4kAlfgsEBqYen-5KyDpekTXlJLvF6Xg== Age: 752200
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 31 36 5d 2c 7b 36 36 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6f 3d 6e 28 39 33 35 34 32 29 2c 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 75 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 67 3d 4f 62 6a 65 63 74 2e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 4c 28 65 29 3f 44 28 65 2c 22 22 29 3a 48 28 65 29 7d 3a 48 2c 59 3d 54 79 70 65 45 72 72 6f 72 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 59 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 28 4d 28 65 29 29 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 21 3d 3d 65 3a 71 28 65 29 7d 2c Data Ascii: nction(e){return"String"==L(e)?D(e,""):H(e)}:H,Y=TypeError,M=function(e){if(null==e)throw Y("Can't call method on "+e);return e},z=function(e){return J(M(e))},q=function(e){return"function"==typeof e},Q=function(e){return"object"==typeof e?null!==e:q(e)},
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 3d 67 6f 28 22 5c 75 64 66 30 36 5c 75 64 38 33 34 22 29 7c 7c 27 22 5c 5c 75 64 65 61 64 22 27 21 3d 3d 67 6f 28 22 5c 75 64 65 61 64 22 29 7d 29 29 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 75 6f 28 61 72 67 75 6d 65 6e 74 73 29 2c 72 3d 74 3b 69 66 28 28 51 28 74 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 29 26 26 21 6c 65 28 65 29 29 72 65 74 75 72 6e 20 52 6e 28 74 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 71 28 72 29 26 26 28 74 3d 46 28 72 2c 74 68 69 73 2c 65 2c 74 29 29 2c 21 6c 65 28 74 29 29 72 65 74 75 72 6e 20 74 7d 29 2c 6e 5b 31 5d 3d 74 2c 63 6f 28 67 6f 2c 6e 75 6c 6c 2c 6e 29 7d 2c 77 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 66 6f 28 6e 2c 74 2d 31 29 2c Data Ascii: =go("\udf06\ud834")\|\|'"\\udead"'!==go("\udead")})),bo=function(e,t){var n=uo(arguments),r=t;if((Q(t)\|\|void 0!==e)&&!le(e))return Rn(t)\|\|(t=function(e,t){if(q(r)&&(t=F(r,this,e,t)),!le(t))return t}),n[1]=t,co(go,null,n)},wo=function(e,t,n){var r=fo(n,t-1),
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 74 65 26 26 30 3d 3d 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 4a 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 68 61 6e 64 6c 65 64 7c 7c 4a 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 59 73 28 65 2c 65 2e 5f 64 65 66 65 72 72 65 64 73 5b 74 5d 29 3b 65 2e 5f 64 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 Data Ascii: te&&0===e._deferreds.length&&Js._immediateFn((function(){e._handled\|\|Js._unhandledRejectionFn(e._value)}));for(var t=0,n=e._deferreds.length;t<n;t++)Ys(e,e._deferreds[t]);e._deferreds=null}function Qs(e,t,n){this.onFulfilled="function"==typeof e?e:null,th
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 65 79 4d 61 6e 69 66 65 73 74 3f 5b 34 2c 74 68 69 73 2e 6b 65 79 4d 61 6e 69 66 65 73 74 2e 67 65 74 28 29 5d 3a 5b 33 2c 32 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 73 65 6e 74 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6b 65 79 73 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 63 61 63 68 65 2e 61 6c 6c 4b 65 79 73 28 29 5d 3b 63 61 73 65 20 33 3a 74 3d 6e 2e 73 65 6e 74 28 29 2c 6e 2e 6c 61 62 65 6c 3d 34 3b 63 61 73 Data Ascii: on(){var t;return m(this,(function(n){switch(n.label){case 0:return this.keyManifest?[4,this.keyManifest.get()]:[3,2];case 1:return t=null===(e=n.sent())\|\|void 0===e?void 0:e.keys,[3,4];case 2:return[4,this.cache.allKeys()];case 3:t=n.sent(),n.label=4;cas
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 56 30 52 58 4a 79 62 33 49 73 49 46 39 7a 64 58 42 6c 63 69 6b 37 43 69 41 67 49 43 41 67 49 43 41 67 5a 6e 56 75 59 33 52 70 62 32 34 67 55 47 39 77 64 58 42 55 61 57 31 6c 62 33 56 30 52 58 4a 79 62 33 49 6f 63 47 39 77 64 58 41 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 64 6d 46 79 49 46 39 30 61 47 6c 7a 49 44 30 67 58 33 4e 31 63 47 56 79 4c 6d 4e 68 62 47 77 6f 64 47 68 70 63 79 6b 67 66 48 77 67 64 47 68 70 63 7a 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 58 33 52 6f 61 58 4d 75 63 47 39 77 64 58 41 67 50 53 42 77 62 33 42 31 63 44 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 54 32 4a 71 5a 57 4e 30 4c 6e 4e 6c 64 46 42 79 62 33 52 76 64 48 6c 77 5a 55 39 6d 4b 46 39 30 61 47 6c 7a 4c 43 42 51 62 33 42 31 63 Data Ascii: V0RXJyb3IsIF9zdXBlcik7CiAgICAgICAgZnVuY3Rpb24gUG9wdXBUaW1lb3V0RXJyb3IocG9wdXApIHsKICAgICAgICAgICAgdmFyIF90aGlzID0gX3N1cGVyLmNhbGwodGhpcykgfHwgdGhpczsKICAgICAgICAgICAgX3RoaXMucG9wdXAgPSBwb3B1cDsKICAgICAgICAgICAgT2JqZWN0LnNldFByb3RvdHlwZU9mKF90aGlzLCBQb3B1c
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 74 50 61 72 61 6d 73 28 6e 2c 72 2c 6f 2c 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 64 69 72 65 63 74 5f 75 72 69 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 2c 75 3d 74 68 69 73 2e 5f 61 75 74 68 6f 72 69 7a 65 55 72 6c 28 66 28 66 28 7b 7d 2c 63 29 2c 7b 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3a 22 77 65 62 5f 6d 65 73 73 61 67 65 22 7d 29 29 2c 74 2e 70 6f 70 75 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 75 2c 5b 34 2c 68 61 28 66 28 66 28 7b 7d 2c 74 29 2c 7b 74 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 3a 74 2e 74 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 68 6f 72 69 7a 65 54 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 7c 7c 36 30 7d 29 29 5d 3b Data Ascii: tParams(n,r,o,a,this.options.redirect_uri\|\|window.location.origin),u=this._authorizeUrl(f(f({},c),{response_mode:"web_message"})),t.popup.location.href=u,[4,ha(f(f({},t),{timeoutInSeconds:t.timeoutInSeconds\|\|this.options.authorizeTimeoutInSeconds\|\|60}))];
2024-04-24 02:16:12 UTC	13631	IN	Data Raw: 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d 28 30 2c 74 2e 64 65 66 61 75 6c 74 29 28 22 76 33 22 2c 34 38 2c 6e 2e 64 65 66 61 75 6c 74 29 3b 65 2e 64 65 66 61 75 6c 74 3d 6f 7d 29 29 2c 42 3d 66 28 28 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 74 3d 72 28 79 28 29 29 2c 6e 3d 72 28 77 28 29 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d Data Ascii: urn e&&e.__esModule?e:{default:e}}var o=(0,t.default)("v3",48,n.default);e.default=o})),B=f((e=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var t=r(y()),n=r(w());function r(e){return e&&e.__esModule?e:{default:e}}var o=
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 2e 73 6b 69 70 73 2e 6d 61 70 28 72 29 2e 6d 61 70 28 28 65 3d 3e 22 2d 22 2b 65 29 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 2e 65 6e 61 62 6c 65 28 22 22 29 2c 65 7d 2c 74 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 61 76 65 28 65 29 2c 74 2e 6e 61 6d 65 73 70 61 63 65 73 3d 65 2c 74 2e 6e 61 6d 65 73 3d 5b 5d 2c 74 2e 73 6b 69 70 73 3d 5b 5d 3b 6c 65 74 20 6e 2c 72 3d 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 22 29 2e 73 70 6c 69 74 28 2f 5b 5c 73 2c 5d 2b 2f 29 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 6f 3b 6e 2b 2b 29 21 72 5b 6e 5d 7c 7c 28 22 2d 22 3d 3d 3d 28 65 3d 72 5b 6e 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2a 2f 67 2c 22 2e 2a 3f 22 29 29 5b 30 5d Data Ascii: .skips.map(r).map((e=>"-"+e))].join(",");return t.enable(""),e},t.enable=function(e){t.save(e),t.namespaces=e,t.names=[],t.skips=[];let n,r=("string"==typeof e?e:"").split(/[\s,]+/),o=r.length;for(n=0;n<o;n++)!r[n]\|\|("-"===(e=r[n].replace(/\/g,".?"))[0]
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 28 58 2e 70 72 6f 74 6f 63 6f 6c 29 29 3b 65 2e 74 72 61 6e 73 70 6f 72 74 3f 4c 3d 65 2e 74 72 61 6e 73 70 6f 72 74 3a 30 3d 3d 3d 65 2e 6d 61 78 52 65 64 69 72 65 63 74 73 3f 4c 3d 48 3f 67 3a 75 3a 28 65 2e 6d 61 78 52 65 64 69 72 65 63 74 73 26 26 28 47 2e 6d 61 78 52 65 64 69 72 65 63 74 73 3d 65 2e 6d 61 78 52 65 64 69 72 65 63 74 73 29 2c 4c 3d 48 3f 66 3a 6c 29 2c 65 2e 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 3e 2d 31 26 26 28 47 2e 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 3d 65 2e 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 29 2c 65 2e 69 6e 73 65 63 75 72 65 48 54 54 50 50 61 72 73 65 72 26 26 28 47 2e 69 6e 73 65 63 75 72 65 48 54 54 50 50 61 72 73 65 72 3d 65 2e 69 6e 73 65 63 75 72 65 48 54 54 50 50 61 72 73 65 72 29 3b 76 61 72 20 44 3d 4c 2e 72 65 Data Ascii: (X.protocol));e.transport?L=e.transport:0===e.maxRedirects?L=H?g:u:(e.maxRedirects&&(G.maxRedirects=e.maxRedirects),L=H?f:l),e.maxBodyLength>-1&&(G.maxBodyLength=e.maxBodyLength),e.insecureHTTPParser&&(G.insecureHTTPParser=e.insecureHTTPParser);var D=L.re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	1028	OUT	GET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
2024-04-24 02:16:12 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 326856 Connection: close Date: Mon, 15 Apr 2024 05:45:01 GMT Last-Modified: Fri, 12 Apr 2024 16:56:56 GMT ETag: "43a224ce59e07ead9cbb9a19231868d2" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FqBNscFZtmatTpurHnbr3Wv44j1en6vc0Ih5ybS_Q787vqM71DR0KQ== Age: 765072
2024-04-24 02:16:12 UTC	15776	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 33 34 5d 2c 7b 37 31 39 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6e 3d 72 28 39 33 35 34 32 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 39 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 65 3b 69 2e 62 69 67 6e 75 6d 3d 72 28 34 35 36 33 29 2c 69 2e 64 65 66 69 6e 65 3d 72 28 38 36 32 30 29 2e 64 65 66 69 6e 65 2c 69 2e 62 61 73 65 3d 72 28 35 39 34 35 29 2c 69 2e 63 6f 6e 73 74 61 6e 74 73 3d 72 28 34 35 35 34 29 2c 69 2e 64 65 63 6f 64 65 72 73 3d 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 20 69 6e 64 65 66 69 6e 69 74 65 20 6c 65 6e 67 74 68 20 62 6f 64 79 3a 20 22 27 2b 74 68 69 73 2e 74 61 67 2b 27 22 27 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 45 72 72 6f 72 28 6f 29 3f 6f 3a 28 6e 3d 74 2e 6f 66 66 73 65 74 2d 61 2e 6f 66 66 73 65 74 2c 74 2e 72 65 73 74 6f 72 65 28 61 29 2c 74 2e 73 6b 69 70 28 6e 2c 27 46 61 69 6c 65 64 20 74 6f 20 6d 61 74 63 68 20 62 6f 64 79 20 6f 66 3a 20 22 27 2b 65 2b 27 22 27 29 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 6b 69 70 55 6e 74 69 6c 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 3b 3b 29 7b 76 61 72 20 72 3d 64 28 74 2c 65 29 3b 69 66 28 74 2e 69 73 45 72 72 6f 72 28 72 29 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 69 2c 6e 3d 63 28 74 2c 72 2e 70 72 69 6d 69 74 69 76 65 2c Data Ascii: indefinite length body: "'+this.tag+'"');return t.isError(o)?o:(n=t.offset-a.offset,t.restore(a),t.skip(n,'Failed to match body of: "'+e+'"'))},h.prototype._skipUntilEnd=function(t,e){for(;;){var r=d(t,e);if(t.isError(r))return r;var i,n=c(t,r.primitive,
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3e 74 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 75 61 6e 64 28 74 29 3a 74 2e 63 6c 6f 6e 65 28 29 2e 69 75 61 6e 64 28 74 68 69 73 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 75 78 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3e 74 2e 6c 65 6e 67 74 68 3f 28 65 3d 74 68 69 73 2c 72 3d 74 29 3a 28 65 3d 74 2c 72 3d 74 68 69 73 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 68 69 73 2e 77 6f 72 64 73 5b 69 5d 3d 65 2e 77 6f 72 64 73 5b 69 5d 5e 72 2e 77 6f 72 64 73 5b 69 5d 3b 69 66 28 74 68 69 73 21 3d 3d 65 29 66 6f 72 28 3b 69 3c 65 2e 6c 65 6e 67 74 68 Data Ascii: ion(t){return this.length>t.length?this.clone().iuand(t):t.clone().iuand(this)},a.prototype.iuxor=function(t){var e,r;this.length>t.length?(e=this,r=t):(e=t,r=this);for(var i=0;i<r.length;i++)this.words[i]=e.words[i]^r.words[i];if(this!==e)for(;i<e.length
2024-04-24 02:16:12 UTC	15416	IN	Data Raw: 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 28 30 7c 74 68 69 73 2e 77 6f 72 64 73 5b 72 5d 29 2a 74 2c 61 3d 28 36 37 31 30 38 38 36 33 26 6e 29 2b 28 36 37 31 30 38 38 36 33 26 65 29 3b 65 3e 3e 3d 32 36 2c 65 2b 3d 6e 2f 36 37 31 30 38 38 36 34 7c 30 2c 65 2b 3d 61 3e 3e 3e 32 36 2c 74 68 69 73 2e 77 6f 72 64 73 5b 72 5d 3d 36 37 31 30 38 38 36 33 26 61 7d 72 65 74 75 72 6e 20 30 21 3d 3d 65 26 26 28 74 68 69 73 2e 77 6f 72 64 73 5b 72 5d 3d 65 2c 74 68 69 73 2e 6c 65 6e 67 74 68 2b 2b 29 2c 74 68 69 73 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 75 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 6d 75 6c 6e 28 74 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 71 Data Ascii: <this.length;r++){var n=(0\|this.words[r])*t,a=(67108863&n)+(67108863&e);e>>=26,e+=n/67108864\|0,e+=a>>>26,this.words[r]=67108863&a}return 0!==e&&(this.words[r]=e,this.length++),this},a.prototype.muln=function(t){return this.clone().imuln(t)},a.prototype.sq
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 74 68 69 73 2e 5f 76 65 72 69 66 79 32 28 74 2c 65 29 3b 76 61 72 20 72 3d 74 2e 69 73 75 62 28 65 29 3b 72 65 74 75 72 6e 20 72 2e 63 6d 70 6e 28 30 29 3c 30 26 26 72 2e 69 61 64 64 28 74 68 69 73 2e 6d 29 2c 72 7d 2c 4d 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 76 65 72 69 66 79 31 28 74 29 2c 74 68 69 73 2e 69 6d 6f 64 28 74 2e 75 73 68 6c 6e 28 65 29 29 7d 2c 4d 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 75 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 76 65 72 69 66 79 32 28 74 2c 65 29 2c 74 68 69 73 2e 69 6d 6f 64 28 74 2e 69 6d 75 6c 28 65 29 29 7d 2c 4d 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 75 6c 3d 66 75 6e 63 Data Ascii: (t,e){this._verify2(t,e);var r=t.isub(e);return r.cmpn(0)<0&&r.iadd(this.m),r},M.prototype.shl=function(t,e){return this._verify1(t),this.imod(t.ushln(e))},M.prototype.imul=function(t,e){return this._verify2(t,e),this.imod(t.imul(e))},M.prototype.mul=func
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 74 3d 28 68 2b 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 63 2c 4a 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 6e 3d 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 63 2c 59 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 4a 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 68 3d 28 28 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 59 29 7c 30 29 2b 28 6e 3e 3e 3e 31 33 29 7c 30 29 2b 28 67 74 3e 3e 3e 32 36 29 7c 30 2c 67 74 26 3d 36 37 31 30 38 38 36 33 2c 69 3d 4d 61 74 68 2e 69 6d 75 6c 28 53 2c 55 29 2c 6e 3d 28 6e 3d 4d 61 74 68 2e 69 6d 75 6c 28 53 2c 4b 29 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 55 29 7c 30 2c 61 3d 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 4b 29 2c 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 5f 2c 46 29 7c 30 2c 6e 3d 28 6e 3d 6e 2b 4d 61 Data Ascii: t=(h+(i=i+Math.imul(c,J)\|0)\|0)+((8191&(n=(n=n+Math.imul(c,Y)\|0)+Math.imul(u,J)\|0))<<13)\|0;h=((a=a+Math.imul(u,Y)\|0)+(n>>>13)\|0)+(gt>>>26)\|0,gt&=67108863,i=Math.imul(S,U),n=(n=Math.imul(S,K))+Math.imul(k,U)\|0,a=Math.imul(k,K),i=i+Math.imul(_,F)\|0,n=(n=n+Ma
2024-04-24 02:16:12 UTC	2927	IN	Data Raw: 6c 65 6e 67 74 68 2d 31 5d 3b 30 21 3d 3d 28 72 3d 32 36 2d 74 68 69 73 2e 5f 63 6f 75 6e 74 42 69 74 73 28 6f 29 29 26 26 28 6e 3d 6e 2e 75 73 68 6c 6e 28 72 29 2c 69 2e 69 75 73 68 6c 6e 28 72 29 2c 6f 3d 30 7c 6e 2e 77 6f 72 64 73 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 29 3b 76 61 72 20 66 2c 73 3d 69 2e 6c 65 6e 67 74 68 2d 6e 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6d 6f 64 22 21 3d 3d 65 29 7b 28 66 3d 6e 65 77 20 61 28 6e 75 6c 6c 29 29 2e 6c 65 6e 67 74 68 3d 73 2b 31 2c 66 2e 77 6f 72 64 73 3d 6e 65 77 20 41 72 72 61 79 28 66 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 66 2e 77 6f 72 64 73 5b 68 5d 3d 30 7d 76 61 72 20 64 3d 69 2e 63 6c 6f 6e 65 28 29 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c Data Ascii: length-1];0!==(r=26-this._countBits(o))&&(n=n.ushln(r),i.iushln(r),o=0\|n.words[n.length-1]);var f,s=i.length-n.length;if("mod"!==e){(f=new a(null)).length=s+1,f.words=new Array(f.length);for(var h=0;h<f.length;h++)f.words[h]=0}var d=i.clone()._ishlnsubmul
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 69 73 75 62 28 73 29 29 3a 28 72 2e 69 73 75 62 28 65 29 2c 66 2e 69 73 75 62 28 6e 29 2c 73 2e 69 73 75 62 28 6f 29 29 7d 72 65 74 75 72 6e 7b 61 3a 66 2c 62 3a 73 2c 67 63 64 3a 72 2e 69 75 73 68 6c 6e 28 68 29 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 76 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 30 3d 3d 3d 74 2e 6e 65 67 61 74 69 76 65 29 2c 69 28 21 74 2e 69 73 5a 65 72 6f 28 29 29 3b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 74 2e 63 6c 6f 6e 65 28 29 3b 65 3d 30 21 3d 3d 65 2e 6e 65 67 61 74 69 76 65 3f 65 2e 75 6d 6f 64 28 74 29 3a 65 2e 63 6c 6f 6e 65 28 29 3b 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 6e 65 77 20 61 28 31 29 2c 66 3d 6e 65 77 20 61 28 30 29 2c 73 3d 72 2e 63 6c 6f 6e 65 28 29 3b 65 2e 63 6d 70 6e 28 31 29 3e 30 26 26 Data Ascii: isub(s)):(r.isub(e),f.isub(n),s.isub(o))}return{a:f,b:s,gcd:r.iushln(h)}},a.prototype._invmp=function(t){i(0===t.negative),i(!t.isZero());var e=this,r=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var n,o=new a(1),f=new a(0),s=r.clone();e.cmpn(1)>0&&
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 75 74 68 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 64 65 63 72 79 70 74 7c 7c 21 6e 2e 69 73 42 75 66 66 65 72 28 74 68 69 73 2e 5f 61 75 74 68 54 61 67 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 67 65 74 20 61 75 74 68 20 74 61 67 20 69 6e 20 75 6e 73 75 70 70 6f 72 74 65 64 20 73 74 61 74 65 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 75 74 68 54 61 67 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 75 74 68 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 68 69 73 2e 5f 64 65 63 72 79 70 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 73 65 74 20 Data Ascii: .prototype.getAuthTag=function(){if(this._decrypt\|\|!n.isBuffer(this._authTag))throw new Error("Attempting to get auth tag in unsupported state");return this._authTag},c.prototype.setAuthTag=function(t){if(!this._decrypt)throw new Error("Attempting to set
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 69 6e 61 6c 26 26 28 74 68 69 73 2e 5f 5f 66 69 6e 61 6c 3d 74 68 69 73 2e 5f 66 69 6e 61 6c 2c 74 68 69 73 2e 5f 66 69 6e 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 7d 72 28 31 31 34 30 29 28 6f 2c 6e 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 69 2e 66 72 6f 6d 28 74 2c 65 29 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 75 70 64 61 74 65 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 68 4d 6f 64 65 3f 74 68 69 73 3a 28 72 26 26 28 6e 3d 74 68 69 73 2e 5f 74 6f 53 74 72 69 6e 67 28 6e 2c 72 29 29 2c 6e 29 7d 2c 6f Data Ascii: inal&&(this.__final=this._final,this._final=null),this._decoder=null,this._encoding=null}r(1140)(o,n),o.prototype.update=function(t,e,r){"string"===typeof t&&(t=i.from(t,e));var n=this._update(t);return this.hashMode?this:(r&&(n=this._toString(n,r)),n)},o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	1024	OUT	GET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
2024-04-24 02:16:12 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 137498 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:54 GMT ETag: "84a46d0b6196ffa368647e975120e17b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eu7gMMxPGKViY9XI2BnTTvtwkni_kgmN4PdDfjEPBmsbuvvRFxcNDw== Age: 752200
2024-04-24 02:16:12 UTC	15776	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 32 37 5d 2c 7b 37 33 34 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 33 35 34 32 29 2c 6f 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 39 39 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 69 66 28 74 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 72 2c 6e 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeErro
2024-04-24 02:16:12 UTC	2122	IN	Data Raw: 28 6e 3d 6e 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 72 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 29 2c 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 28 7b 7d 2c 65 2c 7b 63 75 73 74 6f 6d 49 6e 73 70 65 63 74 3a 21 31 2c 64 65 70 74 68 3a 30 7d 29 29 7d 7d 5d 29 2c 65 7d 28 75 28 45 72 72 6f 72 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6a 7d 2c 39 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 Data Ascii: (n=n.concat(Object.getOwnPropertySymbols(r).filter((function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})))),n.forEach((function(e){o(t,e,r[e])}))}return t}({},e,{customInspect:!1,depth:0}))}}]),e}(u(Error));t.exports=j},977:function(t,e,r)
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 20 62 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 72 3d 74 2e 6c 65 6e 67 74 68 29 2c 74 2e 73 75 62 73 74 72 69 6e 67 28 72 2d 65 2e 6c 65 6e 67 74 68 2c 72 29 3d 3d 3d 65 7d 28 74 2c 22 20 61 72 67 75 6d 65 6e 74 22 29 29 61 3d 22 54 68 65 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 6c 28 65 2c 22 74 79 70 65 22 29 29 3b 65 6c 73 65 7b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 72 3d 30 29 2c 21 28 72 2b 65 2e 6c 65 6e 67 74 68 3e 74 2e 6c 65 6e 67 74 68 29 26 26 2d 31 Data Ascii: be",function(t,e,r){return(void 0===r\|\|r>t.length)&&(r=t.length),t.substring(r-e.length,r)===e}(t," argument"))a="The ".concat(t," ").concat(i," ").concat(l(e,"type"));else{var u=function(t,e,r){return"number"!==typeof r&&(r=0),!(r+e.length>t.length)&&-1
2024-04-24 02:16:12 UTC	1514	IN	Data Raw: 61 6c 6c 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 61 6c 6c 22 5d 2c 22 25 50 72 6f 6d 69 73 65 5f 72 65 6a 65 63 74 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 72 65 6a 65 63 74 22 5d 2c 22 25 50 72 6f 6d 69 73 65 5f 72 65 73 6f 6c 76 65 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 72 65 73 6f 6c 76 65 22 5d 2c 22 25 52 61 6e 67 65 45 72 72 6f 72 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 52 61 6e 67 65 45 72 72 6f 72 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 52 65 67 45 78 70 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 52 65 67 45 78 70 22 2c 22 70 72 6f 74 6f 74 79 70 Data Ascii: all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototyp
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6f 29 7b 6e 5b 6e 2e 6c 65 6e 67 74 68 5d 3d 72 3f 45 28 6f 2c 6a 2c 22 24 31 22 29 3a 65 7c 7c 74 7d 29 29 2c 6e 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 3d 74 3b 69 66 28 6d 28 62 2c 6e 29 26 26 28 6e 3d 22 25 22 2b 28 72 3d 62 5b 6e 5d 29 5b 30 5d 2b 22 25 22 29 2c 6d 28 68 2c 6e 29 29 7b 76 61 72 20 69 3d 68 5b 6e 5d 3b 69 66 28 69 3d 3d 3d 79 26 26 28 69 3d 67 28 6e 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 69 26 26 21 65 29 74 68 72 6f 77 20 6e 65 77 20 61 28 22 69 6e 74 72 69 6e 73 69 63 20 22 2b 74 2b 22 20 65 78 69 73 74 73 2c 20 62 75 74 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 20 50 6c 65 61 73 65 20 66 69 6c 65 20 61 6e 20 69 73 73 Data Ascii: ction(t,e,r,o){n[n.length]=r?E(o,j,"$1"):e\|\|t})),n},x=function(t,e){var r,n=t;if(m(b,n)&&(n="%"+(r=b[n])[0]+"%"),m(h,n)){var i=h[n];if(i===y&&(i=g(n)),"undefined"===typeof i&&!e)throw new a("intrinsic "+t+" exists, but is not available. Please file an iss
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 2e 66 6f 72 6d 61 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 3b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 25 73 20 25 64 3a 20 25 73 22 2c 74 2c 72 2c 6e 29 7d 7d 65 6c 73 65 20 61 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 7d 2c 65 2e 69 6e 73 70 65 63 74 3d 73 2c 73 2e 63 6f 6c 6f 72 73 3d 7b 62 6f 6c 64 3a 5b 31 2c 32 32 5d 2c 69 74 61 6c 69 63 3a 5b 33 2c 32 33 5d 2c 75 6e 64 65 72 6c 69 6e 65 3a 5b 34 2c 32 34 5d 2c 69 6e 76 65 72 73 65 3a 5b 37 2c 32 37 5d 2c 77 68 69 74 65 3a 5b 33 37 2c 33 39 5d 2c 67 72 65 79 3a 5b 39 30 2c 33 39 5d 2c 62 6c 61 63 6b 3a 5b 33 30 2c 33 39 5d 2c 62 6c 75 65 3a 5b 33 34 2c 33 39 5d 2c 63 79 61 6e 3a 5b 33 Data Ascii: unction(){var n=e.format.apply(e,arguments);console.error("%s %d: %s",t,r,n)}}else a[t]=function(){};return a[t]},e.inspect=s,s.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[3
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 72 26 26 21 72 3f 28 65 3d 61 2e 64 65 63 6f 64 65 72 2e 77 72 69 74 65 28 65 29 2c 61 2e 6f 62 6a 65 63 74 4d 6f 64 65 7c 7c 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 3f 50 28 74 2c 61 2c 65 2c 21 31 29 3a 49 28 74 2c 61 29 29 3a 50 28 74 2c 61 2c 65 2c 21 31 29 7d 65 6c 73 65 20 6e 7c 7c 28 61 2e 72 65 61 64 69 6e 67 3d 21 31 2c 49 28 74 2c 61 29 29 3b 72 65 74 75 72 6e 21 61 2e 65 6e 64 65 64 26 26 28 61 2e 6c 65 6e 67 74 68 3c 61 2e 68 69 67 68 57 61 74 65 72 4d 61 72 6b 7c 7c 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 65 2c 72 2c 6e 29 7b 65 2e 66 6c 6f 77 69 6e 67 26 26 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 21 65 2e 73 79 6e 63 3f 28 65 2e 61 77 61 69 74 44 72 61 69 6e 3d 30 2c 74 2e 65 6d 69 74 28 22 64 61 74 61 Data Ascii: r&&!r?(e=a.decoder.write(e),a.objectMode\|\|0!==e.length?P(t,a,e,!1):I(t,a)):P(t,a,e,!1)}else n\|\|(a.reading=!1,I(t,a));return!a.ended&&(a.length<a.highWaterMark\|\|0===a.length)}function P(t,e,r,n){e.flowing&&0===e.length&&!e.sync?(e.awaitDrain=0,t.emit("data
2024-04-24 02:16:12 UTC	4542	IN	Data Raw: 75 66 66 65 72 22 5d 2c 72 29 29 2c 21 69 7c 7c 28 4f 28 74 2c 69 29 2c 6e 2e 6e 65 78 74 54 69 63 6b 28 6f 2c 69 29 2c 21 31 29 7d 28 74 68 69 73 2c 6f 2c 74 2c 72 29 29 26 26 28 6f 2e 70 65 6e 64 69 6e 67 63 62 2b 2b 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 72 29 7b 76 61 72 20 61 3d 78 28 65 2c 6e 2c 6f 29 3b 6e 21 3d 3d 61 26 26 28 72 3d 21 30 2c 6f 3d 22 62 75 66 66 65 72 22 2c 6e 3d 61 29 7d 76 61 72 20 63 3d 65 2e 6f 62 6a 65 63 74 4d 6f 64 65 3f 31 3a 6e 2e 6c 65 6e 67 74 68 3b 65 2e 6c 65 6e 67 74 68 2b 3d 63 3b 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 3c 65 2e 68 69 67 68 57 61 74 65 72 4d 61 72 6b 3b 75 7c 7c 28 65 2e 6e 65 65 64 44 72 61 69 6e 3d 21 30 29 3b 69 66 28 65 2e 77 72 69 74 69 6e 67 7c Data Ascii: uffer"],r)),!i\|\|(O(t,i),n.nextTick(o,i),!1)}(this,o,t,r))&&(o.pendingcb++,i=function(t,e,r,n,o,i){if(!r){var a=x(e,n,o);n!==a&&(r=!0,o="buffer",n=a)}var c=e.objectMode?1:n.length;e.length+=c;var u=e.length<e.highWaterMark;u\|\|(e.needDrain=!0);if(e.writing\|
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 76 61 72 20 61 3d 72 28 33 30 30 29 2e 42 75 66 66 65 72 2c 63 3d 72 28 38 33 37 29 2e 69 6e 73 70 65 63 74 2c 75 3d 63 26 26 63 2e 63 75 73 74 6f 6d 7c 7c 22 69 6e 73 70 65 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 72 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 70 79 2e 63 61 6c 6c 28 74 2c 65 2c 72 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 Data Ascii: "value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}var a=r(300).Buffer,c=r(837).inspect,u=c&&c.custom\|\|"inspect";function s(t,e,r){a.prototype.copy.call(t,e,r)}t.exports=function(){function t(){!function(t,e){if(!(t instanceof e))throw new Typ
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 65 29 3d 3d 3d 65 3f 65 3a 74 68 69 73 7d 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 74 2c 63 2e 63 6f 6e 63 61 74 28 72 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 2c 73 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 69 2e 6c 65 6e 67 74 68 2d 63 2e 6c 65 6e 67 74 68 29 2c 66 3d 5b 5d 2c 6c 3d 30 3b 6c 3c 73 3b 6c 2b 2b 29 66 2e 70 75 73 68 28 22 24 22 2b 6c 29 3b 69 66 28 61 3d 46 75 6e 63 74 69 6f 6e 28 22 62 69 6e 64 65 72 22 2c 22 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 22 2b 66 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 7b 20 72 65 74 75 72 6e 20 62 69 6e 64 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 20 7d 22 29 28 75 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: );return Object(e)===e?e:this}return i.apply(t,c.concat(r.call(arguments)))},s=Math.max(0,i.length-c.length),f=[],l=0;l<s;l++)f.push("$"+l);if(a=Function("binder","return function ("+f.join(",")+"){ return binder.apply(this,arguments); }")(u),i.prototype)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	1024	OUT	GET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; _ga=GA1.1.804451605.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D
2024-04-24 02:16:12 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 179 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:56 GMT ETag: "67fa077ba9aac616309835ec3d822dbb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ofO-clCJXpnfhJDtWFI5waH8rrDA8MacTbX0fyAwZTGI6t13B1nYgA== Age: 752200
2024-04-24 02:16:12 UTC	179	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 30 30 5d 2c 7b 37 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 34 39 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 39 37 31 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 39 36 37 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 30 32 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 35 38 31 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49781	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:11 UTC	2589	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969
2024-04-24 02:16:12 UTC	899	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:12 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=Y2UJJA6oPVdxiOMpTezXE%2BPAQ9Dnp3uEEOj3WEEUO0BcZbBR%2F8thcUC6OjgSFtSQbcgAAcHnd0quX5IyrNxyfOhKB56nyVcPFp8mpxWcB5Cq44d%2FCfsqy%2FFzqxTGKA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 c9ace2b726e0783070e724731380bbaa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: I919ZxRBprIKtgUEWMa9muRo10TnugGvShgnVLyY9_3P0_er6J_cJg==
2024-04-24 02:16:12 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	1547	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804
2024-04-24 02:16:12 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:16:12 UTC	1387	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:16:12 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:16:12 GMT; secure Set-Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-6ckhv-203427 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 29621aa4db0de5d6c94f0bc4a08d7365 X-Runtime: 0.005348 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CswJ1L5PfG_n-RfwEppfOuSdWt4OIlVMXUiwySK9Xb4WVPdma5eEPw==
2024-04-24 02:16:12 UTC	643	IN	Data Raw: 32 37 63 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 Data Ascii: 27c{"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd
2024-04-24 02:16:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49784	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	2607	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; _ga_0M019DTWVR=GS1.1.1713924969.1.0.1713924969.0.0.1838502804; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969
2024-04-24 02:16:12 UTC	893	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:12 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0391390c8a406ba1a7bd713ed630aaa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: N493eKXstRAyhv9oSX4RnDCN6X-0u8r-2bqnBULBfEVX0H_uvEZFZA==
2024-04-24 02:16:12 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49787	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:12 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27984 Connection: close Date: Fri, 22 Dec 2023 07:35:49 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 21 Dec 2023 20:42:47 GMT ETag: "0e2ee02874d250d7602ae70e15e174c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KDg4KuWnWIoS0py1LvTYYSCYfHpa0OrHz_8oaNWGwwasMPTYUg--OA== Age: 10694424
2024-04-24 02:16:12 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 50 00 12 00 00 00 01 17 28 00 00 6c e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 38 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 10 81 f8 0e 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 86 7d 1b 45 fe 67 70 6e 3a 7e e9 51 91 ba ab 22 73 fb dd 17 34 3c d9 36 e9 dd ad 4e 4a 96 21 61 c2 1d 0f ce 03 11 f7 4f ef 5e f6 ff ff ff e7 25 95 38 2c cd 59 da 6b 0f 86 e1 b7 87 88 5c ce 3c 10 81 90 10 d1 b3 97 90 69 fa 88 de c7 0c cf 4c 05 86 e0 45 6b e1 a3 dd a9 9a 44 d4 b0 f2 cd e4 7b ec cb 5c 38 4e 74 f4 5d 74 e4 49 3e 6b 36 af 7c 67 be a0 20 33 0b b3 cc 1c 19 49 1c ee 54 b8 48 38 77 7a 3a bd ee 05 d7 89 ed ea ec 51 b3 0f 67 73 39 3b 64 53 ea 50 Data Ascii: wOF2mP(l?FFTM48p`nrW&6$H \~}Egpn:~Q"s4<6NJ!aO^%8,Yk\<iLEkD{\8Nt]tI>k6\|g 3ITH8wz:Qgs9;dSP
2024-04-24 02:16:12 UTC	12353	IN	Data Raw: 6e 17 1d 85 42 20 70 b8 c4 c2 7f 23 da 9b 76 0c 9a b8 e4 f4 5c 3f 32 50 cf 06 e5 8d 43 ed fd 03 b3 9b 2a 72 c9 71 ab c6 6d b7 ea 8c b4 f9 ab 24 2f 2c bf 75 f0 c1 49 9e d4 1a 83 b4 db 63 60 30 f5 41 e6 c3 a1 d1 05 43 68 36 0a 15 b8 13 bb 53 1e f8 2e f6 5d b9 90 bf d4 7e c3 a9 3a 73 ea 84 f7 c4 f9 f8 f9 e3 de e3 e8 38 ee cc cc 13 be 13 85 27 3c 27 ce c4 cf 1c f7 1c 2f 3c ee 3b 3e 19 e7 09 7b a8 16 39 8b 4a 41 c9 2d 54 1a 20 47 51 a8 2c 39 50 56 2e 28 58 75 4c 8c 7e 39 fa 75 aa 6a d7 83 d6 bd e2 ab e5 6f f4 54 a5 62 8d cf c6 2a de aa e6 7e 7f 93 10 d4 a8 89 c1 6f be e7 70 ff f9 90 10 54 6b f0 c1 0f fe e1 3a c4 52 9b 07 94 da c5 62 a9 1d f4 48 6d 88 aa f5 8f 05 65 1f bb d9 0e b6 04 2f 9a 7c 90 ac 7c a9 65 ff 04 8e f4 3b 95 d9 bf c5 51 11 f7 30 a3 3c 96 8c 5e Data Ascii: nB p#v\?2PCrqm$/,uIc`0ACh6S.]~:s8'<'/<;>{9JA-T GQ,9PV.(XuL~9ujoTb~opTk:RbHme/\|\|e;Q0<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	634	OUT	GET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:12 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 35884 Connection: close Date: Sat, 02 Mar 2024 15:37:01 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 02 Mar 2024 02:14:05 GMT ETag: "51cbd7213ae115ed59c3f2874014ab69" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HekZMm6bwL1DWmhK31H-n-R3UTUtN8MwZSnN1iOPAJK6lx-xLS99YA== Age: 4531152
2024-04-24 02:16:12 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 8c 2c 00 12 00 00 00 01 7b 9c 00 00 8b c1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 82 0c 1b 81 86 1c 1c 91 76 06 60 00 87 6e 08 34 09 9c 15 11 08 0a 84 80 20 83 c1 32 0b 87 1c 00 01 36 02 24 03 8e 22 04 20 05 86 27 07 96 62 0c 81 27 5b 56 57 91 00 cd c5 3c d1 67 c4 3e 4a b7 21 50 1d cd ad ab 1a 55 48 09 f3 ac db e1 b6 51 d4 79 eb cc cc cb 2b d8 b1 0f 01 e7 41 d0 fd cc 2b 6a d9 ff ff ff ff 5b 92 45 8c ad dd 41 66 f6 ee 38 3a 80 b2 04 5f 35 d3 7a 4c 29 8c 5e 46 97 72 b8 94 68 a9 24 4b 96 87 9a dc 60 e3 5b cb d9 a6 32 d3 16 36 ba 6a c5 e6 75 b0 e4 5a 7f df 2b 52 d3 98 dd c7 31 7f 66 cb 36 a7 7a fc 02 69 cd 0b 60 49 48 52 76 e1 06 c8 6a 13 2d 5c 44 78 92 44 24 5e 88 52 c8 93 9a Data Ascii: wOF2,{?FFTMv`n4 26$" 'b'[VW<g>J!PUHQy+A+j[EAf8:_5zL)^Frh$K`[26juZ+R1f6zi`IHRvj-\DxD$^R
2024-04-24 02:16:12 UTC	16384	IN	Data Raw: 9a 00 b7 9c 38 3c 3c 1e 2e ad 5b e7 74 f5 d6 35 ba 37 af f7 d5 49 9a 21 cf fb a9 45 95 d9 86 9a 71 5b bb 0a 04 ed d5 26 8d 55 17 3f c0 3f c0 fb ea ff d2 7f f6 c0 86 cd 7f ef 3f f8 f5 6e 4a c7 82 b6 df 36 b5 2e 6b 4b 69 54 3d c6 ea 06 c0 af 3f 2d 1a c8 dc cf 7b d9 f0 3c f1 0c d9 55 65 b4 79 52 39 02 93 70 4e cc 3c 93 40 c0 a1 57 16 df 5c 41 bb 74 11 cd 89 5e ea 29 51 76 2e 7e d1 59 e1 1e de 57 3f f5 35 e2 a8 33 7b 3c 0b b9 93 f0 bb 46 8d c7 aa aa d7 ba 9d eb eb eb b2 37 6c f0 d5 cc 77 d3 fa 09 d9 a5 05 59 fa 4a 3d af d5 5f 2c 58 5e 61 53 a5 3c 79 18 10 50 15 c2 d0 dc 49 b2 13 6b 01 6b 4f b0 6e 30 6e b0 2e 9d 54 97 a4 a2 cd 41 06 33 2e b1 ff bc 45 fc c9 be 24 13 7e cf 01 0d 5f 79 07 f8 03 bd 00 22 d5 94 fa 6c 72 48 7b 20 03 38 21 78 fb 09 e6 23 af 23 c7 22 Data Ascii: 8<<.[t57I!Eq[&U???nJ6.kKiT=?-{<UeyR9pN<@W\At^)Qv.~YW?53{<F7lwYJ=_,X^aS<yPIkkOn0n.TA3.E$~_y"lrH{ 8!x##"
2024-04-24 02:16:12 UTC	3868	IN	Data Raw: ae 26 1f e4 7b 9d 4c 09 50 4f 2f de ad a4 a0 93 01 bc c5 09 23 8b 7c dc 7a 59 81 ad a0 d8 96 c6 9c 79 03 5e d0 26 fb 1d 57 96 ad 6e 6c 2d f7 48 e1 7d 4d 1b 8e c5 66 f2 0c 8f 41 e9 ab 29 1f 67 7a ab 31 e2 1b a8 e9 62 0a 22 d1 03 3e 46 5b 2d a4 d8 ff 38 4f a8 f7 52 0a ed 3a 86 a9 53 d0 30 0f 91 30 c3 7f de 63 dc d6 df dd 92 df 99 71 41 9b f2 09 27 f5 b5 67 6a aa 84 53 f8 13 9c 4b 48 31 09 69 26 30 59 51 b2 23 d0 39 96 11 2b 55 09 81 ad 5d 61 32 0b f4 90 cf 78 f9 eb 15 91 b1 bd 66 a1 8a 65 39 9b 9b dc 6c e4 bd b2 4d a7 ba 9a 30 d7 39 de 65 d2 8a ea 87 7d 58 1e 58 8f e5 ed ef 63 8a 6b b1 77 92 14 3a 59 8a 23 27 93 35 49 40 1e 1c 0d cf 83 af 5d 8c 27 f3 c9 d6 e7 12 db 9a ec 08 6c 2a b5 60 12 b4 86 49 68 0e 9a 65 8a 2b ca 39 c8 9d 2f 24 4c 39 92 91 50 77 89 b9 Data Ascii: &{LPO/#\|zYy^&Wnl-H}MfA)gz1b">F[-8OR:S00cqA'gjSKH1i&0YQ#9+U]a2xfe9lM09e}XXckw:Y#'5I@]'l*`Ihe+9/$L9Pw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49785	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	2660	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; FPLC=t06ADxaIOPzyv2eR4MdQUwfVBGCkTpHV6tz5%2BeN%2FYx8rRTNx6EoTRD2%2FAw%2FatW%2BBcFC4WR4lzMASWqmXeoY7hQk7fns8BnLb%2Bvx3O2wL0oG10U2YEii7psGRjjRdmw%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804
2024-04-24 02:16:12 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:12 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7776000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 fe624e5ec67fb7582d7a2f57fd2d7078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: Cw10XXyvGk0QGGG5lHE_UbRiX0X1cXXiB49yIzp33Ba6T30kGl472Q==
2024-04-24 02:16:12 UTC	836	IN	Data Raw: 33 33 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 38 37 33 32 34 34 37 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 Data Ascii: 33devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7
2024-04-24 02:16:12 UTC	768	IN	Data Raw: 32 66 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 32 38 37 33 32 34 34 37 39 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 25 Data Ascii: 2f9event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%
2024-04-24 02:16:12 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49789	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	1170	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPLC=OgfRct8t40xxC1%2F0%2BY6lvYAPYnZCXSZcgMCA9N8B53DQhfZlG%2FVam5GjrAwZT2G7yVq1ufKqtAzFSjNe2DneuLgnDF7TO%2BCmQWH%2FhZ9HrSXOO1cnBg3nvm4s48pevA%3D%3D
2024-04-24 02:16:13 UTC	743	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:12 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YTBo-p67X1UpxWrPirdzgkpCEpD3xvs7AbN1azZnAaH4KWZ42cAPKQ==
2024-04-24 02:16:13 UTC	9594	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-24 02:16:13 UTC	2141	IN	Data Raw: ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff Data Ascii:
2024-04-24 02:16:13 UTC	12792	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii:
2024-04-24 02:16:13 UTC	12541	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii:
2024-04-24 02:16:13 UTC	4498	IN	Data Raw: ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49791	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	2397	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8932&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPLC=Y2UJJA6oPVdxiOMpTezXE%2BPAQ9Dnp3uEEOj3WEEUO0BcZbBR%2F8thcUC6OjgSFtSQbcgAAcHnd0quX5IyrNxyfOhKB56nyVcPFp8mpxWcB5Cq44d%2FCfsqy%2FFzqxTGKA%3D%3D
2024-04-24 02:16:13 UTC	802	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:12 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=m1KrkFF%2F4vGcLd7WIvnSBH6Qbm3MHiRGhQJTaAqm6enqL0naAdOLj2nXYQ3QDp6f6wzfmGiEJ98hbcbrvzDkMsTXpVWW4UO%2B8HF8K3n1bReqFKUCCLAELAQRSZMmcA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: lYM6g15bRYzrv-ig7E8GunhgM87ZLu1SQkop1xOMKMU-meE1AYJdeQ==
2024-04-24 02:16:13 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49792	142.250.101.156	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:12 UTC	863	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&gjid=152334407&_gid=365053505.1713924969&_u=6GDAAUABAAAAICgFKgC~&z=47950021 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://wetransfer.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:13 UTC	592	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:13 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	1252	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D
2024-04-24 02:16:14 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:16:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w8jdp-204571 X-Request-Id: a42337485b6a3f84c361e7509cc4edfa X-Runtime: 0.000987 X-Cache: Error from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rZHBd0Jlrdgc27zkVLY_-TrPInu9cNKRoYSQFdnyvWSXSpl3TEFUwA==
2024-04-24 02:16:14 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	52.85.204.136	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	530	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:14 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3e720c4eaac99cf5867e4a8a49dc59ca.cloudfront.net (CloudFront), 1.1 202a531bf43fbb0571a227d5ba4e11ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C4 Date: Wed, 24 Apr 2024 02:16:14 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: ZHnyUcRfDbrkbh0jZJoYOkoN4P9DZggiej7XsyI176A9MP1svNn-cg==
2024-04-24 02:16:14 UTC	13289	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49795	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	2422	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713924966259&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&sid=1713924969&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A08.015%2B02%3A00&epn.hit_timestamp_unix=1713924968015&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=8933&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D
2024-04-24 02:16:14 UTC	806	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:14 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 c9ace2b726e0783070e724731380bbaa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 7cNntT3Fiqn0QtziNNHphIyALA65RQU-P9zQFZnVUrPqgur9FYohoA==
2024-04-24 02:16:14 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49796	31.13.70.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:14 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 02:16:14 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 02:16:14 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 02:16:14 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-24 02:16:14 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-24 02:16:14 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49794	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	2487	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924966259&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=4046906.1713924969&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713924966259&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A16%3A11.099%2B02%3A00&epn.hit_timestamp_unix=1713924971099&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&_et=1715&tfd=9044&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; FPLC=E%2FsPzZgaaLTiJ6uqdKy4LthF3tZuGnYfYE6sjvnE8CWd3B85YTF6gsrcrItxviWstNIPQJU82rHWQWdVegC4XFhaKMAcuIko5KNtBxO5dzBsz6qL9Gjzt1bt59aVCQ%3D%3D; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19
2024-04-24 02:16:14 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:14 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775998; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 dfcab4e7aac7e17a0524fce2d56dd444.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: j42wykMPwG-wEj905Tnm7u7YzixkQkm7hF60_7wIaxakltlOtOVLQQ==
2024-04-24 02:16:14 UTC	1593	IN	Data Raw: 36 33 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 36 33 37 35 33 33 36 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 Data Ascii: 632event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=63753366;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9
2024-04-24 02:16:14 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49798	18.154.206.87	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	573	OUT	GET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/1.1 Host: public.profitwell.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:14 UTC	580	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35730 Connection: close Last-Modified: Thu, 21 Dec 2023 14:58:22 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: uxIt1SCydrYnaOCuzhsDaHENAdMuSyNO Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:15 GMT ETag: "40097cdf413c1f1f303c66489742cb44" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7fa1cf564cbbac2b29dcfb38f6cc0b5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: MdMqjeHLJ66LvDk1rQVjyvBDqRn_IjhKEAkkn0OtiIv_y5XPcFoERw==
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 41 6e 6f 6e 79 6d 6f 75 73 43 75 73 74 6f 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 65 20 32 3a 72 65 74 75 72 6e 20 73 3d 69 2e 73 65 6e 74 28 29 2c 72 28 73 29 2c 5b 33 2c 33 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 53 63 72 69 70 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 72 6f 66 69 74 77 65 6c 6c 2d 6a 73 22 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 74 68 69 73 2e 64 69 67 65 73 74 41 75 74 68 44 61 74 61 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 75 73 74 6f 6d 53 74 79 6c 65 73 2e 73 65 74 43 75 73 74 6f Data Ascii: e 2:return s=i.sent(),r(s),[3,3];case 3:return[2]}}))}))},t.prototype.digestScriptDataAttributes=function(){var t=document.getElementById("profitwell-js");null!==t&&this.digestAuthDataAttribute(t)},t.prototype.styles=function(t){this.customStyles.setCusto
2024-04-24 02:16:14 UTC	2410	IN	Data Raw: 4a 73 56 31 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 74 61 69 6e 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 53 65 6e 73 69 6e 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6e 73 69 6e 67 55 72 6c 2b 22 64 6f 74 6a 73 2f 76 31 2f 22 2b 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 53 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 69 6e 63 6c 75 64 65 73 28 22 3f 22 29 3f 22 26 22 3a 22 3f 22 3b 72 65 74 75 72 6e 22 22 2b 74 2b 72 2b 22 63 75 73 74 6f 6d 5f 73 74 79 6c 65 73 3d 22 2b 65 7d 2c 74 7d 28 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e Data Ascii: JsV1Url=function(t){return this.retainUrl+"dotjs/v1/"+t},t.prototype.buildSensingUrl=function(t){return this.sensingUrl+"dotjs/v1/"+t},t.prototype.addCustomStyles=function(t,e){var r=t.includes("?")?"&":"?";return""+t+r+"custom_styles="+e},t}(),O=function
2024-04-24 02:16:14 UTC	552	IN	Data Raw: 29 29 2c 74 29 2c 7b 64 69 73 70 6c 61 79 3a 22 75 6e 73 65 74 22 7d 29 2c 6e 3d 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 49 46 72 61 6d 65 28 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 6e 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 69 2c 65 5b 69 5d 29 7d 2c 74 7d 28 29 2c 44 3d 41 2e 62 75 69 6c 64 53 69 6e 67 6c 65 44 6f 6d 61 69 6e 28 29 2c 4e 3d 6e 65 77 20 53 2c 46 3d 6e 65 77 20 62 28 4e 29 2c 52 3d 6e 65 77 20 5f 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 69 66 28 65 2e 70 72 6f 66 69 74 77 65 6c 6c 2e 69 73 4c 6f 61 64 65 64 29 65 2e 70 72 6f 66 69 74 77 65 6c 6c 28 22 64 69 67 65 73 74 53 63 72 69 70 74 44 61 74 61 41 74 74 72 69 62 75 74 65 73 22 Data Ascii: )),t),{display:"unset"}),n=this.getContentIFrame();if(null!==n)for(var i in e)n.style.setProperty(i,e[i])},t}(),D=A.buildSingleDomain(),N=new S,F=new b(N),R=new _;!function(t){var e=window;if(e.profitwell.isLoaded)e.profitwell("digestScriptDataAttributes"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	13.226.225.77	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	535	OUT	GET /sdk/3.0/td.min.js HTTP/1.1 Host: cdn.treasuredata.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:14 UTC	583	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 58921 Connection: close Date: Sun, 31 Dec 2023 04:48:46 GMT Last-Modified: Mon, 05 Jul 2021 08:58:13 GMT Etag: "4b9abb36767431f05495228eb82edf01" Cache-Control: public, max-age=315360000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 02b9f097e6bccd6a8d89ebf056435cb4.cloudfront.net (CloudFront) Age: 9926848 Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: LAX50-C2 X-Amz-Cf-Id: MzoCiiJzO32QFBr-wIy88vuSzfaeEOCwj-d5iNGKbbr7KuS50y6kHQ==
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 74 28 63 2e 63 61 6c 6c 28 74 29 29 3a 69 28 74 29 26 26 28 6f 28 74 29 3f 66 3a 73 29 2e 74 65 73 74 28 74 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 72 28 65 29 5b 74 5d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 29 2c 6f 3d 6e 28 34 29 2c 69 3d 6e 28 32 33 29 2c 73 3d 6e 28 31 31 29 2c 61 3d 6e 28 38 29 2c 63 3d 6e 28 31 37 29 2c 75 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 Data Ascii: t(c.call(t)):i(t)&&(o(t)?f:s).test(t))}},function(t,e,n){var r=n(13);t.exports=function(t){return function(e){return null==e?void 0:r(e)[t]}}},function(t,e,n){var r=n(16),o=n(4),i=n(23),s=n(11),a=n(8),c=n(17),u=Object.prototype.hasOwnProperty;t.exports=fu
2024-04-24 02:16:14 UTC	16384	IN	Data Raw: 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 70 61 67 65 76 69 65 77 73 29 2c 74 68 69 73 2e 74 72 61 63 6b 45 76 65 6e 74 28 74 2c 7b 7d 2c 65 2c 6e 29 2c 74 68 69 73 7d 2c 65 2e 67 65 74 54 72 61 63 6b 56 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 49 6e 28 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 76 61 6c 75 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 26 26 28 74 5b 6e 5d 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 29 7d 29 29 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2e 6e 6f 6f 70 2c 6f 3d 6e 28 35 29 2c 69 3d 6e 28 32 34 29 2c 73 3d 6e 28 31 38 29 3b 74 2e 65 78 70 6f 72 74 Data Ascii: client.track.pageviews),this.trackEvent(t,{},e,n),this},e.getTrackValues=function(){var t={};return o.forIn(this.client.track.values,(function(e,n){e&&(t[n]="function"==typeof e?e():e)})),t}},function(t,e,n){var r=n(0).noop,o=n(5),i=n(24),s=n(18);t.export
2024-04-24 02:16:14 UTC	9769	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 68 5b 74 5d 7c 7c 72 2e 72 65 70 6c 61 63 65 28 22 3a 22 2c 22 22 29 7d 29 29 7d 2c 70 2e 75 74 63 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 35 2a 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 31 35 29 7d 2c 70 2e 64 69 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 75 2c 66 29 7b 76 61 72 20 6c 2c 64 3d 5f 2e 70 28 75 29 2c 70 3d 62 28 74 29 2c 68 3d 36 65 34 2a 28 70 2e 75 74 63 4f 66 66 73 65 74 28 29 2d 74 68 69 73 2e 75 74 63 4f 66 66 73 65 74 28 29 29 2c 76 3d 74 68 69 73 2d 70 2c 67 3d 5f 2e 6d 28 74 68 69 73 2c 70 29 3b 72 65 74 75 72 6e 20 67 3d 28 6c 3d 7b 7d 2c 6c 5b 63 5d 3d 67 Data Ascii: ction(t,e){return e\|\|h[t]\|\|r.replace(":","")}))},p.utcOffset=function(){return 15-Math.round(this.$d.getTimezoneOffset()/15)},p.diff=function(t,u,f){var l,d=_.p(u),p=b(t),h=6e4(p.utcOffset()-this.utcOffset()),v=this-p,g=_.m(this,p);return g=(l={},l[c]=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	151.101.129.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:14 UTC	530	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:14 UTC	1014	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8702 Last-Modified: Thu, 15 Feb 2024 20:38:48 GMT ETag: "9a680c8c475d8bba600d4d87b4fa7ee5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:14 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 99 c8 80 b1 93 80 b5 29 02 38 66 63 63 17 0f 67 b7 5c 2c 25 4b 03 28 11 12 47 12 71 7c 41 f7 b7 df 9e a7 46 32 4e 9c b3 e7 7c b8 55 bb 41 33 dd d3 ef ee e9 19 c9 07 f3 4d e0 24 5e 18 94 22 1d a3 00 25 c6 56 ce 84 ba 87 e6 c6 d6 9b eb 07 c1 9d 37 65 4f 98 3e 7d b3 a3 92 63 69 02 55 b3 ac e4 71 8d c3 79 29 c2 ff da 78 11 2e 97 f9 43 8b ac 99 97 cb 8e 11 e1 64 13 05 25 07 88 1e 54 0d 32 bf 11 73 1b 3e 47 a8 da 56 80 1f 4a bd 28 0a 23 5d eb d8 41 10 26 a5 b9 17 b8 a5 55 e8 6e 7c 5c fa a7 56 f1 2a da 3f 35 a3 95 2c a3 f0 a1 64 9b 4e e8 62 4b bb ba ee 4e 2e 7b b3 c1 f5 78 76 7e 3d 19 74 35 64 a7 84 de da 22 b2 5b 5b fc 7d 1d 46 49 dc dc a6 69 8b e8 70 57 9d 9a 8e ed fb fa da e4 20 24 b4 d1 23 Data Ascii: ;ksN8)8fccg\,%K(Gq\|AF2N\|UA3M$^"%V7eO>}ciUqy)x.Cd%T2s>GVJ(#]A&Un\|\V*?5,dNbKN.{xv~=t5d"[[}FIipW $#
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: e9 42 d6 30 54 42 01 30 60 5d a6 3c 1b 5f b2 68 62 03 1e 5b a8 e0 45 15 93 f8 b2 6e 64 da 1d 43 92 52 46 c4 83 9c 0a 6c 9e 60 7f 38 0b d6 0d 04 32 d2 dc f5 5e bd 3d 6c fc d4 bf 2a a7 a3 3a a9 f5 97 d0 91 05 35 ee 5a 3e f8 af 79 d7 a7 f4 ff be 83 15 3a cc 79 cc 61 e6 3c 0a 57 64 b6 03 db 00 75 7b e6 3f 75 c9 b3 2e 64 48 39 2f ca 29 ee 48 39 7e c6 97 05 7c aa 94 aa ca ce d2 41 83 72 46 c6 e1 f2 b6 13 dd 33 84 2f 41 d1 9f fa b2 c0 89 38 73 92 cc df 72 57 d2 c7 9f 38 52 69 ed 5d 4c b6 ce c9 b0 df 09 57 6b a8 44 10 6c 38 76 ec 35 d6 59 4c 28 bb 69 46 c0 90 ed 3e d0 2a b6 fa 57 b6 0f 36 5c 41 37 3f 19 9f bf 7e 5b 72 ed c4 d6 88 90 05 9b 6f 40 50 6a 71 2e 09 e7 47 b1 f4 4d c0 a5 60 5b 7b 4e 3e b1 d0 20 44 3f 6c e6 73 1c 61 f7 83 1f 3a 5f db fe 22 8c bc 64 b9 12 Data Ascii: B0TB0`]<_hb[EndCRFl`82^=l:5Z>y:ya<Wdu{?u.dH9/)H9~\|ArF3/A8srW8Ri]LWkDl8v5YL(iF>W6\A7?~[ro@Pjq.GM`[{N> D?lsa:_"d
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: a1 a3 e3 29 8d 8b 8a 4b 47 8d 29 0d 8f 0a a6 a3 93 29 8d 92 ca 9c 8e 4e a7 34 58 2a 0b 3a 7a 33 a5 31 53 59 ee aa 34 5c cf 9f f4 43 ac da bd e8 54 13 90 14 1c 87 89 ed 5b 6f 0f 8b c7 2a 06 bd c4 f3 04 80 b9 06 5b f4 02 92 e6 9d 44 05 a3 9e c0 c9 be 56 7f 4b cf ef 72 fe d5 71 3d 13 e1 ae d6 a8 e8 12 54 39 6d c0 aa 77 67 67 0d 63 ca 2a e3 dc 0f 21 c9 32 e1 8e b2 e2 65 a8 54 4e 9e a3 92 2d cd 9f 0c ac c6 61 76 92 e0 b7 16 fb da 4c 96 d5 3f 3c 04 f0 ba f3 93 63 00 2d 3a 4a 9d c8 1f 03 a0 cb ea 14 ea 58 ae d5 d4 19 8c b4 65 a4 1f dc 8f 29 1b 45 81 cd 1b 36 24 fb 04 36 ff ff b1 4d 38 79 61 9b e0 b9 a8 73 3d 18 8d db 83 f1 c8 ca 89 4b df 7b 25 b1 66 20 f2 66 18 20 38 4e e8 2e f0 c7 d5 e5 45 92 ac f9 14 8a dc 44 bc 48 87 c7 16 fc 0f 9b 9c e7 5a f0 60 ae bd ef d8 Data Ascii: )KG))N4X:z31SY4\CT[o[DVKrq=T9mwggc*!2eTN-avL?<c-:JXe)E6$6M8yas=K{%f f 8N.EDHZ`
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: b9 97 e0 be 49 a1 1e b9 68 21 17 38 13 20 73 4e de 31 53 e8 6d 3d 93 c2 61 33 24 a0 f9 c7 7c 6b df 4b 2c 65 9a be c3 81 86 c5 d4 e4 71 89 ce f0 13 d9 59 fd bd 82 dc a4 20 38 45 a7 52 04 d6 f7 3c e5 2c ef ba f6 29 a0 33 8b eb a4 81 13 84 c0 32 fb a8 c8 bb 3a 2a 78 d6 6e 51 54 21 7c 0b dc 11 fa 2e 30 e1 56 a3 1f 42 b2 19 c9 dc aa 1d 55 c5 bb 7d 45 c3 ec fd fe 57 fc 08 5a 5a 4c 47 6f 2a 88 5b ec 7c 51 3b 63 70 be 8c dc 04 f2 58 30 e1 67 a5 33 28 74 56 86 65 59 59 ff b9 a7 89 60 dc a0 ca 90 f2 1f 5b 7c 61 6d aa ba 82 32 14 28 82 25 eb 39 a5 3e f2 fb 0b 81 47 ee bb 6a 55 a3 75 e0 c5 03 7b a0 4b 4c f2 91 a5 78 3e 2b 58 05 0e 1c 45 3b 49 dc bc 4d a5 9c e4 ed 84 f8 fe 53 41 e0 3d 28 b5 49 3f 06 b9 f0 02 47 99 2b 63 11 11 9a 56 19 d0 6f 66 61 0a 4c 15 67 09 50 5c Data Ascii: Ih!8 sN1Sm=a3$\|kK,eqY 8ER<,)32:xnQT!\|.0VBU}EWZZLGo[\|Q;cpX0g3(tVeYY`[\|am2(%9>GjUu{KLx>+XE;IMSA=(I?G+cVofaLgP\
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: 33 16 87 99 48 79 05 69 18 2e 42 a5 67 34 57 29 92 26 9b 11 0d 80 84 d3 4c 6c 75 19 b5 46 ca ee 72 34 10 6c 41 db 2c fd 86 e3 44 17 b7 40 17 27 ef c9 2e 20 6f 04 3b 3f 9e 64 9b a3 21 2c e2 68 fa c0 b1 61 80 06 e6 bc 72 a1 b9 05 ba 48 e5 e2 90 f1 fe f8 f6 16 c4 a7 04 cb f7 c2 10 2b 81 0a 46 e4 3a 03 4c 43 05 fb 64 42 47 4b 56 46 b2 00 d1 53 94 80 52 9f 54 b1 cb bc 6a 7f 9b a5 93 07 55 0b 28 40 be da 66 0d f4 97 d9 e8 7a 08 0b 24 46 d4 65 07 06 f9 e8 f9 b4 3f 01 4e 99 7a a0 b9 de 82 00 f2 7c 5e e5 35 67 01 03 27 02 09 be ef fd 8c 2a 7c f1 60 1c 51 ea c6 b0 7e 7a 9d f6 b3 74 2d bd cd b0 ca f7 61 3c 5b fb dc ff 86 95 96 83 eb d9 10 ab 80 3f 63 6d f0 64 02 8b cb fa f7 1a 6b 1f 28 fa 00 1a 2b 6c fa 00 d5 bf 2a dc 5e fb 0d 29 1a fe de cf de 8d a7 5d 45 40 96 0e Data Ascii: 3Hyi.Bg4W)&LluFr4lA,D@'. o;?d!,harH+F:LCdBGKVFSRTjU(@fz$Fe?Nz\|^5g'\|`Q~zt-a<[?cmdk(+l^)]E@
2024-04-24 02:16:14 UTC	1378	IN	Data Raw: 7a 9b 57 42 e1 57 df 5a d2 dc 7d 49 a1 37 be 8e 05 cc 7a fd f9 56 83 7b 0c 66 0d da 93 78 bb 32 99 bf 76 6f 0b b1 1e b3 55 12 78 cb 25 bf 94 fa 79 0f 98 ef f6 32 eb ef eb 65 9e 9b 92 14 b4 d9 ad d1 a4 0e 39 a0 a7 f9 db 6d c7 e3 c2 97 8a 85 b9 7d 39 16 bf 1c a5 d7 c3 e4 89 51 58 6d 44 80 eb e5 22 b4 ee 64 5c a2 93 fb ee e1 08 c7 74 2f 4f b1 14 1b e4 06 a1 88 5c ca f3 af a8 93 68 0a 10 94 ce 9d cb ce 7c 72 96 e8 59 e8 65 12 e7 6a a8 7f d7 6d 34 47 39 6a 9d 33 fa 34 56 63 b3 9a 33 da 5f 38 76 0a e5 de cb 32 16 6f c0 14 f4 c9 74 1a 71 40 17 38 0a 1b f1 6c e2 06 bc b0 8c 00 ce a9 a3 97 70 b3 7a a2 8b b9 fc b7 f3 27 78 ea 55 ec 94 7e 17 4c 0e 33 ff ae f5 34 c6 17 56 7d 30 4d 0c 80 17 76 24 65 03 80 fc dc 32 5a ea 7d 32 41 ba 2f e7 76 7c 05 7f 10 95 3e 8e e0 37 Data Ascii: zWBWZ}I7zV{fx2voUx%y2e9m}9QXmD"d\t/O\h\|rYejm4G9j34Vc3_8v2otq@8lpz'xU~L34V}0Mv$e2Z}2A/v\|>7
2024-04-24 02:16:14 UTC	434	IN	Data Raw: 2f 16 a2 57 6d c7 f6 a9 d6 7b 6c 44 bb cd 85 e8 0f db 00 f1 a1 fe ac 11 e1 cb 17 9b fa d5 5d be 72 1a 9f cd 55 f3 b9 f7 b2 f5 69 9a 4d d5 70 b3 d8 28 27 fd 09 a9 cd b9 3f 51 08 70 fc 90 b0 29 da dd b1 58 ba 20 34 7c 2c d4 66 b0 a0 58 b1 58 b0 cb a3 19 db dc 2d a3 21 66 0a e2 1b 6f 8a 12 5e 5a 6f 2c d8 6b f5 1e 0e 34 bc 9d 85 d2 99 74 a2 92 93 74 a4 b2 89 0a 4a d6 dd aa 74 c3 be 93 4c 89 da e7 31 63 fe 13 c7 56 f7 33 59 28 81 ed 8a 13 29 b0 45 2e af 6e b3 8c 60 9a 72 dc 60 7a f2 54 38 9f a5 44 bb e0 83 e0 79 fb 97 c7 8f ad 58 2b 78 77 67 df d2 59 6a 97 82 48 2e bb db 65 b2 49 c6 66 0b 84 6c 50 4b 27 bf 18 b9 70 82 5f f8 bd 04 8f 7a f4 48 50 87 1a d1 61 d5 14 e3 cc f2 34 1e cb 7f 6c 9b d1 e3 7c ae 75 c5 75 47 d7 9a cf d7 dd d1 3c ce fd 6f 1c 2c 43 7b 81 64 Data Ascii: /Wm{lD]rUiMp('?Qp)X 4\|,fXX-!fo^Zo,k4ttJtL1cV3Y()E.n`r`zT8DyX+xwgYjH.eIflPK'p_zHPa4l\|uuG<o,C{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49800	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	531	OUT	OPTIONS /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-unique-id Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	424	IN	HTTP/1.1 204 No Content access-control-allow-headers: x-unique-id Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Max-Age: 86400 Content-Length: 0 Date: Wed, 24 Apr 2024 02:16:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Access-Control-Request-Headers X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49802	146.75.92.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	520	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4777 ETag: "ab32572e3176c9ff9c0ae3577598ec88" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Wed, 24 Apr 2024 02:16:15 GMT
2024-04-24 02:16:15 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-24 02:16:15 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-24 02:16:15 UTC	1378	IN	Data Raw: 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 Data Ascii: ()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerr
2024-04-24 02:16:15 UTC	643	IN	Data Raw: 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 65 64 62 36 35 33 38 64 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e 3a Data Ascii: (n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.edb6538d.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49805	151.101.129.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	603	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:15 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:16:15 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49808	142.250.101.156	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	615	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&gjid=152334407&_gid=365053505.1713924969&_u=6GDAAUABAAAAICgFKgC~&z=47950021 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:16:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:15 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49803	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	594	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 24 Apr 2024 02:16:15 GMT Content-Length: 0 Connection: close x-amz-rid: MCRF815N0DWDZDDA123P Set-Cookie: ad-id=A2CfsVzd_UpvsRjo-dNn3lA\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49804	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	594	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:15 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 24 Apr 2024 02:16:15 GMT Content-Length: 0 Connection: close x-amz-rid: TSKVZ169NP69HZN1WKHP Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49806	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974085 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:16:16 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49807	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:15 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974102 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:16:16 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49810	151.101.65.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	401	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:16 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:16:16 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49809	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	657	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364b sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:16 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 51 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-24 02:16:16 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	641	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY\|t
2024-04-24 02:16:16 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:16 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: J1NV1KX0SQT1FXQNZ1P2 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:16 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49812	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	641	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY\|t
2024-04-24 02:16:16 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:16 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: B27X1026PMH9BBNR2CTK Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:16 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49814	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974085 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1034 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	1034	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 32 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x102
2024-04-24 02:16:17 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:17 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=7f666949-c737-4b25-adf8-872e82506a00; Path=/; Expires=Fri, 24 Apr 2026 02:16:17 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:17 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49813	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:16 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974102 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1034 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:16 UTC	1034	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 32 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x102
2024-04-24 02:16:17 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:17 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:16:17 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:17 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49815	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	2130	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
2024-04-24 02:16:17 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 35 36 30 39 2e 37 30 30 30 30 30 30 30 30 30 31 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":5609.700000000012,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:16:17 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Wed, 24 Apr 2024 02:16:17 GMT ETag: "37-GYLEUaugSW2RyvEZmqzUQDxk3RY" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3z6WVGCOHAgM1T_1gOH3shzJ7FTW6syJrwW1pg6AyH1j3Sssl1y7gA==
2024-04-24 02:16:17 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 35 36 30 39 2e 37 30 30 30 30 30 30 30 30 30 31 32 7d Data Ascii: {"status":"ok","metric":"FCP","time":5609.700000000012}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49816	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	2130	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
2024-04-24 02:16:17 UTC	120	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 32 34 32 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":2242.899999999994,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:16:17 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Wed, 24 Apr 2024 02:16:17 GMT ETag: "38-uJcl8JfvOTJyoNqm/0neRFUbQ34" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hb1urK70MUOh-j-JjGWUFbZJLzo_Nd3RSUeWSQnUrfSoG2Yomgf3YQ==
2024-04-24 02:16:17 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 32 32 34 32 2e 38 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"TTFB","time":2242.899999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49818	151.101.130.132	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	537	OUT	OPTIONS /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-amp-exp-user Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:17 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: GET,POST,HEAD X-Amzn-Trace-Id: Root=1-66286b71-7040c1ae6872b29f14d87ce4 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 24 Apr 2024 02:16:17 GMT X-Served-By: cache-bur-kbur8200071-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713924978.681523,VS0,VE33 Vary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method cache-control: no-store Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Headers: authorization,x-amp-exp-user Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49820	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	710	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:17 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:17 GMT x-amzn-RequestId: 5d2dd15b-3d26-4b5d-ad33-1ddf6e0b4efc Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 b77b0cbd8eb4d250f56b4982e36bb5c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: klzAwcRPqX6injflvJBR6rrTxF0J1m0pQ_phkf67sWdLTb0gRP04_A==
2024-04-24 02:16:17 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49819	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	697	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:17 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:17 GMT x-amzn-RequestId: 10fa7269-a27e-46cd-812a-92ce39ea6db4 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 1bd4644cb87c3afa9981409c71c60b5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: WM3sCKsqNpGATr1bnOxNWmXCccDDwH59S29vILTk6H6I5drFq2KE5g==
2024-04-24 02:16:17 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49817	54.200.174.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	516	OUT	OPTIONS / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cross-origin-resource-policy Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:17 UTC	303	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:17 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Access-Control-Allow-Headers: cross-origin-resource-policy Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49821	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	374	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	385	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:18 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 39 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-24 02:16:18 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49822	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	480	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:18 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:18 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: K17WGQ2SDMXK9NJB4QVH Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:18 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49823	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	480	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:18 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:18 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: VMXM5HWFXHJQ4V5NGW54 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:18 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49825	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:17 UTC	1690	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
2024-04-24 02:16:18 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:18 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BR14omw379mRB61pIAXsP4Xq5t1a90He9_jDAcjizoINV-7_JBHCog==
2024-04-24 02:16:18 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49826	151.101.130.132	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	588	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5880 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286b72-44f9c8e566265f9475c34046 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 24 Apr 2024 02:16:18 GMT X-Served-By: cache-lax-kwhp1940038-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713924978.371181,VS0,VE70 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:16:18 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:16:18 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-24 02:16:18 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-24 02:16:18 UTC	1378	IN	Data Raw: 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 73 75 72 66 61 63 65 2d 61 63 74 69 6f 6e 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 Data Ascii: key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"experimentKey":"exp-1"},"value":"new-transfer-details"},"transfer-details-surface-actions":{"key":"on","value":"on"},"tra
2024-04-24 02:16:18 UTC	368	IN	Data Raw: 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 34 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 74 72 61 63 6b 69 6e Data Ascii: bled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspace-settings-iteration-4":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-trackin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49827	54.200.174.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	1171	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 30 62 65 31 64 30 33 34 61 61 64 32 62 33 65 38 33 61 33 65 62 38 33 65 31 37 36 32 61 39 34 35 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 39 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 32 Data Ascii: checksum=0be1d034aad2b3e83a3eb83e1762a945&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713924976192%2C%22event_id%22%3A1%2C%22session_id%22%3A1713924976188%2C%22
2024-04-24 02:16:18 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:18 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b72-4f4b324a75b44e48075fb541 Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:18 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49832	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971004 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:18 GMT x-amzn-RequestId: 444daa11-69ee-4531-9e21-01d016c2c22b X-Cache: Miss from cloudfront Via: 1.1 9cbfacb11e33d0d7f13ab9759d432fb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: aGLkGkakcqYDOhZxgZE6fyPlPS3NhrX_wCcm6TPW4xG4SFAsvhTdVg==
2024-04-24 02:16:18 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49830	18.154.142.121	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	529	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 09:04:45 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f1d4685902b794df9a425191b2bab030.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: LoxIPmSgt-sQ3Z1-Ahz9za9Lsyq4YVrIbxSRSgoCueaDBVxPY_B85A== Age: 61914
2024-04-24 02:16:18 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49833	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924971103 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:18 GMT x-amzn-RequestId: de01f071-69af-453a-8b86-75c8c30690ab X-Cache: Miss from cloudfront Via: 1.1 4fae6fe28c7e2e3d42a0a5fe13197102.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: kSYGVG7ih24Qx24q7c6oqARLZ7AIXCuwzgJT2S4F8hOsaTm51pL71A==
2024-04-24 02:16:18 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49831	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	1465	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:18 UTC	2373	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12083094410563994082"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12083094410563994082","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"12083094410563994082","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"12083094410563994082","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"12083094410563994082","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 02:31:18 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49829	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974085 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:19 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:18 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:19 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49828	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924974102 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:19 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:18 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:19 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49834	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	1690	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _dd_s=rum=0&expire=1713925876176&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7bi0.0.1.1
2024-04-24 02:16:19 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:19 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1dY4W7HWJn3CNjiuIFq0Mh91pF3ufDWjNY_WTcSAPuoZYe_Ux55Stg==
2024-04-24 02:16:19 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49835	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:18 UTC	1365	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	1458	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 02:31:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49839	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	1833	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7dbv.9.1.a
2024-04-24 02:16:19 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Wed, 17 Apr 2024 00:18:13 GMT Last-Modified: Tue, 16 Apr 2024 23:59:31 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oOO74iy9hFV-FR698hQXuP1ahIv6pu85YlL5xLhIO-mVbfBXF12dhw== Age: 611887
2024-04-24 02:16:19 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49838	31.13.70.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	1308	OUT	GET /signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 02:16:19 UTC	1501	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 02:16:19 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 02:16:19 UTC	14044	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 02:16:19 UTC	16384	IN	Data Raw: 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b Data Ascii: been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function k(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super expression must either be null or a function, not "+typeof b);a.prototype=Object.create(b&&b.prototype,{
2024-04-24 02:16:19 UTC	16384	IN	Data Raw: 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 Data Ascii: ules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("S
2024-04-24 02:16:19 UTC	16384	IN	Data Raw: 72 20 72 3d 6d 2e 67 65 74 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 2c 73 3d 6d 2e 67 65 74 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3b 6d 2e 73 65 74 49 57 4c 45 78 74 72 61 63 74 6f 72 73 3b 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 74 3d 6d 2e 53 69 67 6e 61 6c 73 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 2c 75 3d 6d 2e 53 69 67 6e 61 6c 73 45 53 54 43 75 73 74 6f 6d 44 61 74 61 2c 76 3d 6d 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 77 3d 6d 2e 73 69 67 6e 61 6c 73 45 78 74 72 61 63 74 46 6f 72 6d 2c 78 3d 6d 2e 73 69 67 6e 61 6c 73 49 73 49 57 4c 45 6c 65 6d 65 6e 74 2c 79 3d 6d 2e Data Ascii: r r=m.getCustomParameters,s=m.getIWLParameters;m.setIWLExtractors;m=f.getFbeventsModules("SignalsFBEventsShared");var t=m.SignalsESTRuleEngine,u=m.SignalsESTCustomData,v=m.signalsConvertNodeToHTMLElement,w=m.signalsExtractForm,x=m.signalsIsIWLElement,y=m.
2024-04-24 02:16:19 UTC	2339	IN	Data Raw: 67 2e 73 65 74 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 7b 22 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 22 3a 22 65 78 74 65 6e 64 65 64 22 2c 22 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 64 65 6e 74 69 74 79 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 Data Ascii: g.set("1904796869803472", "inferredEvents", {"buttonSelector":"extended","disableRestrictedData":false});fbq.loadPlugin("inferredevents");fbq.loadPlugin("identity");instance.optIn("1904796869803472", "InferredEvents", true);config.set("190479686980347
2024-04-24 02:16:19 UTC	1312	IN	Data Raw: 73 43 6f 6e 66 69 67 22 3a 7b 22 70 61 72 61 6d 73 22 3a 5b 7b 22 70 72 65 66 69 78 22 3a 22 22 2c 22 71 75 65 72 79 22 3a 22 66 62 63 6c 69 64 22 2c 22 65 62 70 5f 70 61 74 68 22 3a 22 63 6c 69 63 6b 49 44 22 7d 5d 7d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 62 72 6f 77 73 65 72 70 72 6f 70 65 72 74 69 65 73 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 22 2c 20 74 72 75 65 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 45 53 54 52 75 6c 65 45 6e Data Ascii: sConfig":{"params":[{"prefix":"","query":"fbclid","ebp_path":"clickID"}]}});fbq.loadPlugin("browserproperties");instance.optIn("1904796869803472", "BrowserProperties", true);fbq.loadPlugin("estruleengine");instance.optIn("1904796869803472", "ESTRuleEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49840	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&_u=6GDAAUABAAAAICgFKgC~&z=2006782968 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49841	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	909	OUT	GET /rp.gif?ts=1713924974220&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:19 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49844	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:20 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 87GP77AZX02JWFCJ0VHE Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49849	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	1210	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1287324479;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-04-24 02:16:20 UTC	2542	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12083094410563994082"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12083094410563994082","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"12083094410563994082","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"12083094410563994082","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"12083094410563994082","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; expires=Fri, 24-Apr-2026 02:16:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49853	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	1721	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b
2024-04-24 02:16:20 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Wed, 17 Apr 2024 00:18:13 GMT Last-Modified: Tue, 16 Apr 2024 23:59:31 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DRlErsQ6pJ-C2ccO2Um_Ka6AZ3A07FL7wmI6pix68kNNK57zYIj8lQ== Age: 611888
2024-04-24 02:16:20 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49852	151.101.66.132	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-66286b74-2f1fd33907cac8da1ba2af8b X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:20 GMT X-Served-By: cache-bur-kbur8200046-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713924980.136784,VS0,VE35 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:16:20 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49846	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:16:20 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:16:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49843	54.200.174.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:19 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:19 UTC	10723	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 30 61 33 36 32 31 66 66 62 30 36 66 30 32 30 31 35 30 35 66 39 37 65 66 65 34 65 63 61 30 31 37 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 37 39 34 37 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 32 Data Ascii: checksum=0a3621ffb06f0201505f97efe4eca017&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713924977947%2C%22event_id%22%3A1%2C%22session_id%22%3A1713924976188%2C%22
2024-04-24 02:16:20 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b74-265706531f20b2fb1f1144cc Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:20 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49855	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	675	OUT	GET /rp.gif?ts=1713924974220&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:20 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49848	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	1039	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	136	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49850	44.224.18.40	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b74-353a09ed70202e3b0c8cfed4 Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:20 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49856	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	583	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1655660804&_u=6GDAAUABAAAAICgFKgC~&z=2006782968 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49847	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	539	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49858	146.75.92.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	533	OUT	GET /ct/lib/main.edb6538d.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:20 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23080 ETag: "43ca97012b8f925b548ea31836a36cea" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Wed, 24 Apr 2024 02:16:20 GMT
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: 1f 8b 08 08 fe cb 26 66 00 03 6d 61 69 6e 2e 65 64 62 36 35 33 38 64 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 48 77 33 a0 0f 5b 5b ac dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 2c 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 84 3e 6c a7 ba b1 97 d9 42 35 f3 69 c6 44 91 71 3b 39 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 e7 4d 9a 89 3c 7c d8 6e 5d 06 8f 86 f3 78 bd b6 f9 b0 6c 77 b9 5b 5f 67 04 6e d6 f4 c0 73 39 21 ba 75 9b 0d af 29 73 b3 e1 9c 26 f0 73 41 2b 64 02 5e 06 74 d9 30 c5 4b b2 d9 7c ba fc 83 cd c5 70 c1 96 09 67 9f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: &fmain.edb6538d.js\ob%8,Hw3[[ Pl:Py,7>;%4D?C`YHRn3pg>lB5iDq;9)^$:<]M<\|n]xlw[_gns9!u)s&sA+d^t0K\|pge^v{`fY\|f!b"d[zA<XWo/
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 3a d3 74 3c 63 dd 0e fc e9 94 e4 77 89 98 63 48 f2 30 8f 73 66 c5 f9 3c 49 ac 50 5e af 41 16 b9 5f de 40 d4 1a 67 f7 56 a8 e3 d5 a9 6c 95 fa 1c ea cb 41 79 dd 53 be 44 f7 fd 6a d7 78 54 d7 79 1e e8 b7 e6 f9 20 a8 29 f8 13 d8 4f d4 f4 d4 6d 49 26 78 5d 0e ba 62 7f d6 38 de bd 7b e7 ab e6 4b f8 31 19 57 4f fe 30 46 2d 23 e5 50 7a 80 16 54 9c da c0 37 8e d2 f3 73 7a c7 b2 1f 81 94 4d c0 ca c1 a6 a5 96 97 6a 9b 26 d9 07 26 0b 18 08 14 61 e3 52 f9 4e be d9 28 d5 e4 e4 1d 06 38 5a 6d 4a 17 61 c9 fe ac ee cf 36 1b 66 76 9c 19 d7 21 23 11 f5 76 5e 85 e9 42 5b 44 6d ae ae ea c7 b8 ae 82 0a f0 4d 72 51 ea a5 15 e5 d2 4a b6 21 f4 94 ca d8 Data Ascii: Tk7N0".SBVQGm:t<cwcH0sf<IP^A_@gVlAySDjxTy )OmI&x]b8{K1WO0F-#PzT7szMj&&aRN(8ZmJa6fv!#v^B[DmMrQJ!
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1b 2a 4f 40 57 ee b7 e1 97 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 e5 f3 e9 8f 5f 2f 7e 39 f9 9f 8b f7 bf 7f 3d fd 42 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fb 25 fe 53 75 c1 c4 05 b0 ec 26 4d d7 5f 92 7f 33 7a 0c 02 0e f7 ab d6 ed 4f 7b 12 d4 15 5b 57 85 44 fb 15 40 9d 9e 97 46 48 35 6e Data Ascii: Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~_/~9=BvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%Su&M_3zO{[WD@FH5n
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 57 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d f9 f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 6b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 c4 Data Ascii: 9~[<^;\EW\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: 61 7b 55 de 8c 92 01 9b d5 b7 0e f2 6f c0 cc 02 3e 56 ff f1 8f ac 44 49 79 4e 2c 1d 60 de 8f 66 53 70 67 04 4f 80 f3 32 0f 9a 39 ec bc aa 16 a7 91 cf 46 f2 44 62 d7 57 c9 ea b8 98 ce be b7 91 69 fd ce 26 67 42 7f 5e 23 a7 57 65 77 99 cb 9c 14 e4 a4 fe bb 07 4d d9 c3 83 9e ed b2 b7 ff b9 7a f9 c7 1e da ff 26 06 7e a2 c5 b1 ba dd ac 77 93 f0 ff d8 bb d6 ae b6 91 26 fd 57 12 9f 84 57 1a c9 46 ad bb 00 0d 2f 01 42 48 b8 ad 81 64 26 84 70 14 23 40 09 48 8e 2d 93 30 d8 ff 7d 9f ea 6e 49 ed 0b 73 f9 b0 7b ce be 67 3f 24 48 7d ad ae ae ae 7a 5a dd 55 9e bf 75 ca 67 21 9d 29 67 32 45 1e c5 ad 0e d5 1f c2 d2 f5 35 00 04 ae c1 06 d5 05 10 e1 bc 33 e7 ea 9b 2d 3e cc ab 03 74 2c 88 bd b1 68 48 68 fa f9 94 0b 7f f6 c4 dd 96 c5 a7 84 dc 69 66 ce 39 8b 7f da e7 7e 59 bc Data Ascii: a{Uo>VDIyN,`fSpgO29FDbWi&gB^#WewMz&~w&WWF/BHd&p#@H-0}nIs{g?$H}zZUug!)g2E53->t,hHhif9~Y
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: c6 bb 7a 5e e2 29 1c 33 7f ec d8 3a 1e 37 6f 93 bb 7e 7a a9 8b 16 5e 2c 77 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 d2 dc 75 bd 4c 05 dd a3 41 fa 2c 2f f2 36 97 20 18 98 fa 8e 5b e7 53 be 0b de 0f 2e 29 c4 53 c1 57 93 2c 62 f2 0a 22 42 a3 88 44 26 7d d8 6e 92 7b da e2 cc 09 a9 a6 3f bb 4b cb 9b e2 92 22 96 69 b3 51 06 f5 47 e9 6a 97 f3 0b bb 95 3d 9f fe b8 a0 68 6f 8b 7c d7 30 be 2a d4 23 0f a7 95 92 73 ff 59 2a e2 80 34 d7 5d 04 7c 78 9c ac 0e 3a 7b bb c7 27 f1 e3 eb a3 8b bd c3 cd 8d bd 8b e3 93 c3 ee c6 ce f6 ca 23 c0 37 46 bb c2 2c cb 1c 0d b2 95 d6 55 ff 82 c2 5c dd 1e 83 f2 e4 3a 6d 4d cc ad ed ee ee 7b 6c 9d b7 8f 76 df cd 97 ef 67 79 1b 3c ca ee d3 cb 76 da cf be a1 c2 f1 66 77 e3 68 fb 82 7a dc 3e d8 ee 1e 2f ae 34 ec 0d 92 7e da 26 Data Ascii: z^)3:7o~z^,wJ,vG+$_5&huLA,/6 [S.)SW,b"BD&}n{?K"iQGj=ho\|0#sY4]\|x:{'#7F,U\:mM{lvgy<vfwhz>/4~&
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: 71 1c 1a 69 1c f8 5c 1c 75 b7 5f ef fe 66 b4 b6 7f 92 37 3e 90 dc bf 5e 0e ff 25 57 6e f2 ec e5 d0 7c f6 65 54 3e bb a2 13 64 9e d5 e2 31 d5 72 de 37 30 8d 10 af d9 70 02 f3 71 8a ff 3c fe 5c 5a 09 43 16 17 9d 13 8d 16 a3 be 9a 57 d1 dd aa 19 cd 6b cd 4e 65 38 05 27 0b c5 bf 0a 8f d3 e2 da ba 8c 95 30 b2 fa 62 4e 8e c7 23 a1 2a c9 d6 0e 9b c7 ab ea 71 bd 5c a1 f8 ae 3a e6 e9 26 b1 3d 1f 62 28 be e8 91 ae 17 1f 3c 45 e0 01 4e 16 16 d5 1b f0 e6 4f 96 68 49 bf 0d 51 74 b8 2b 67 d1 39 20 83 cf 43 1e 51 ed af 8b 2b 94 d2 d9 95 7f 7e 54 bd be b5 d6 72 4b a7 0b f9 55 03 07 0b 1a 20 36 90 1d 12 21 11 7a 3c a6 5c 3d 01 eb 25 d6 5b 5d fd db a2 fe 6f 2a 4e a8 90 ae 50 20 5d 01 c1 18 a9 9f da f3 2a a0 c3 48 63 a4 17 46 1a 56 f8 43 7c c6 18 f3 1d cf 76 ad 90 4e d4 22 Data Ascii: qi\u_f7>^%Wn\|eT>d1r70pq<\ZCWkNe8'0bN#q\:&=b(<ENOhIQt+g9 CQ+~TrKU 6!z<\=%[]oNP ]*HcFVC\|vN"
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: 56 1a b5 02 3b 42 0f 6d 31 1b 0a 5d 41 20 20 d2 83 f9 04 23 a6 c0 08 f8 10 a1 08 d9 fa 06 97 60 4e 23 d8 6c 87 c8 6a 20 4a e0 fb 01 71 d8 57 c1 0a d0 30 2c b7 1b 92 d5 54 70 0b b0 02 ac 17 e6 4b 85 30 c8 76 01 06 00 33 54 34 63 bb 3e 61 00 3e 88 06 d8 04 5e e8 00 8e 84 2a c6 61 3e 2a 04 91 e3 2b 68 87 31 cc 44 00 62 5c 15 f8 78 10 16 97 2e ab 4d 61 20 0f 18 c2 82 64 7a 2a 1c 22 be 87 d4 87 a3 22 23 cc 01 1a 0b 30 77 2a 48 82 c5 75 69 da 48 f4 1a bc c4 20 1e 81 17 41 ae 54 e8 84 a1 5a 01 a6 6e 0a 44 81 1a 2b f4 61 6c ad 29 3c c5 88 1b 30 ed ce 14 b4 f2 20 d1 1e 56 47 a0 a2 2c 66 f9 e8 da a2 a5 3a 85 b7 c8 aa 13 b4 52 a0 17 73 1d 1b 6b 16 44 a8 28 8c b9 3e 50 05 c3 9c 29 80 2c f4 b0 6a 22 30 54 81 66 58 51 00 0a 98 08 5b 41 69 98 5e 90 88 d5 e3 29 80 0d 65 Data Ascii: V;Bm1]A #`N#lj JqW0,TpK0v3T4c>a>^a>+h1Db\x.Ma dz""#0wHuiH ATZnD+al)<0 VG,f:RskD(>P),j"0TfXQ[Ai^)e
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: c5 65 9d fd bb c8 fe dd 18 55 d9 d0 1f f7 75 f6 77 91 fd dd 48 aa 6c a8 94 87 3a fb a3 c8 fe 68 0c ab 6c 68 99 1f 75 f6 07 91 fd c1 b8 aa b2 a1 78 48 7a fe 62 ff 9f c9 fd ff d4 47 ba b2 8e 02 38 b3 af 26 d9 ce 66 ef 03 a7 d0 50 f5 09 92 26 f5 b3 64 2d ed da 35 a9 a7 2b 7e 86 75 da fb 4a 16 c4 c6 5f 93 aa bb 62 1d df d9 6b 52 89 57 0c 73 ec 3a f1 7b 25 0e 80 76 75 e2 c7 4a 1e 4c b7 e9 e8 43 25 10 f4 5d 91 a2 12 fd b3 6f 02 cd 19 38 ff 35 9e 45 f7 06 7a 83 87 7e 59 2c 2d 89 bf 74 9a d1 e5 f7 94 de d3 51 fe f0 a9 74 f1 8b e5 22 8f ff 3e d4 7c c3 77 c3 4d d9 f4 82 3b 17 f2 84 b2 2a 33 df ed 53 39 a2 e3 2a 57 5f 1d ac 6b e9 dc af 89 f0 8f 31 73 8e 09 4d 78 3b fa d5 f7 74 c2 e3 bd aa 78 f2 89 5a f5 01 a8 29 02 86 33 7f 35 37 0c dd 8a 63 cd 59 12 01 a5 1b df 62 Data Ascii: eUuwHl:hlhuxHzbG8&fP&d-5+~uJ_bkRWs:{%vuJLC%]o85Ez~Y,-tQt">\|wM;3S9W_k1sMx;txZ)357cYb
2024-04-24 02:16:20 UTC	1378	IN	Data Raw: c7 74 2e 57 75 21 41 15 ed 08 6c 13 b1 84 03 8f 7c a3 b2 a9 5a 58 02 81 4e 9c 2c 32 d1 97 a1 0a f8 2c 8c a7 03 66 a4 e0 1c 02 99 d5 12 e3 28 4f c2 e7 5a be 22 b1 cc 07 97 44 5c 46 35 e5 a2 9e bf f6 71 43 39 d5 43 c2 20 22 78 f4 57 09 59 94 31 ba ff f0 dc 77 0b 98 b2 52 4f 11 bf f2 ce 01 5f 60 de 7e 85 12 b0 58 df fa 8f 07 7f da fe ea e1 ce f9 ee f9 a3 a0 7b fe d7 bf dd ac d6 ff 3d d8 f9 af 7e b8 fb e5 3c 3a 87 41 fb b9 5f be 78 3b 28 7d 4d a5 5d 7f c7 7b c4 3e cb 7a f6 76 bf 6b 9d ef ee 9c bb e7 de f9 a3 c1 c3 07 8f d8 22 4f 3f df 6d c9 84 61 5e 62 46 5f f2 f3 9b 9e cb 44 fa 15 04 1f 3f 0e af e7 d9 6a 31 4f c5 70 91 d1 a9 0d 53 4e f9 47 68 2b 5d 4c 76 81 e8 77 b1 88 de ca c5 f3 39 c1 50 0c 55 7e a3 8c 3d 20 1f 1a 17 1c ca b6 b7 6d b7 32 c2 6f d4 67 22 1b Data Ascii: t.Wu!Al\|ZXN,2,f(OZ"D\F5qC9C "xWY1wRO_`~X{=~<:A_x;(}M]{>zvk"O?ma^bF_D?j1OpSNGh+]Lvw9PU~= m2og"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49860	44.224.18.40	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b74-290b4960375fcdc40023b8ab Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:21 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49861	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:21 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AG08HDA7KQS0FF8MAVJZ Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49865	3.218.116.188	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:20 UTC	464	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive Accept: / Access-Control-Request-Method: OPTIONS Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:21 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49869	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	899	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49868	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	1009	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:21 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:21 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:16:21 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:16:21 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49870	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	929	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49867	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	2025	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664
2024-04-24 02:16:21 UTC	1082	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 41 41 41 41 45 4a 41 41 41 41 41 41 41 41 41 41 41 41 41 2e 4a 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAAAAAEJAAAAAAAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AX
2024-04-24 02:16:21 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:21 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:21 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:21 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49872	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	600	OUT	GET /user/?tid=2612705757018&cb=1713924980420&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 6 referrer-policy: origin x-pinterest-rid: 1269100749626827 Date: Wed, 24 Apr 2024 02:16:21 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:21 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49873	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	624	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713924980422&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1XRTVZak15TVdVdE1tRXlZeTAwTURaa0xXSmtaVEV0WWpKa016TXdOall4WTJRdw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1277524538863492 Date: Wed, 24 Apr 2024 02:16:21 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:21 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49874	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	1320	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924980423 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:21 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:21 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3705219098514279 Date: Wed, 24 Apr 2024 02:16:21 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49875	3.218.116.188	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:21 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:22 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49878	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	695	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=3, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49877	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	702	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:22 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:22 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49876	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	665	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979215&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=6, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49879	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	1351	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924981290&dep=5%2CEVENT_TAGS_ABSENT&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:22 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY2Zzg4SmNQeXh2R01oSzlaSjhVRnQ0bUZNUDd5VnpvNkZKNVFJUFI3TUR6R1kySnUzLzBTZTlmZVphQ3gxWEtOYzIzMEtlUCtZR2dMQlorLzVqWjRPblg1dVNYaTZ4WWlDQU5QMXBMTzNOdz0mYy9GeHFGTFc5Y25JbUpwMVg5STcwMjBRdnJRPQ=="; Expires=Thu, 24 Apr 2025 02:16:22 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1759927895221074 Date: Wed, 24 Apr 2024 02:16:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49881	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	1039	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:22 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:22 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:16:22 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:16:22 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49884	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	422	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713924980422&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:22 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UQmtNV001TW1NdFpEUmpaaTAwT1RFM0xXRm1OREl0T0RWaFpURXhPVGd4Tnpaag cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 5165556587286392 Date: Wed, 24 Apr 2024 02:16:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:22 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49883	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	1138	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924980423 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:16:22 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:22 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1767913760040660 Date: Wed, 24 Apr 2024 02:16:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49885	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	418	OUT	GET /user/?tid=2612705757018&cb=1713924980420&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:16:22 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5qWTFObVZqWTJJdE1tVmpOUzAwWmpZeExXSTNObUl0T0dWaU9XTXdNR00xTkRRNA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1410919137067352 Date: Wed, 24 Apr 2024 02:16:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:22 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49886	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	704	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:16:22 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 8338026819311177 Date: Wed, 24 Apr 2024 02:16:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:22 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49889	18.154.206.35	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	588	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:23 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Wed, 24 Apr 2024 02:16:24 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 543187fc7ea66083565b6fbfd76d9a1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: GE1apHA0heZXBY6pGKuI3pGd1XjHScH8qZnRckgERtIdPadGFHeW1Q==
2024-04-24 02:16:23 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49888	44.195.207.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:23 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:16:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0efa40d5cdf123505 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:16:23 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49890	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	2453	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 109 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:22 UTC	109	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 32 32 35 2e 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":16225.5,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:16:23 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 45 Connection: close Date: Wed, 24 Apr 2024 02:16:23 GMT ETag: "2d-gouNTPp6UwL+H+qE4rjNkJYiIKs" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UG3VmP73hKQYdr9PQJQUVfXeP-JUzJOqZd-mbTuOmKbh5YoSTcX7XQ==
2024-04-24 02:16:23 UTC	45	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 31 36 32 32 35 2e 35 7d Data Ascii: {"status":"ok","metric":"LCP","time":16225.5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49880	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	2150	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 5380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e
2024-04-24 02:16:22 UTC	5380	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 6f 6f 6b 69 65 5f 77 61 6c 6c 22 2c 22 73 65 5f 61 63 22 3a 22 61 63 63 65 70 74 5f 74 72 61 63 6b 65 72 73 22 2c 22 65 69 64 22 3a 22 30 64 30 37 35 33 66 62 2d 34 36 35 39 2d 34 38 36 66 2d 39 35 33 61 2d 65 30 62 31 65 31 63 34 34 36 32 61 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"cookie_wall","se_ac":"accept_trackers","eid":"0d0753fb-4659-486f-953a-e0b1e1c4462a","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cooki
2024-04-24 02:16:23 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:23 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:23 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:23 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49891	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	2272	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-24 02:16:23 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:23 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6dB7IQwfftNh6BN9T9SzPnPlRx8p_MYwif9N1o2ZJTRs-Uy1Sn79TQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49892	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:22 UTC	1382	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924981290&dep=5%2CEVENT_TAGS_ABSENT&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2Zzg4SmNQeXh2R01oSzlaSjhVRnQ0bUZNUDd5VnpvNkZKNVFJUFI3TUR6R1kySnUzLzBTZTlmZVphQ3gxWEtOYzIzMEtlUCtZR2dMQlorLzVqWjRPblg1dVNYaTZ4WWlDQU5QMXBMTzNOdz0mYy9GeHFGTFc5Y25JbUpwMVg5STcwMjBRdnJRPQ=="
2024-04-24 02:16:23 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:23 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="; Expires=Thu, 24 Apr 2025 02:16:23 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 2394480845456167 Date: Wed, 24 Apr 2024 02:16:23 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49893	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	732	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&rl=&if=false&ts=1713924979218&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924974398&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:23 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:23 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49887	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	1879	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetsid=9ed9fee001e011efa0dea93abfd83f84; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e
2024-04-24 02:16:23 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:23 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:23 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49895	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	2034	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575
2024-04-24 02:16:24 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:23 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nVIZKyredkBeNsQSGCpz6_dXjOHokKmF5ecmdXBK_ARVm69hzVYO8Q==
2024-04-24 02:16:24 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49897	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	772	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:24 UTC	364	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4101 ETag: "2a8d051abafd7b1d3f62592455b15f0c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 0 Date: Wed, 24 Apr 2024 02:16:24 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-24 02:16:24 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-24 02:16:24 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-24 02:16:24 UTC	1345	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49898	18.154.206.35	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	600	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:24 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Tue, 23 Apr 2024 03:14:44 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 5d30c0fb621781d1b876b873574bb1d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: sv8CBIobAVXBbco36SCr4t3M7Hah3g-cTaT7EKynbEdNplGL0wWYbA== Age: 82901
2024-04-24 02:16:24 UTC	15692	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 66 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 3c 2f 73 76 67 3e 22 2c 74 3d 73 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 66 6f 72 28 3b 74 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 53 41 70 70 26 26 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: f().toString()+"</svg>",t=se.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 3d 4d 6e 29 2c 7a 6e 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 33 32 29 2c 46 6e 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 55 6e 28 65 2c 74 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 6b 65 79 75 70 22 3a 72 65 74 75 72 6e 2d 31 21 3d 3d 4c 6e 2e 69 6e 64 65 78 4f 66 28 74 2e 6b 65 79 43 6f 64 65 29 3b 63 61 73 65 22 6b 65 79 64 6f 77 6e 22 3a 72 65 74 75 72 6e 20 32 32 39 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 3b 63 61 73 65 22 6b 65 79 70 72 65 73 73 22 3a 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 66 6f 63 75 73 6f 75 74 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: =Mn),zn=String.fromCharCode(32),Fn=!1;function Un(e,t){switch(e){case"keyup":return-1!==Ln.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Vn(e){return"object"==type
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 4d 65 6d 6f 69 7a 65 64 4d 61 73 6b 65 64 43 68 69 6c 64 43 6f 6e 74 65 78 74 3d 6f 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 65 3d 65 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 29 7b 5f 61 28 4e 61 29 2c 5f 61 28 50 61 29 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 65 2c 74 2c 6e 29 7b 69 66 28 50 61 2e 63 75 72 72 65 6e 74 21 3d 3d 43 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 36 38 29 29 3b 54 61 28 50 61 2c 74 29 2c 54 61 28 4e 61 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 74 3d 74 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 2c 22 66 75 6e 63 Data Ascii: MemoizedMaskedChildContext=o),o}function Ia(e){return null!=(e=e.childContextTypes)}function La(){_a(Na),_a(Pa)}function Aa(e,t,n){if(Pa.current!==Ca)throw Error(o(168));Ta(Pa,t),Ta(Na,n)}function Ma(e,t,n){var r=e.stateNode;if(t=t.childContextTypes,"func
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 63 69 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 63 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 63 69 5b 65 5d 2e 5f 77 6f 72 6b 49 6e 50 72 6f 67 72 65 73 73 56 65 72 73 69 6f 6e 50 72 69 6d 61 72 79 3d 6e 75 6c 6c 3b 63 69 2e 6c 65 6e 67 74 68 3d 30 7d 76 61 72 20 64 69 3d 77 2e 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 Data Ascii: ==t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var ci=[];function fi(){for(var e=0;e<ci.length;e++)ci[e]._workInProgressVersionPrimary=null;ci.length=0}var di=w.ReactCurrentDispatche
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 28 69 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 64 65 68 79 64 72 61 74 65 64 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 61 2c 69 2c 6c 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 32 35 36 26 74 2e 66 6c 61 67 73 3f 28 74 2e 66 6c 61 67 73 26 3d 2d 32 35 37 2c 55 6c 28 65 2c 74 2c 6c 2c 72 3d 66 6c 28 45 72 72 6f 72 28 6f 28 34 32 32 29 29 29 29 29 3a 6e 75 6c 6c 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3f 28 74 2e 63 68 69 6c 64 3d 65 2e 63 68 69 6c 64 2c 74 2e 66 6c 61 67 73 7c 3d 31 32 38 2c 6e 75 6c 6c 29 3a 28 69 3d 72 2e 66 61 6c 6c 62 61 63 6b 2c 61 3d 74 2e 6d 6f 64 65 2c 72 3d 44 73 28 7b 6d 6f 64 65 3a 22 76 69 73 69 62 6c 65 22 2c 63 68 69 6c 64 72 Data Ascii: (i=e.memoizedState)&&null!==(r=i.dehydrated))return function(e,t,n,r,a,i,l){if(n)return 256&t.flags?(t.flags&=-257,Ul(e,t,l,r=fl(Error(o(422))))):null!==t.memoizedState?(t.child=e.child,t.flags\|=128,null):(i=r.fallback,a=t.mode,r=Ds({mode:"visible",childr
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 3d 3d 66 75 26 26 28 64 75 3f 28 65 3d 66 75 2c 6e 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 2c 38 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 75 61 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6e 29 3a 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 75 61 28 65 2c 6e 29 2c 24 74 28 65 29 29 3a 75 61 28 66 75 2c 6e 2e 73 74 61 74 65 4e 6f 64 65 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 3d 66 75 2c 61 3d 64 75 2c 66 75 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 2c 64 75 3d 21 30 2c 70 75 28 65 2c 74 2c 6e 29 2c 66 75 3d 72 2c 64 75 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 31 34 3a 63 61 73 65 20 31 35 3a 69 66 28 21 58 6c 26 26 28 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 2e 75 70 64 61 Data Ascii: ==fu&&(du?(e=fu,n=n.stateNode,8===e.nodeType?ua(e.parentNode,n):1===e.nodeType&&ua(e,n),$t(e)):ua(fu,n.stateNode));break;case 4:r=fu,a=du,fu=n.stateNode.containerInfo,du=!0,pu(e,t,n),fu=r,du=a;break;case 0:case 11:case 14:case 15:if(!Xl&&(null!==(r=n.upda
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 7d 6d 3d 6e 75 2c 6e 75 3d 21 31 7d 28 65 2c 6e 29 2c 67 75 28 6e 2c 65 29 2c 68 72 28 74 61 29 2c 48 74 3d 21 21 65 61 2c 74 61 3d 65 61 3d 6e 75 6c 6c 2c 65 2e 63 75 72 72 65 6e 74 3d 6e 2c 62 75 28 6e 2c 65 2c 61 29 2c 59 65 28 29 2c 4e 75 3d 75 2c 62 74 3d 6c 2c 50 75 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 69 7d 65 6c 73 65 20 65 2e 63 75 72 72 65 6e 74 3d 6e 3b 69 66 28 4b 75 26 26 28 4b 75 3d 21 31 2c 71 75 3d 65 2c 59 75 3d 61 29 2c 69 3d 65 2e 70 65 6e 64 69 6e 67 4c 61 6e 65 73 2c 30 3d 3d 3d 69 26 26 28 47 75 3d 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 74 2e 6f 6e 43 6f 6d 6d 69 74 46 69 62 65 72 52 6f 6f 74 29 74 72 79 7b 6f 74 2e 6f 6e Data Ascii: return}m=nu,nu=!1}(e,n),gu(n,e),hr(ta),Ht=!!ea,ta=ea=null,e.current=n,bu(n,e,a),Ye(),Nu=u,bt=l,Pu.transition=i}else e.current=n;if(Ku&&(Ku=!1,qu=e,Yu=a),i=e.pendingLanes,0===i&&(Gu=null),function(e){if(ot&&"function"==typeof ot.onCommitFiberRoot)try{ot.on
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 73 74 61 62 6c 65 5f 73 74 72 69 63 74 4d 6f 64 65 26 26 28 61 3d 21 30 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 2e 69 64 65 6e 74 69 66 69 65 72 50 72 65 66 69 78 26 26 28 69 3d 6e 2e 69 64 65 6e 74 69 66 69 65 72 50 72 65 66 69 78 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 2e 6f 6e 52 65 63 6f 76 65 72 61 62 6c 65 45 72 72 6f 72 26 26 28 6c 3d 6e 2e 6f 6e 52 65 63 6f 76 65 72 61 62 6c 65 45 72 72 6f 72 29 29 2c 74 3d 42 73 28 74 2c 6e 75 6c 6c 2c 65 2c 31 2c 6e 75 6c 6c 21 3d 6e 3f 6e 3a 6e 75 6c 6c 2c 61 2c 30 2c 69 2c 6c 29 2c 65 5b 68 61 5d 3d 74 2e 63 75 72 72 65 6e 74 2c 24 72 28 65 29 2c 72 29 66 6f 72 28 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 61 3d 28 61 3d 28 6e 3d 72 5b 65 5d 29 2e 5f 67 65 74 56 65 72 73 69 6f 6e 29 28 6e 2e 5f 73 6f 75 Data Ascii: stable_strictMode&&(a=!0),void 0!==n.identifierPrefix&&(i=n.identifierPrefix),void 0!==n.onRecoverableError&&(l=n.onRecoverableError)),t=Bs(t,null,e,1,null!=n?n:null,a,0,i,l),e[ha]=t.current,$r(e),r)for(e=0;e<r.length;e++)a=(a=(n=r[e])._getVersion)(n._sou
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 53 29 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 5b 22 6e 65 78 74 22 2c 22 74 68 72 6f 77 22 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 74 2c 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 6f 2c 6c 2c 75 29 7b 76 61 72 20 73 3d 68 28 65 5b 61 5d 2c 65 2c 6f 29 3b 69 66 28 22 74 68 72 6f 77 22 21 3d 3d 73 2e 74 79 70 65 29 7b 76 61 72 20 63 3d 73 2e 61 72 67 2c 66 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 66 26 26 22 6f 62 6a 65 63 74 22 3d 3d 72 28 66 29 26 26 69 2e Data Ascii: e=Object.create(S);function C(e){["next","throw","return"].forEach((function(t){d(e,t,(function(e){return this._invoke(t,e)}))}))}function P(e,t){function n(a,o,l,u){var s=h(e[a],e,o);if("throw"!==s.type){var c=s.arg,f=c.value;return f&&"object"==r(f)&&i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49900	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	2058	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-24 02:16:24 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:24 GMT ETag: W/"a25e-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: NzEjVCwocgJ1F8WUQukmJ5sSqTFsns2a5xuoNYyMxa8C5SP3l5zHuQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49899	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:23 UTC	641	OUT	GET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:24 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 31120 Connection: close Date: Thu, 07 Dec 2023 07:02:37 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 07 Dec 2023 02:08:03 GMT ETag: "57cbbfdafc43e0deecc75a309dd042c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: p684xL5xlhL2KT-LSCxXI7IkD8LaCkD-mnidTKyBNYZ5I4icyPyT7Q== Age: 11992427
2024-04-24 02:16:24 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 79 90 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 69 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 69 34 00 00 0b a2 00 00 33 92 12 d2 b6 e6 47 53 55 42 00 00 74 d8 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 86 d4 60 b2 63 6d 61 70 00 00 05 fc 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 4c 00 00 01 91 00 00 0b f2 54 a0 2e b0 66 70 67 6d 00 00 07 d4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 69 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 12 f8 00 00 54 d8 00 00 90 f0 a6 31 f2 b3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 56 43 9f 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFy<GDEFio]GPOSi43GSUBt8-jQOS/2Z``cmap;<cvt LT.fpgm06gaspiglyfT1head66VChhea
2024-04-24 02:16:24 UTC	15488	IN	Data Raw: c6 58 2c f5 38 e4 8b 01 10 c6 c3 a3 99 51 3c 2a 0e e4 7d fe 34 f9 ef 4a cd 19 f2 62 78 ce c5 86 a9 df 55 d2 3b ce 10 c5 c3 d2 0f d4 0d 8a a7 b5 b7 4b 36 20 9b 05 6d 5d 2d 21 a7 33 68 0e f9 82 29 57 70 9c 38 1f 5f 2f f4 7a b7 26 39 75 51 d1 1c 88 b9 c5 d9 b5 96 36 c7 27 05 6c b7 d9 ac 4b 9a c1 dd b7 5e f0 9a e1 d8 f9 6d 93 1d 42 5c b0 ba 7d 96 74 9c e9 37 16 41 cd 7a 6b 87 fc 04 60 d6 5b 51 f5 6c 51 b4 98 40 5c 42 bc b7 b6 c0 9e 5d 23 5b 75 bc 1c 68 a6 c0 16 b8 33 7e ce f9 52 51 b4 9b 39 b4 89 f3 b0 82 3d 15 68 b0 5f 18 83 04 8c 21 bc 88 c0 c9 7a 36 61 af 3e 01 00 df 64 ec dd 4c 03 3d 51 ed 07 ce ff ab a2 a8 55 03 22 fc ea 1a ff 10 c1 f8 38 9a c9 7c 97 2c 73 37 07 6a 64 99 ab a7 01 90 bf 81 f5 4c 75 37 67 a5 cf ad 5e 53 07 03 41 ff 37 c1 98 84 c3 0a fa 54 Data Ascii: X,8Q<*}4JbxU;K6 m]-!3h)Wp8_/z&9uQ6'lK^mB\}t7Azk`[QlQ@\B]#[uh3~RQ9=h_!z6a>dL=QU"8\|,s7jdLu7g^SA7T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49901	18.154.206.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:24 UTC	386	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:24 UTC	491	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Wed, 24 Apr 2024 02:16:25 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c6c3c6447e7024b0ed2242e7aa9cff6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: jTjvhgu8DHi-Taih57dP3b1LgPmV8YBx427y0Z91m2ebr6OXFTVs9Q==
2024-04-24 02:16:24 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49896	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:24 UTC	1900	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; _uetvid=9eda777001e011efafd8ed114767de19; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575
2024-04-24 02:16:24 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:24 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49902	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:24 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:24 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 32124 Connection: close Date: Thu, 14 Mar 2024 16:35:51 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 14 Mar 2024 16:07:26 GMT ETag: "868aedeefe7669e8a4f7196f7df5d058" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: o6U16aRai9j5N0j886_5p7kMMrKcpMmAiBxX8-fpGMHaoAhwIIxC9Q== Age: 3490834
2024-04-24 02:16:24 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7d 7c 00 11 00 00 00 00 f6 e0 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 6d 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 6d 34 00 00 0b 90 00 00 33 94 f7 fc d9 35 47 53 55 42 00 00 78 c4 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 87 35 60 c0 63 6d 61 70 00 00 06 08 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 64 00 00 01 97 00 00 0b f2 4b e1 31 a5 66 70 67 6d 00 00 07 e0 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 6d 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 10 00 00 58 bd 00 00 90 82 5a 21 5b f3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 71 43 9b 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFF}\|GDEFmo]GPOSm435GSUBx8-jQOS/2Z`5`cmap;<cvt dK1fpgm06gaspmglyfXZ![head66qChhea
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 0b 25 7e 51 89 bf a6 c4 4a a3 1d db e1 a3 f5 65 f0 9f 70 45 0b a4 36 fd 64 77 f2 64 3e d0 07 8b 02 4c 96 d8 73 e0 b2 99 c7 23 af cf 7b ec 79 b7 6d cf 37 df 6b b0 29 c4 4a c1 9e 0a 5a dd 36 ac a9 05 28 93 17 3b 3d ee a2 d7 f9 e6 ea b3 f8 51 d1 63 35 ba bb 7b 0d be 94 2f 94 d3 2f 4c 7c f0 83 88 de 2c 42 c2 af 59 54 9a 15 74 e1 88 75 42 af 47 06 51 d1 12 28 8b 6b 81 b2 98 58 78 b8 9e 6c 26 e2 81 7b b8 c9 1c 54 a2 cd 32 47 05 fc 6e d2 d3 64 f9 a9 fe e0 c4 69 12 ea 7f 2b 0f a2 7d f1 45 3c 8e bd d5 97 58 0c 6c 98 45 25 2f a3 11 6a 42 68 08 0f 49 dd 25 8f 37 0f 7f ed e9 49 6d 49 0a 4d da 85 da 84 9d 4f d4 4c 97 40 7e d0 00 99 46 3e 52 39 27 fc d5 60 e5 a2 41 50 cb 09 20 49 6c 76 06 0d 3e 87 27 ee 0f 8c dc bc 22 fe b7 c2 97 4f a8 da 46 6f ac e8 fd 09 bb 38 55 31 Data Ascii: %~QJepE6dwd>Ls#{ym7k)JZ6(;=Qc5{//L\|,BYTtuBGQ(kXxl&{T2Gndi+}E<XlE%/jBhI%7ImIMOL@~F>R9'`AP Ilv>'"OFo8U1
2024-04-24 02:16:24 UTC	107	IN	Data Raw: 4e a0 c1 da ee e5 2e ee e4 3a 2e e7 36 ae a6 01 e1 9b 62 5b 49 f8 a4 e9 4c 3d b9 d8 55 d5 90 34 e1 a1 f3 06 91 e4 f2 43 27 45 ec 7c cf b3 1a 50 48 19 75 74 e3 04 cd c1 e3 1a ae d7 5c ab 37 69 3a 86 6b 34 13 13 d9 66 63 b8 09 21 ae 89 75 3f 85 d2 f6 b9 28 3b 13 0f 3f 11 11 a5 b1 19 67 e7 db e1 a7 db ff 01 f1 e1 40 52 00 Data Ascii: N.:.6b[IL=U4C'E\|PHut\7i:k4fc!u?(;?g@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49903	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:24 UTC	633	OUT	GET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:24 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43188 Connection: close Date: Fri, 22 Mar 2024 06:50:20 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 21 Mar 2024 21:10:45 GMT ETag: "55576599a2d772f9297c5036d355b1fb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: E_pDIYKTvjZ0zSQnXewMRNLGEtas1Ta79J7nVCn9TF674ymWMWHEbQ== Age: 2834765
2024-04-24 02:16:24 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a8 b4 00 12 00 00 00 01 76 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 a8 ac 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8c 00 00 00 b8 19 5c 21 89 47 50 4f 53 00 00 02 20 00 00 14 91 00 00 34 a4 41 b8 64 b5 47 53 55 42 00 00 16 b4 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1c 70 00 00 00 4e 00 00 00 60 6a 7b 86 e3 63 6d 61 70 00 00 1c c0 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a1 2c 00 00 00 29 00 00 00 34 0c 4d 03 7a 66 70 67 6d 00 00 a1 58 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a1 24 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 1f d8 00 00 73 28 00 01 04 0c d6 66 63 d7 68 65 61 64 00 00 93 00 00 00 00 Data Ascii: wOFFvDSIGGDEF\!GPOS 4AdGSUB^_OS/2pN`j{cmaph=jccvt ,)4MzfpgmX6gasp$glyfs(fchead
2024-04-24 02:16:24 UTC	16384	IN	Data Raw: 9d c3 f4 6c 6d b5 ed 2c 46 2e 0b 34 66 05 35 bd 82 23 d7 4f b9 2c eb 0e e5 5e b9 db ac 4f 97 a6 67 33 76 92 13 f1 51 8c 63 75 74 d8 95 f1 5c 16 a0 1f 27 f3 39 fe af b1 6b 44 db be 90 3a 97 f8 70 0b 75 cb 02 63 2d 00 74 f9 c8 55 d2 f0 ca 69 cc 9b c3 eb a4 50 08 87 29 b5 0f 27 86 f3 e1 5c 22 46 43 34 c4 99 b2 85 51 db 16 ae ed 6a 10 cf 5e bc c7 03 1f 26 3e 9f 0e 42 fc ef 0b e9 11 f1 ff f1 bf ef 62 17 f1 97 55 57 44 07 8e f4 93 29 64 e0 56 b3 90 cf 46 98 ec 14 83 41 37 4e 4e 59 7d 82 a4 d9 67 aa 5b 12 21 7d 34 3f 43 90 65 ec 37 9c 07 39 90 99 60 b5 5a ed 54 db ad 44 27 d1 e2 bc 38 38 45 2a cf 1a d8 a8 64 d8 02 d9 a4 42 94 90 91 33 c9 ac e1 4f 9e 26 70 3c f6 5e ab 8b 67 9c 74 ba fc e9 c8 da e2 99 3b 4f 32 7f 5f 3e 74 7a ff e3 7d fe 87 ca 1d f1 b9 cf ba ab 40 Data Ascii: lm,F.4f5#O,^Og3vQcut\'9kD:puc-tUiP)'\"FC4Qj^&>BbUWD)dVFA7NNY}g[!}4?Ce79`ZTD'88E*dB3O&p<^gt;O2_>tz}@
2024-04-24 02:16:24 UTC	11171	IN	Data Raw: f0 c5 0e 07 43 b5 af d0 b0 28 e3 f6 77 5c 73 e4 d8 fa f5 e3 43 7d 93 b1 36 8c 0e fa 02 b5 5f 31 27 f9 b6 4c ae f6 9e fc 58 50 8d 90 b2 ff 8a 62 be 90 21 03 c3 3d 39 7f da ce 81 3a 74 3a be 99 d2 31 03 af a9 da 62 08 b2 c0 ad ec e2 28 cf 6a 40 28 75 78 19 07 17 fa e2 7e d5 3e 5b 41 7d bd dc 98 c9 d3 32 53 35 0c 32 00 ca b0 b4 fa 2a 5f 41 57 cd 3e 35 28 4c ba 0e 57 a3 75 ba 96 c1 61 fc 1a 11 de 4c 27 b5 6c 61 20 1e de b9 b3 4e 0a db 83 57 5f 32 3f 55 07 f6 ff 7d a4 bd 10 8f e7 68 9c 98 dc 58 48 a5 c2 85 c7 63 31 0d e6 01 c8 e9 5f 9f fe 38 be 95 e3 4d f8 a0 b7 5a 6c 08 63 a9 2a 30 89 48 78 4c e2 6b 79 14 4b 9f e4 b5 db 0c 0a 07 97 50 e4 3a b8 44 26 ab 47 d9 52 a3 08 7f 87 22 4c 7c b6 d3 3d 3e 92 68 c7 d9 f6 d0 cb 2f 55 e3 ce 3f a1 18 84 9d 1b f1 e1 91 dd be Data Ascii: C(w\sC}6_1'LXPb!=9:t:1b(j@(ux~>[A}2S52_AW>5(LWuaL'la NW_2?U}hXHc1_8MZlc0HxLkyKP:D&GR"L\|=>h/U?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49904	18.154.206.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:25 UTC	398	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:25 UTC	527	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Tue, 23 Apr 2024 15:09:30 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a5a0710f4845ad00ea1f7ede6b345c78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: TtMlq4wD9WHoyPwiQbDmG29-vOjqECNENdjBd4pPj4Qmxbl1ayCjXw== Age: 40015
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 2c 67 72 69 64 52 6f 77 53 70 61 6e 3a 21 30 2c 67 72 69 64 52 6f 77 53 74 61 72 74 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 70 61 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 6c 69 6e 65 43 6c 61 6d 70 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 74 61 62 53 69 7a 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 Data Ascii: ,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 29 29 7d 76 61 72 20 51 6e 3d 6e 75 6c 6c 2c 47 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4b 6e 28 65 29 7b 7a 72 28 65 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 71 6e 28 65 29 7b 69 66 28 47 28 77 61 28 65 29 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 59 6e 28 65 2c 74 29 7b 69 66 28 22 63 68 61 6e 67 65 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 7d 76 61 72 20 58 6e 3d 21 31 3b 69 66 28 63 29 7b 76 61 72 20 5a 6e 3b 69 66 28 63 29 7b 76 61 72 20 4a 6e 3d 22 6f 6e 69 6e 70 75 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 28 21 4a 6e 29 7b 76 61 72 20 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 6e 69 6e 70 75 74 22 2c 22 72 65 Data Ascii: ))}var Qn=null,Gn=null;function Kn(e){zr(e,0)}function qn(e){if(G(wa(e)))return e}function Yn(e,t){if("change"===e)return t}var Xn=!1;if(c){var Zn;if(c){var Jn="oninput"in document;if(!Jn){var er=document.createElement("div");er.setAttribute("oninput","re
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 61 2c 6e 29 7d 76 61 72 20 7a 61 3d 6e 75 6c 6c 2c 46 61 3d 21 31 2c 55 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 56 61 28 65 29 7b 6e 75 6c 6c 3d 3d 3d 7a 61 3f 7a 61 3d 5b 65 5d 3a 7a 61 2e 70 75 73 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 69 66 28 21 55 61 26 26 6e 75 6c 6c 21 3d 3d 7a 61 29 7b 55 61 3d 21 30 3b 76 61 72 20 65 3d 30 2c 74 3d 62 74 3b 74 72 79 7b 76 61 72 20 6e 3d 7a 61 3b 66 6f 72 28 62 74 3d 31 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 64 6f 7b 72 3d 72 28 21 30 29 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 72 29 7d 7a 61 3d 6e 75 6c 6c 2c 46 61 3d 21 31 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 6e 75 6c 6c 21 3d 3d 7a 61 26 26 28 7a 61 3d 7a 61 2e 73 6c 69 63 65 28 65 2b Data Ascii: a,n)}var za=null,Fa=!1,Ua=!1;function Va(e){null===za?za=[e]:za.push(e)}function $a(){if(!Ua&&null!==za){Ua=!0;var e=0,t=bt;try{var n=za;for(bt=1;e<n.length;e++){var r=n[e];do{r=r(!0)}while(null!==r)}za=null,Fa=!1}catch(a){throw null!==za&&(za=za.slice(e+
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 2c 64 69 2e 63 75 72 72 65 6e 74 3d 73 6c 2c 65 3d 6e 28 72 2c 61 29 7d 77 68 69 6c 65 28 62 69 29 7d 69 66 28 64 69 2e 63 75 72 72 65 6e 74 3d 69 6c 2c 74 3d 6e 75 6c 6c 21 3d 3d 76 69 26 26 6e 75 6c 6c 21 3d 3d 76 69 2e 6e 65 78 74 2c 68 69 3d 30 2c 67 69 3d 76 69 3d 6d 69 3d 6e 75 6c 6c 2c 79 69 3d 21 31 2c 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 30 30 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 28 29 7b 76 61 72 20 65 3d 30 21 3d 3d 77 69 3b 72 65 74 75 72 6e 20 77 69 3d 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 54 69 28 29 7b 76 61 72 20 65 3d 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 53 74 61 74 65 3a 6e 75 6c 6c 2c Data Ascii: =null,t.updateQueue=null,di.current=sl,e=n(r,a)}while(bi)}if(di.current=il,t=null!==vi&&null!==vi.next,hi=0,gi=vi=mi=null,yi=!1,t)throw Error(o(300));return e}function _i(){var e=0!==wi;return wi=0,e}function Ti(){var e={memoizedState:null,baseState:null,
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 63 61 73 65 20 36 34 3a 63 61 73 65 20 31 32 38 3a 63 61 73 65 20 32 35 36 3a 63 61 73 65 20 35 31 32 3a 63 61 73 65 20 31 30 32 34 3a 63 61 73 65 20 32 30 34 38 3a 63 61 73 65 20 34 30 39 36 3a 63 61 73 65 20 38 31 39 32 3a 63 61 73 65 20 31 36 33 38 34 3a 63 61 73 65 20 33 32 37 36 38 3a 63 61 73 65 20 36 35 35 33 36 3a 63 61 73 65 20 31 33 31 30 37 32 3a 63 61 73 65 20 32 36 32 31 34 34 3a 63 61 73 65 20 35 32 34 32 38 38 3a 63 61 73 65 20 31 30 34 38 35 37 36 3a 63 61 73 65 20 32 30 39 37 31 35 32 3a 63 61 73 65 20 34 31 39 34 33 30 34 3a 63 61 73 65 20 38 33 38 38 36 30 38 3a 63 61 73 65 20 31 36 37 37 37 32 31 36 3a 63 61 73 65 20 33 33 35 35 34 34 33 32 3a 63 61 73 65 20 36 37 31 30 38 38 36 34 3a 61 3d 33 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 Data Ascii: case 64:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:case 4194304:case 8388608:case 16777216:case 33554432:case 67108864:a=32;break;case 5
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 70 75 28 65 2c 74 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 75 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 7b 65 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 75 6c 6c 3d 3d 3d 6e 26 26 28 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 65 77 20 5a 6c 29 2c 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 4e 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 74 29 3b 6e 2e 68 61 73 28 74 29 7c 7c 28 6e 2e 61 64 64 28 74 29 2c 74 2e 74 68 65 6e 28 72 2c 72 29 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 75 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: e,t,n);break;default:pu(e,t,n)}}function mu(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new Zl),t.forEach((function(t){var r=Ns.bind(null,e,t);n.has(t)\|\|(n.add(t),t.then(r,r))}))}}function vu(e,t){var
2024-04-24 02:16:25 UTC	3028	IN	Data Raw: 50 75 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 6e 75 6c 6c 2c 62 74 3d 31 36 3e 65 3f 31 36 3a 65 2c 6e 75 6c 6c 3d 3d 3d 71 75 29 76 61 72 20 72 3d 21 31 3b 65 6c 73 65 7b 69 66 28 65 3d 71 75 2c 71 75 3d 6e 75 6c 6c 2c 59 75 3d 30 2c 36 26 4e 75 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 33 31 29 29 3b 76 61 72 20 61 3d 4e 75 3b 66 6f 72 28 4e 75 7c 3d 34 2c 4a 6c 3d 65 2e 63 75 72 72 65 6e 74 3b 6e 75 6c 6c 21 3d 3d 4a 6c 3b 29 7b 76 61 72 20 69 3d 4a 6c 2c 6c 3d 69 2e 63 68 69 6c 64 3b 69 66 28 31 36 26 4a 6c 2e 66 6c 61 67 73 29 7b 76 61 72 20 75 3d 69 2e 64 65 6c 65 74 69 6f 6e 73 3b 69 66 28 6e 75 6c 6c 21 3d 3d 75 29 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 75 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 73 5d 3b 66 6f 72 28 Data Ascii: Pu.transition=null,bt=16>e?16:e,null===qu)var r=!1;else{if(e=qu,qu=null,Yu=0,6&Nu)throw Error(o(331));var a=Nu;for(Nu\|=4,Jl=e.current;null!==Jl;){var i=Jl,l=i.child;if(16&Jl.flags){var u=i.deletions;if(null!==u){for(var s=0;s<u.length;s++){var c=u[s];for(
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 29 3a 28 6e 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3d 74 2c 6e 2e 74 79 70 65 3d 65 2e 74 79 70 65 2c 6e 2e 66 6c 61 67 73 3d 30 2c 6e 2e 73 75 62 74 72 65 65 46 6c 61 67 73 3d 30 2c 6e 2e 64 65 6c 65 74 69 6f 6e 73 3d 6e 75 6c 6c 29 2c 6e 2e 66 6c 61 67 73 3d 31 34 36 38 30 30 36 34 26 65 2e 66 6c 61 67 73 2c 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 3d 65 2e 63 68 69 6c 64 4c 61 6e 65 73 2c 6e 2e 6c 61 6e 65 73 3d 65 2e 6c 61 6e 65 73 2c 6e 2e 63 68 69 6c 64 3d 65 2e 63 68 69 6c 64 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 6e 2e 75 70 64 61 74 65 51 75 65 75 65 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 2c 74 Data Ascii: ):(n.pendingProps=t,n.type=e.type,n.flags=0,n.subtreeFlags=0,n.deletions=null),n.flags=14680064&e.flags,n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t
2024-04-24 02:16:25 UTC	16384	IN	Data Raw: 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 28 22 22 2b 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 6c 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 6c 7c 7c 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 75 3d 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 75 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 28 6c 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 Data Ascii: y?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function N(e,t,a,o,i){var l=typeof e;"undefined"!==l&&"boolean"!==l\|\|(e=null);var u=!1;if(null===e)u=!0;else switch(l){case"string":c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49906	104.26.1.90	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:25 UTC	577	OUT	GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:25 UTC	759	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:25 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=4830 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3342 Last-Modified: Wed, 24 Apr 2024 01:20:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PiXvv8BJLEde3%2BCuk3k%2BV%2B4tRHN9ntw9SlxG40bom3%2FwIl1HbIJ8CM0uCIQNcX%2Fp1RkLwpYLK11WmMZYSew9QlR49%2BcLX9obk9dI6DSH1th7WmbuDIeYgxC4k0dLHM4UC16qka0g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879297575b290fb5-LAX
2024-04-24 02:16:25 UTC	610	IN	Data Raw: 31 32 32 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 72 61 6e 64 6d 65 74 72 69 63 73 2c 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e Data Ascii: 122c"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).
2024-04-24 02:16:25 UTC	1369	IN	Data Raw: 74 72 69 63 73 2e 61 70 69 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 61 73 43 6f 6e 73 65 6e 74 28 29 29 29 64 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 65 2c 6f 28 29 7d 29 3b 65 6c 73 65 20 69 66 28 21 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 7b 68 61 73 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 69 73 52 65 61 64 Data Ascii: trics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isRead
2024-04-24 02:16:25 UTC	1369	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 73 70 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 33 34 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 73 74 6f 6d 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 32 33 29 29 28 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 63 6f 6e 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 68 61 6e 64 6c 65 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 3a 20 22 2b 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 74 79 70 65 29 7d 65 2e 63 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 61 28 74 2c 6e 29 3a 73 28 21 31 2c 74 2c 6e 29 7d 29 7d 65 6c 73 65 20 61 28 74 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 Data Ascii: );break;case"usp":e=new(l.getModule(34));break;case"custom":e=new(l.getModule(23))(t.consentMode.conf);break;default:throw new Error("Cannot handle consent type: "+t.consentMode.type)}e.check(function(e){e?a(t,n):s(!1,t,n)})}else a(t,n)},a=function(e,t){i
2024-04-24 02:16:25 UTC	1312	IN	Data Raw: 2c 74 28 29 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2c 6f 3d 6e 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 6f 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 2e 62 6f 64 79 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 2c 73 3d 74 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 73 5b 61 5d 3b 69 7c 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 63 29 7d 76 61 72 20 64 3d 6f 26 26 6f 2e 73 65 61 72 63 68 26 26 2d 31 21 3d 3d 6f 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 62 6d 5f 64 22 29 2c 75 3d 72 26 26 30 3c 72 2e 6c 65 6e 67 74 68 3f 72 3a 5b 6f 2e 68 72 65 66 5d 2c 6c 3d 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 2c 70 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 Data Ascii: ,t())},g=function(e,t){var n=document,o=n.location,r=o.ancestorOrigins;if(n.body){for(var i=0,a=0,s=t;a<s.length;a++){var c=s[a];i\|=Math.pow(2,c)}var d=o&&o.search&&-1!==o.search.indexOf("bm_d"),u=r&&0<r.length?r:[o.href],l=u[u.length-1],p=n.createElement
2024-04-24 02:16:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49905	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:25 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:26 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:16:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49907	104.26.1.90	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:25 UTC	614	OUT	GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:26 UTC	758	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:26 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=49261 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3343 Last-Modified: Wed, 24 Apr 2024 01:20:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OglSRaQ6XMOnfUdXi2zRTSEFtR1YIVnWgZHbx%2BQIfiYOaSy5GT372u9d0XuvHURYnX8%2FrFINk92c%2B2SiAP2fGh5zVso%2BK2gyvHCGdkVnjv0SqYy1my%2FqDQJMrf1XJlywp8IZvp6v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8792975bca012ad5-LAX
2024-04-24 02:16:26 UTC	611	IN	Data Raw: 37 63 61 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 66 2c 75 2c 79 2c 77 2c 61 2c 63 2c 62 3d 21 31 2c 72 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 66 3d 65 2c 61 3d 6f 2c 77 3d 72 2c 6d 3d 74 2c 75 3d 69 29 79 3d 75 2e 73 74 6f 72 61 67 65 3b 65 6c 73 65 20 69 66 28 22 6c 73 22 3d 3d 3d 65 2e 73 74 6f 72 61 67 65 29 74 72 79 7b 79 3d 6e 65 77 28 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 35 29 29 28 66 2c 6d 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 79 3d 76 6f 69 64 20 30 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7cac"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function()
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 3a 21 31 2c 73 68 6f 77 65 64 3a 21 31 7d 29 7d 2c 6f 2e 74 69 6d 65 6f 75 74 29 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 72 29 7d 2c 75 3d 7b 6d 69 64 3a 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6d 69 64 2c 62 69 64 3a 6f 2e 62 69 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 61 75 74 6f 52 65 6e 64 65 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 75 74 6f 52 65 6e 64 65 72 7c 7c 6f 2e 61 75 74 6f 52 65 6e 64 65 72 2c 66 6f 72 63 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 66 6f 72 63 65 26 26 6f 2e 66 6f 72 63 65 2c 69 73 54 65 73 74 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 69 73 54 65 73 74 26 26 6f 2e 69 73 54 65 73 74 2c 64 74 4e 61 6d Data Ascii: :!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtNam
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 29 3b 69 66 28 61 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 28 65 29 3b 72 65 74 75 72 6e 20 72 5b 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 5d 3d 74 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 61 6e 64 6d 65 74 72 69 63 73 3a 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 72 65 61 74 69 6e 67 20 73 75 72 76 65 79 73 2e 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4d 65 74 61 64 61 74 Data Ascii: ion(e){if(void 0===e\|\|void 0===e.measurementId\|\|void 0===e.displayOption)throw new Error("");if(a){var t=a.create(e);return r[e.measurementId]=t}throw new Error("brandmetrics: This configuration does not support creating surveys.")},e.prototype.addMetadat
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 73 74 6f 70 28 29 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2e 73 74 6f 70 28 29 7d 2c 65 7d 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 72 65 67 69 73 74 65 72 28 7b 69 64 3a 30 2c 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 69 2c 61 2c 6e 29 7b 76 61 72 20 73 3d 6e 65 77 20 76 28 65 2c 74 2c 72 2c 6f 2c 69 29 2c 64 3d 7b 62 6d 3a 73 2c 63 6f 6c 6c 65 63 74 69 6f 6e 3a 75 2c 6f 70 74 69 6f 6e 73 3a 65 2c 75 74 69 6c 73 3a 74 2c 63 6c 69 65 6e 74 3a 72 2c 73 74 Data Ascii: prototype.getOptions=function(){return f},e.prototype.stop=function(){void 0!==u&&u.stop(),void 0!==m&&m.stop()},e}();window.brandmetrics.register({id:0,ctor:function(e,t,r,o,i,a,n){var s=new v(e,t,r,o,i),d={bm:s,collection:u,options:e,utils:t,client:r,st
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 2e 74 79 70 65 3d 65 2e 74 79 70 65 2c 74 68 69 73 2e 69 64 3d 74 2c 74 68 69 73 2e 62 65 61 63 6f 6e 49 64 3d 65 2e 69 64 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 65 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6e 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 74 68 69 73 2e 6f 6e 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 72 2c 74 68 69 73 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 31 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 7d 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6f 7c 7c 21 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 32 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f Data Ascii: .type=e.type,this.id=t,this.beaconId=e.id,this.source=e.source,this.element=n,this.measurements=i,this.onPropertyChange=r,this.type){case 0:this.threshold=1e3,this.props={inview:o\|\|!1},this.active=o\|\|!1;break;case 1:this.threshold=2e3,this.props={inview:o
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 28 6e 3d 79 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 79 70 65 29 29 2c 45 2e 70 75 73 68 28 66 29 29 2c 76 6f 69 64 20 30 21 3d 3d 66 26 26 28 6c 3d 30 3d 3d 3d 28 64 3d 66 29 2e 73 74 61 74 65 3f 31 32 3a 31 33 2c 64 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 70 6f 73 74 45 76 65 6e 74 28 6c 2c 65 2e 69 64 2c 76 6f 69 64 20 30 2c 7b 70 69 64 3a 64 2e 69 64 7d 29 7d 29 2c 78 28 30 2c 64 29 2c 30 3d 3d 3d 28 65 2e 69 6e 76 69 65 77 48 61 6e 64 6c 69 6e 67 7c 7c 30 29 29 29 69 66 28 66 2e 65 6c 65 6d 65 6e 74 26 26 67 29 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 6f 62 73 65 72 76 65 28 66 2e 65 6c 65 6d 65 6e 74 29 3b 65 6c 73 65 20 69 66 28 22 61 6c Data Ascii: (n=y.inview)\|\|void 0===n?void 0:n.type)),E.push(f)),void 0!==f&&(l=0===(d=f).state?12:13,d.measurements.forEach(function(e){w.postEvent(l,e.id,void 0,{pid:d.id})}),x(0,d),0===(e.inviewHandling\|\|0)))if(f.element&&g)null==g\|\|g.observe(f.element);else if("al
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 65 3d 33 2c 78 28 22 65 78 70 6f 73 75 72 65 20 65 6e 64 65 64 20 28 22 2e 63 6f 6e 63 61 74 28 72 2c 22 20 73 65 63 29 2c 20 22 29 2c 69 29 7d 69 66 28 74 29 7b 69 2e 65 6c 65 6d 65 6e 74 26 26 28 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 75 6e 4f 62 73 65 72 76 65 28 69 2e 65 6c 65 6d 65 6e 74 29 29 3b 76 61 72 20 65 3d 45 2e 69 6e 64 65 78 4f 66 28 69 29 3b 2d 31 21 3d 3d 65 26 26 28 45 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 78 28 30 2c 69 29 29 7d 7d 29 2c 69 26 26 66 28 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 45 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 31 3d 3d 3d 74 2e 73 74 61 74 65 26 26 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 70 Data Ascii: e=3,x("exposure ended (".concat(r," sec), "),i)}if(t){i.element&&(null==g\|\|g.unObserve(i.element));var e=E.indexOf(i);-1!==e&&(E.splice(e,1),x(0,i))}}),i&&f()},f=function(){var i=[];E.forEach(function(t){1===t.state&&t.measurements.forEach(function(e){i.p
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 28 65 2c 6f 2c 6e 2c 69 29 7d 65 6c 73 65 20 72 26 26 28 65 2e 6b 65 79 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 73 6f 75 72 63 65 2e 74 79 70 65 7c 7c 31 65 33 3c 72 2e 61 67 65 28 29 29 26 26 53 28 5b 72 5d 2c 21 30 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 73 77 69 74 63 68 28 74 2e 73 6f 75 72 63 65 29 7b 63 61 73 65 22 61 70 6e 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 70 74 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 62 6a 22 3a 69 3d 5b 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 74 76 22 3a 63 61 73 65 22 61 70 69 22 3a Data Ascii: (e,o,n,i)}else r&&(e.key.source===r.source.type\|\|1e3<r.age())&&S([r],!0)},P=function(t,e){var i;if(void 0===e)switch(t.source){case"apn":i=["creativeId"];break;case"gpt":i=["creativeId","lineItemId"];break;case"pbj":i=["dealId"];break;case"ntv":case"api":
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 29 2c 76 28 6b 2e 67 65 74 53 65 73 73 69 6f 6e 28 29 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 69 2c 72 2c 6e 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 2c 6b 3d 6e 2c 79 3d 65 2c 77 3d 74 2c 73 3d 72 2c 62 3d 69 3b 76 61 72 20 61 3d 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 32 37 29 3b 61 26 26 28 63 3d 6e 65 77 20 61 29 2c 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 26 26 28 67 3d 54 28 7b 63 6f 6c 6c 65 63 74 69 6f 6e 3a 74 68 69 73 2c 63 61 6c 6c 62 61 63 6b 3a 4d 2c 75 74 69 6c 73 3a 69 7d 29 29 2c 62 2e 6f 6e 28 7b 65 76 Data Ascii: ),v(k.getSession())},e=function(){function e(e,t,i,r,n){var o;this.storage=n,k=n,y=e,w=t,s=r,b=i;var a=brandmetrics.getModule(27);a&&(c=new a),"always"!==(null===(o=e.inview)\|\|void 0===o?void 0:o.type)&&(g=T({collection:this,callback:M,utils:i})),b.on({ev
2024-04-24 02:16:26 UTC	1369	IN	Data Raw: 65 45 78 70 6f 73 75 72 65 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 61 28 65 29 3b 69 26 26 69 2e 75 70 64 61 74 65 50 72 6f 70 65 72 74 69 65 73 28 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 45 78 70 6f 73 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 61 28 65 29 29 2c 74 7c 7c 28 74 3d 41 28 68 28 65 29 29 29 2c 74 26 26 53 28 5b 74 5d 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 73 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 74 5d 3b 72 Data Ascii: eExposureProperties=function(e,t){var i=a(e);i&&i.updateProperties(t)},e.prototype.endExposure=function(e){var t;"string"==typeof e&&(t=a(e)),t\|\|(t=A(h(e))),t&&S([t],!0)},e.prototype.triggerListener=function(e){for(var t=0,i=s;t<i.length;t++){var r=i[t];r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49908	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:26 UTC	2185	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:16:26 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:16:27 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:27 GMT ETag: W/"438e-jIFondGguitZCuVZyLs9lxjhmMQ" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17294 Connection: Close
2024-04-24 02:16:27 UTC	7845	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 35 36 36 37 38 32 35 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 30 33 37 34 36 38 34 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 34 34 37 34 36 31 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 33 35 31 33 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 33 34 30 33 34 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4d 7a 51 77 4d 7a 51 35 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 7a Data Ascii: {"creatives":[{"adId":515667825,"creativeId":340374684,"flightId":504474613,"campaignId":288235130,"advertiserId":2340349,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIz
2024-04-24 02:16:27 UTC	9449	IN	Data Raw: 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d 30 4d 44 4d 33 4e 44 59 34 4e 43 77 69 5a 47 6b 69 4f 69 4a 6d 4d 32 4a 6b 5a 6a 49 33 59 32 5a 6b 4d 7a 55 30 4e 54 55 31 4f 44 56 6b 4f 47 56 6d 5a 47 49 78 59 6a 51 78 4d 57 4d 30 59 53 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 45 79 5a 47 49 32 4f 44 68 69 5a 6a 55 7a 4d 44 51 30 4e 6a 63 35 5a 44 4d 30 4d 47 45 30 4f 54 4a 6d 5a 47 55 7a 59 6d 59 78 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 54 55 32 4e 6a 63 34 4d 6a 55 73 49 6d 5a 73 49 6a 6f 31 4d 44 51 30 4e 7a 51 32 4d 54 4d 73 49 6d 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 49 6a 6f 78 4d 44 49 79 4d 43 77 69 63 47 4d 69 4f 6a 51 77 4c 43 4a 76 63 Data Ascii: IsImNrIjp7fSwiY3IiOjM0MDM3NDY4NCwiZGkiOiJmM2JkZjI3Y2ZkMzU0NTU1ODVkOGVmZGIxYjQxMWM0YSIsImRqIjowLCJpaSI6IjEyZGI2ODhiZjUzMDQ0Njc5ZDM0MGE0OTJmZGUzYmYxIiwiZG0iOjMsImZjIjo1MTU2Njc4MjUsImZsIjo1MDQ0NzQ2MTMsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjQwLCJvc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49910	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:28 UTC	794	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:28 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10fe4828a58246528ac6d56c0ccde12c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: RKtV92x0jEfy7jISSURtk2alNAMUaHnEfwsPXSzkAzLNEomUiVuaNA== Age: 71156
2024-04-24 02:16:28 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49911	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:28 UTC	1930	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924978.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.6; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:16:29 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:29 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:16:29 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49913	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:29 UTC	729	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945129539 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:29 UTC	697	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18513 Connection: close Date: Tue, 23 Apr 2024 09:00:04 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 f3bb78305303d79dc5d570d560cac67a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: jue1St1FZ0q_CjW7O8yf5EGsuNuWdnLMVBYeq1PBvqa3CVfy56kKxw== Age: 62186
2024-04-24 02:16:29 UTC	15687	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 28 74 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 65 2e 6f 28 6e 2c 72 29 26 26 21 65 2e 6f 28 74 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 72 3a 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 Data Ascii: (()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,S
2024-04-24 02:16:29 UTC	2826	IN	Data Raw: 6e 63 20 65 3d 3e 7b 69 66 28 4b 28 42 29 3d 3d 3d 65 2e 6f 72 69 67 69 6e 29 74 72 79 7b 63 6f 6e 73 74 7b 6d 65 74 68 6f 64 3a 74 2c 64 61 74 61 3a 6e 7d 3d 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 61 74 61 3a 74 7d 3d 65 3b 6c 65 74 20 6e 3d 7b 7d 3b 74 72 79 7b 6e 3d 74 2e 72 61 77 3f 74 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 7b 51 28 22 55 6e 61 62 6c 65 54 6f 50 61 72 73 65 4d 65 73 73 61 67 65 22 2c 74 29 7d 6e 2e 63 6f 6d 6d 61 6e 64 7c 7c 51 28 22 45 6d 70 74 79 57 61 6c 6c 70 61 70 65 72 43 6f 6d 6d 61 6e 64 22 2c 74 29 3b 63 6f 6e 73 74 20 72 3d 60 61 70 69 5f 24 7b 6e 2e 63 6f 6d 6d 61 6e 64 7d 60 3b 72 65 74 75 72 6e 20 7a 5b 72 5d 7c 7c 51 28 60 4d 65 74 68 6f 64 4e 6f 74 46 6f 75 6e 64 3a 20 24 7b 72 7d 60 2c 74 29 2c 7b 6d Data Ascii: nc e=>{if(K(B)===e.origin)try{const{method:t,data:n}=(e=>{const{data:t}=e;let n={};try{n=t.raw?t:JSON.parse(t)}catch{Q("UnableToParseMessage",t)}n.command\|\|Q("EmptyWallpaperCommand",t);const r=`api_${n.command}`;return z[r]\|\|Q(`MethodNotFound: ${r}`,t),{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49914	18.164.171.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:29 UTC	561	OUT	GET /eu1/v5/datadog-rum-slim.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:30 UTC	596	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 106028 Connection: close Last-Modified: Tue, 23 Apr 2024 12:34:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:30 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "f57f5bbcb09d115f917b0efad0e910fa" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 33f963e9ac9cd82e403855fad4e8a97c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: Zd8yghabC9_Xzo7-obCuI2CjJ_WiqUFDD6J9lVrW9sYCeeXLjjqcug== Timing-Allow-Origin: *
2024-04-24 02:16:30 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-04-24 02:16:30 UTC	16384	IN	Data Raw: 5f 76 65 72 73 69 6f 6e 3a 32 7d 2c 74 65 6c 65 6d 65 74 72 79 3a 7a 28 65 2c 7b 72 75 6e 74 69 6d 65 5f 65 6e 76 3a 6e 2c 63 6f 6e 6e 65 63 74 69 76 69 74 79 3a 75 65 28 29 7d 29 2c 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 66 65 61 74 75 72 65 73 3a 70 28 6f 74 28 29 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 72 3f 72 28 29 3a 7b 7d 29 7d 28 74 2c 65 2c 73 29 3b 69 2e 6e 6f 74 69 66 79 28 6e 29 2c 61 65 28 22 74 65 6c 65 6d 65 74 72 79 22 2c 6e 29 7d 7d 2c 61 3d 6d 65 2c 62 28 64 65 2c 7b 6d 61 78 45 76 65 6e 74 73 50 65 72 50 61 67 65 3a 65 2e 6d 61 78 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 73 50 65 72 50 61 67 65 2c 73 65 6e 74 45 76 65 6e 74 43 6f 75 6e 74 3a 30 7d 29 2c 7b 73 65 74 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: _version:2},telemetry:z(e,{runtime_env:n,connectivity:ue()}),experimental_features:p(ot())},void 0!==r?r():{})}(t,e,s);i.notify(n),ae("telemetry",n)}},a=me,b(de,{maxEventsPerPage:e.maxTelemetryEventsPerPage,sentEventCount:0}),{setContextProvider:function(
2024-04-24 02:16:30 UTC	16384	IN	Data Raw: 74 72 61 63 65 43 6f 6e 74 65 78 74 49 6e 6a 65 63 74 69 6f 6e 29 3f 74 2e 74 72 61 63 65 43 6f 6e 74 65 78 74 49 6e 6a 65 63 74 69 6f 6e 3a 52 6e 2e 41 4c 4c 7d 2c 6f 29 7d 7d 65 6c 73 65 20 69 2e 65 72 72 6f 72 28 22 45 78 63 6c 75 64 65 64 20 41 63 74 69 76 69 74 79 20 55 72 6c 73 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 61 72 72 61 79 22 29 3b 65 6c 73 65 20 69 2e 65 72 72 6f 72 28 22 54 72 61 63 65 20 53 61 6d 70 6c 65 20 52 61 74 65 20 73 68 6f 75 6c 64 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 30 30 22 29 3b 65 6c 73 65 20 69 2e 65 72 72 6f 72 28 22 53 65 73 73 69 6f 6e 20 52 65 70 6c 61 79 20 53 61 6d 70 6c 65 20 52 61 74 65 20 73 68 6f 75 6c 64 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e Data Ascii: traceContextInjection)?t.traceContextInjection:Rn.ALL},o)}}else i.error("Excluded Activity Urls should be an array");else i.error("Trace Sample Rate should be a number between 0 and 100");else i.error("Session Replay Sample Rate should be a number between
2024-04-24 02:16:30 UTC	14808	IN	Data Raw: 66 20 48 65 61 64 65 72 73 3f 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 70 75 73 68 28 5b 65 2c 74 5d 29 7d 29 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 29 3f 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 70 75 73 68 28 74 29 7d 29 29 3a 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 70 75 73 68 28 5b 74 2c 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 73 5b 74 5d 5d 29 7d 29 29 2c 6e 2e 69 6e 69 74 2e 68 65 61 64 65 72 Data Ascii: f Headers?n.init.headers.forEach((function(t,e){r.push([e,t])})):Array.isArray(n.init.headers)?n.init.headers.forEach((function(t){r.push(t)})):n.init.headers&&Object.keys(n.init.headers).forEach((function(t){r.push([t,n.init.headers[t]])})),n.init.header
2024-04-24 02:16:30 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 49 74 28 74 2c 64 6f 63 75 6d 65 6e 74 2c 6c 74 2e 53 45 43 55 52 49 54 59 5f 50 4f 4c 49 43 59 5f 56 49 4f 4c 41 54 49 4f 4e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 6e 6f 74 69 66 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 42 69 2e 63 73 70 56 69 6f 6c 61 74 69 6f 6e 2c 6e 3d 22 27 22 2e 63 6f 6e 63 61 74 28 74 2e 62 6c 6f 63 6b 65 64 55 52 49 2c 22 27 20 62 6c 6f 63 6b 65 64 20 62 79 20 27 22 29 2e 63 6f 6e 63 61 74 28 74 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2c 22 27 20 64 69 72 65 63 74 69 76 65 22 29 3b 72 65 74 75 72 6e 7b 74 79 70 65 3a 42 69 2e 63 73 70 56 69 6f 6c 61 74 69 6f 6e 2c 73 75 62 74 79 70 65 3a 74 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 Data Ascii: tion(e){return It(t,document,lt.SECURITY_POLICY_VIOLATION,(function(t){e.notify(function(t){var e=Bi.cspViolation,n="'".concat(t.blockedURI,"' blocked by '").concat(t.effectiveDirective,"' directive");return{type:Bi.cspViolation,subtype:t.effectiveDirecti
2024-04-24 02:16:30 UTC	16384	IN	Data Raw: 73 3d 74 2e 69 6e 69 74 69 61 6c 56 69 65 77 4d 65 74 72 69 63 73 2e 6e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 2c 64 6f 6d 5f 63 6f 6e 74 65 6e 74 5f 6c 6f 61 64 65 64 3a 62 74 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 74 2e 69 6e 69 74 69 61 6c 56 69 65 77 4d 65 74 72 69 63 73 2e 6e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 29 2c 64 6f 6d 5f 69 6e 74 65 72 61 63 74 69 76 65 3a 62 74 28 6e 75 6c 6c 3d 3d 3d 28 66 3d 74 2e 69 6e 69 74 69 61 6c 56 69 65 77 4d 65 74 72 69 63 73 2e 6e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 73 29 Data Ascii: s=t.initialViewMetrics.navigationTimings)\|\|void 0===s?void 0:s.domComplete),dom_content_loaded:bt(null===(c=t.initialViewMetrics.navigationTimings)\|\|void 0===c?void 0:c.domContentLoaded),dom_interactive:bt(null===(f=t.initialViewMetrics.navigationTimings)
2024-04-24 02:16:30 UTC	9300	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 2e 67 65 74 49 6e 74 65 72 6e 61 6c 43 6f 6e 74 65 78 74 28 74 29 7d 29 29 2c 67 65 74 49 6e 69 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 67 2e 69 6e 69 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 7d 29 29 2c 61 64 64 41 63 74 69 6f 6e 3a 66 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 67 2e 61 64 64 41 63 74 69 6f 6e 28 7b 6e 61 6d 65 3a 4b 28 74 29 2c 63 6f 6e 74 65 78 74 3a 4b 28 65 29 2c 73 74 61 72 74 43 6c 6f 63 6b 73 3a 45 74 28 29 2c 74 79 70 65 3a 22 63 75 73 74 6f 6d 22 7d 29 7d 29 29 2c 61 64 64 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 51 74 28 29 3b 6c 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: ction(t){return g.getInternalContext(t)})),getInitConfiguration:f((function(){return j(g.initConfiguration)})),addAction:f((function(t,e){g.addAction({name:K(t),context:K(e),startClocks:Et(),type:"custom"})})),addError:function(t,e){var n=Qt();l((function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49912	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:29 UTC	2224	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7
2024-04-24 02:16:29 UTC	980	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 22 2c 22 70 61 67 65 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84","page":"/downloads/04c739eb07109cb2a1e7a9e50e8b62bd2024042308505
2024-04-24 02:16:30 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:29 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:29 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49916	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:31 UTC	2322	OUT	GET /undefined HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:31 UTC	674	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 7084 Connection: close Date: Wed, 24 Apr 2024 02:16:31 GMT ETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eVZ3dOfa3xkCkejfNQr26Ph7pSBj5AE87KctLxw1qun_oFmYT6eavA==
2024-04-24 02:16:31 UTC	7084	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49917	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:31 UTC	2528	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:31 UTC	104	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":16,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-24 02:16:31 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Wed, 24 Apr 2024 02:16:31 GMT ETag: "28-HfI+TrRevDdkylP6fMXM4RhLFbc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z-mf8DafUJnTpUVHDlrXY6mxUp04MdAxRC3KonMDXGjqnW0P-UAMDQ==
2024-04-24 02:16:31 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 31 36 7d Data Ascii: {"status":"ok","metric":"INP","time":16}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49918	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:31 UTC	2528	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:31 UTC	122	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 37 36 34 31 30 36 38 35 39 38 34 30 31 33 33 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.004764106859840133,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-24 02:16:31 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Wed, 24 Apr 2024 02:16:31 GMT ETag: "3a-8MlwrWvyP6zvgrW2olfc30rRTYA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5t5nevKTQWSIQqc3YxdeEQh5CpphbWrDw8XQm75C0kpFF7Vd8ayyxA==
2024-04-24 02:16:31 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 37 36 34 31 30 36 38 35 39 38 34 30 31 33 33 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.004764106859840133}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49919	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:31 UTC	811	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:31 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2878 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:32 GMT ETag: "638b03103c59f408e100f75b696a497f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 4IGvITVHtYToZIwmE0Z1zAC_GYSJyJ5x9344rIftb51YXsmT4ErxFA==
2024-04-24 02:16:31 UTC	2878	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 57 61 6c 6c 70 61 70 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49915	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:31 UTC	1954	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7
2024-04-24 02:16:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:31 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49920	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2240	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:32 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 11:40:40 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: mmqAPI7-9qoREcZshd354T2xPPM_A64dZSECCJ0hNPPZFVyQ5RjbQg== Age: 52553
2024-04-24 02:16:32 UTC	15784	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 3a 33 2e 37 35 65 6d 20 61 75 74 6f 20 30 3b 77 69 64 74 68 3a 31 30 2e 31 32 35 65 6d 7d 7d 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 32 2e 35 65 6d 7d 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 2d 2d 65 6e 61 62 6c 65 64 3a 68 Data Ascii: tica Neue,Lucida Grande,sans-serif}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons{margin:3.75em auto 0;width:10.125em}}.onboarding__form-buttons .button{margin-top:0;width:12.5em}.onboarding__form-buttons .button--enabled:h
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4e 6f 72 6d 61 6c 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 72 65 64 3b Data Ascii: ly:-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Normal,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;color:red;
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 2c 23 66 66 66 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 72 65 6d 3b 6c 65 66 74 3a 2d 31 72 65 6d 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 34 38 34 61 34 64 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f Data Ascii: ound:linear-gradient(90deg,hsla(0,0%,100%,0),#fff);content:"";display:block;width:1rem;left:-1rem;height:100%;position:absolute}.contact-item .contact-item__option{color:#484a4d;font-weight:400;font-family:-apple-system,\.SFNSText-Regular,San Francisco,Ro
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 61 63 63 6f 75 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 6d 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 70 61 79 6d 65 6e 74 3e 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 70 61 79 6d 65 6e 74 3e 61 20 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 Data Ascii: ile-ready .account__content .accountInformation form button[type=submit],.is-mobile-ready .account__content .changepassword .button,.is-mobile-ready .account__content .payment>.button,.is-mobile-ready .account__content .payment>a .button,.is-mobile-ready
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 61 67 65 2d 6c 69 6e 6b 2c 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 20 61 5b 68 72 65 66 2a 3d 75 70 6c 6f 61 64 5d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 2e 38 31 32 35 65 6d 3b 6d 61 72 67 69 6e 3a 2e 39 33 37 35 65 6d 20 30 20 30 20 31 2e 31 32 35 65 6d 3b 77 69 64 74 68 3a 2e 38 31 32 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 20 73 76 67 7b 68 65 69 67 68 74 3a 31 2e 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 37 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 Data Ascii: age-link,.form-notification__message a[href*=upload].form-notification__message-link{color:#fff}.form-notification__icon{float:left;height:.8125em;margin:.9375em 0 0 1.125em;width:.8125em}.form-notification__icon svg{height:1.875em;width:.75em}.form-notif
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 73 5f 5f 6c 69 73 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 37 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 37 2e 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 Data Ascii: ustify-content:center}.is-mobile-ready .free-account-tiers .tiers__list{flex-direction:column;align-items:center}.free-account-tiers .tier{display:flex;flex-direction:column;justify-content:space-between;width:17.5em;max-width:17.5em;background-color:#fff
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 2e 37 35 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 3a 31 2e 35 36 32 35 65 6d 20 31 2e 32 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 2d 2d 69 6e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 36 38 66 66 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 2e 32 35 65 6d 7d 7d 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 20 68 32 7b 66 6f 6e 74 2d 77 Data Ascii: in-bottom:1.25em;margin-top:-3.75em;min-height:6.25em;padding:1.5625em 1.25em;position:relative;width:100%;z-index:1}.accountwarning--inactive{background-color:#5268ff}@media(max-width:48em){.accountwarning{padding-bottom:6.25em}}.accountwarning h2{font-w
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 20 2d 31 70 78 20 30 20 30 20 23 65 38 65 62 65 64 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 5f 5f 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 72 65 6d 3b 74 6f 70 3a 31 2e 31 32 35 72 65 6d 3b 77 69 64 74 68 3a 2e 36 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 2e 36 32 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 63 6f 6c 6f 72 3a 23 31 36 31 36 31 36 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 Data Ascii: -1px 0 0 #e8ebed}.is-mobile-ready .nav__subitem{display:block;position:relative}.is-mobile-ready .nav__subitem__arrow{position:absolute;right:1rem;top:1.125rem;width:.625rem;height:.625rem;transition:transform .25s ease-in-out;color:#161616;flex-shrink:0
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 68 3a 31 30 30 25 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 20 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 3a 68 6f 76 65 72 2c 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 2d 2d 67 72 61 62 62 65 64 20 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 77 69 64 74 68 2d 74 65 73 74 7b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f Data Ascii: h:100%}.scrollable .scrollable__scrollbar-thumb:hover,.scrollable__scrollbar-thumb--grabbed .scrollable__scrollbar-thumb{background:rgba(0,0,0,.25)}.scrollable__width-test{-ms-overflow-style:none;-webkit-overflow-scrolling:touch;height:100px;overflow:scro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49923	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2240	OUT	GET /_next/static/css/7ec742af40df2646.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:32 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 911 Connection: close Date: Wed, 24 Apr 2024 02:16:33 GMT Last-Modified: Tue, 23 Apr 2024 23:19:13 GMT ETag: "e434b9481e572ce66aaaf238a1f3be93" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: q_st7vg6lWNpvTlS38ISPH6MyyvWWWdKuBPZFBXrJ2L00oO6M-Ue9Q==
2024-04-24 02:16:32 UTC	911	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49921	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2271	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:32 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:32 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sgo5-Jpo0CfvLCyht8HE34pCaP2ldhUGwaTioO_tbOM9Q8F6-bOI4A==
2024-04-24 02:16:32 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49922	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2273	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:32 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:32 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MmONoID1f2T6MrYbgElSvxr9j8qTCqnM4RNW5JRIu5cyOm5OXVaFBA==
2024-04-24 02:16:32 UTC	7638	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 2e 31 2d 33 30 2e 35 20 31 39 2e 36 2d 34 34 2e 34 20 33 31 2e 32 6c 2d 31 39 2e 33 2d 32 33 63 31 35 2e 32 2d 31 32 2e 38 20 33 31 2e 35 2d 32 34 2e 32 20 34 38 2e 37 2d 33 34 2e 32 6c 31 35 20 32 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2d 31 30 37 2d 32 39 32 2e 36 6c 2d 36 2e 33 20 32 2e 34 2d 33 2e 32 20 31 2e 32 63 2d 31 2e 31 2e 34 2d 32 2e 31 2e 38 2d 33 2e 31 20 31 2e 33 6c 2d 31 32 2e 34 20 35 2e 35 2d 31 32 2e 32 20 36 2e 31 63 2d 31 20 2e 35 2d 32 20 31 2d 33 20 31 2e 36 6c 2d 33 20 31 2e 37 2d 35 2e 39 20 33 2e 33 2d 31 35 2e 31 2d 32 36 20 36 2e 35 2d 33 2e 36 20 33 2e 32 2d 31 2e 38 20 33 2e 33 2d 31 2e 38 20 31 33 2e 33 2d 36 2e 36 20 31 33 2e 36 2d 36 63 31 2e 31 2d 2e 35 20 32 2e 33 Data Ascii: .1-30.5 19.6-44.4 31.2l-19.3-23c15.2-12.8 31.5-24.2 48.7-34.2l15 26z"/> <path class="st2" d="M-107-292.6l-6.3 2.4-3.2 1.2c-1.1.4-2.1.8-3.1 1.3l-12.4 5.5-12.2 6.1c-1 .5-2 1-3 1.6l-3 1.7-5.9 3.3-15.1-26 6.5-3.6 3.2-1.8 3.3-1.8 13.3-6.6 13.6-6c1.1-.5 2.3
2024-04-24 02:16:32 UTC	16384	IN	Data Raw: 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 33 37 2e 38 20 32 31 32 2e 32 63 31 32 2e 34 2d 32 2e 32 20 32 34 2e 35 2d 35 2e 35 20 33 36 2e 33 2d 39 2e 37 6c 37 2e 31 20 31 39 2e 35 63 2d 31 32 2e 39 20 34 2e 37 2d 32 36 2e 33 20 38 2e 32 2d 33 39 2e 38 20 31 30 2e 37 6c 2d 33 2e 36 2d 32 30 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2e 33 20 32 31 35 2e 36 63 31 32 2e 35 20 30 20 32 35 2e 31 2d 31 2e 32 20 33 37 2e 34 2d 33 2e 34 6c 33 2e 37 20 32 30 2e 35 63 2d 31 33 2e 36 20 32 2e 34 2d 32 37 2e 33 20 33 2e 37 2d 34 31 2e 31 20 33 2e 37 76 2d 32 30 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 2d 33 37 2e 31 20 32 31 Data Ascii: <path class="st1" d="M37.8 212.2c12.4-2.2 24.5-5.5 36.3-9.7l7.1 19.5c-12.9 4.7-26.3 8.2-39.8 10.7l-3.6-20.5z"/> <path class="st2" d="M.3 215.6c12.5 0 25.1-1.2 37.4-3.4l3.7 20.5c-13.6 2.4-27.3 3.7-41.1 3.7v-20.8z"/> <path class="st3" d="M-37.1 21
2024-04-24 02:16:32 UTC	8949	IN	Data Raw: 36 20 32 39 2e 35 2d 31 31 2e 37 20 34 33 2e 37 6c 2d 32 31 2e 35 2d 37 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 32 30 34 2e 39 20 31 31 37 2e 39 63 36 2e 39 2d 31 31 2e 39 20 31 32 2e 37 2d 32 34 2e 35 20 31 37 2e 34 2d 33 37 2e 34 6c 32 31 2e 34 20 37 2e 38 63 2d 35 2e 31 20 31 34 2e 32 2d 31 31 2e 35 20 32 37 2e 39 2d 31 39 20 34 31 6c 2d 31 39 2e 38 2d 31 31 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 31 2e 34 20 31 35 31 2e 37 63 32 2e 32 2d 32 2e 37 20 34 2e 34 2d 35 2e 33 20 36 2e 35 2d 38 6c 36 2e 31 2d 38 2e 33 20 35 2e 37 2d 38 2e 36 63 31 2e 38 2d 32 2e 39 20 33 2e 35 2d 35 2e 39 20 35 2e 33 2d 38 2e 38 6c 31 39 2e 38 20 31 31 Data Ascii: 6 29.5-11.7 43.7l-21.5-7.8z"/> <path class="st3" d="M204.9 117.9c6.9-11.9 12.7-24.5 17.4-37.4l21.4 7.8c-5.1 14.2-11.5 27.9-19 41l-19.8-11.4z"/> <path class="st0" d="M181.4 151.7c2.2-2.7 4.4-5.3 6.5-8l6.1-8.3 5.7-8.6c1.8-2.9 3.5-5.9 5.3-8.8l19.8 11
2024-04-24 02:16:32 UTC	14345	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 34 2e 39 20 36 37 63 2e 39 2d 32 2e 37 20 31 2e 39 2d 35 2e 34 20 32 2e 38 2d 38 2e 31 6c 32 2e 34 2d 38 2e 32 20 32 2d 38 2e 33 63 2e 36 2d 32 2e 38 20 31 2e 31 2d 35 2e 36 20 31 2e 37 2d 38 2e 34 6c 31 38 2e 37 20 33 2e 33 63 2d 2e 36 20 33 2e 31 2d 31 2e 31 20 36 2e 32 2d 31 2e 38 20 39 2e 32 6c 2d 32 2e 32 20 39 2e 31 2d 32 2e 36 20 39 63 2d 2e 39 20 33 2d 32 20 35 2e 39 2d 33 20 38 2e 39 6c 2d 31 38 2d 36 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 37 30 2e 34 20 39 38 2e 31 63 35 2e 37 2d 39 2e 39 20 31 30 2e 35 2d 32 30 2e 33 20 31 34 2e 35 2d 33 31 2e 31 6c 31 37 2e 38 20 36 2e 35 63 2d 34 2e 33 20 31 Data Ascii: > <path class="st0" d="M184.9 67c.9-2.7 1.9-5.4 2.8-8.1l2.4-8.2 2-8.3c.6-2.8 1.1-5.6 1.7-8.4l18.7 3.3c-.6 3.1-1.1 6.2-1.8 9.2l-2.2 9.1-2.6 9c-.9 3-2 5.9-3 8.9l-18-6.5z"/> <path class="st1" d="M170.4 98.1c5.7-9.9 10.5-20.3 14.5-31.1l17.8 6.5c-4.3 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49924	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2088	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:32 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:32 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TfB09up4lZGj_5kZndPxfgn5Fd7vyKl2JXtFt85HDJxr77dT1bzLFg==
2024-04-24 02:16:32 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49926	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	726	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/bundle.5131ec90dd1db1689128.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:33 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 180046 Connection: close Date: Wed, 24 Apr 2024 02:16:34 GMT Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT ETag: "488f87c26a52060914792b3a55398913" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 4DSmDfFEjuPno9WXz7q12Wtqrq35PhcK8rh_CIn9HzJCgLBaC5BXPg==
2024-04-24 02:16:33 UTC	8949	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 35 31 33 31 65 63 39 30 64 64 31 64 62 31 36 38 39 31 32 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 34 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 22 69 6e 74 65 72 61 63 74 69 76 65 22 2c 22 6d 61 73 6b 22 5d 7d 7d 2c 32 32 37 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 Data Ascii: /! For license information please see bundle.5131ec90dd1db1689128.js.LICENSE.txt /!function(){var t,e,n={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:["interactive","mask"]}},2274:function(t,e,n){"use strict";let
2024-04-24 02:16:33 UTC	8056	IN	Data Raw: 72 6e 20 74 68 69 73 7d 28 29 7c 7c 74 68 69 73 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 32 32 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 30 38 37 29 2c 69 3d 6e 28 35 31 35 31 29 2c 6f 3d 72 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 28 69 28 74 29 2c 65 29 7d 7d 2c 36 37 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 32 39 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 Data Ascii: rn this}()\|\|this\|\|Function("return this")()},2256:function(t,e,n){"use strict";var r=n(8087),i=n(5151),o=r({}.hasOwnProperty);t.exports=Object.hasOwn\|\|function(t,e){return o(i(t),e)}},6789:function(t){"use strict";t.exports={}},2944:function(t,e,n){"use s
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 5d 2e 70 75 73 68 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 6f 28 74 29 2c 63 3d 30 2c 6c 3d 5b 5d 3b 66 6f 72 28 6e 20 69 6e 20 72 29 21 69 28 75 2c 6e 29 26 26 69 28 72 2c 6e 29 26 26 61 28 6c 2c 6e 29 3b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 3e 63 3b 29 69 28 72 2c 6e 3d 65 5b 63 2b 2b 5d 29 26 26 28 7e 73 28 6c 2c 6e 29 7c 7c 61 28 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 6c 7d 7d 2c 37 33 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 32 35 32 29 2c 69 3d 6e 28 36 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 2c 69 29 7d Data Ascii: ].push);t.exports=function(t,e){var n,r=o(t),c=0,l=[];for(n in r)!i(u,n)&&i(r,n)&&a(l,n);for(;e.length>c;)i(r,n=e[c++])&&(~s(l,n)\|\|a(l,n));return l}},7333:function(t,e,n){"use strict";var r=n(6252),i=n(64);t.exports=Object.keys\|\|function(t){return r(t,i)}
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 69 3d 31 3b 69 3c 65 3b 69 2b 2b 29 6e 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 63 6f 6e 73 74 20 6f 3d 74 2e 73 75 62 73 63 72 69 62 65 28 2e 2e 2e 6e 29 3b 72 65 74 75 72 6e 20 6f 2e 75 6e 73 75 62 73 63 72 69 62 65 3f 28 29 3d 3e 6f 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 3a 6f 7d 28 74 2c 28 74 3d 3e 65 3d 74 29 29 28 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 6e 2c 72 29 7b 69 66 28 74 29 7b 63 6f 6e 73 74 20 69 3d 67 28 74 2c 65 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 20 74 5b 30 5d 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 31 5d 26 26 72 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f Data Ascii: h,n=new Array(e>1?e-1:0),i=1;i<e;i++)n[i-1]=arguments[i];const o=t.subscribe(...n);return o.unsubscribe?()=>o.unsubscribe():o}(t,(t=>e=t))(),e}function h(t,e,n,r){if(t){const i=g(t,e,n,r);return t[0](i)}}function g(t,e,n,r){return t[1]&&r?function(t,e){fo
2024-04-24 02:16:33 UTC	1937	IN	Data Raw: 26 26 28 30 2c 74 2e 6f 67 74 29 28 6e 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 6c 65 74 20 6e 3b 72 65 74 75 72 6e 7b 63 28 29 7b 6e 3d 28 30 2c 74 2e 62 47 42 29 28 22 64 69 76 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 6e 2c 22 63 6c 61 73 73 22 2c 22 6f 76 65 72 6c 61 79 20 73 76 65 6c 74 65 2d 31 62 6c 38 67 36 73 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 6e 2c 22 73 74 79 6c 65 22 2c 65 5b 35 5d 29 7d 2c 6d 28 65 2c 72 29 7b 28 30 2c 74 2e 24 54 72 29 28 65 2c 6e 2c 72 29 7d 2c 70 28 65 2c 72 29 7b 33 32 26 72 26 26 28 30 2c 74 2e 4c 6a 74 29 28 6e 2c 22 73 74 79 6c 65 22 2c 65 5b 35 5d 29 7d 2c 64 28 65 29 7b 65 26 26 28 30 2c 74 2e 6f 67 74 29 28 6e 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 6c 65 74 20 6e 3b 66 75 6e 63 74 69 6f Data Ascii: &&(0,t.ogt)(n)}}}function T(e){let n;return{c(){n=(0,t.bGB)("div"),(0,t.Ljt)(n,"class","overlay svelte-1bl8g6s"),(0,t.Ljt)(n,"style",e[5])},m(e,r){(0,t.$Tr)(e,n,r)},p(e,r){32&r&&(0,t.Ljt)(n,"style",e[5])},d(e){e&&(0,t.ogt)(n)}}}function L(e){let n;functio
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 24 7b 4d 7d 3b 20 6f 70 61 63 69 74 79 3a 20 24 7b 70 7d 3b 60 29 7d 2c 5b 61 2c 6c 2c 4d 2c 68 2c 67 2c 72 2c 69 2c 6f 2c 73 2c 75 2c 63 2c 66 2c 70 5d 7d 63 6c 61 73 73 20 76 20 65 78 74 65 6e 64 73 20 74 2e 66 5f 43 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 28 30 2c 74 2e 53 31 6e 29 28 74 68 69 73 2c 65 2c 4e 2c 4c 2c 74 2e 4e 38 2c 7b 63 6f 6c 6f 72 3a 36 2c 67 72 61 64 69 65 6e 74 53 74 61 72 74 43 6f 6c 6f 72 3a 37 2c 67 72 61 64 69 65 6e 74 45 6e 64 43 6f 6c 6f 72 3a 38 2c 67 72 61 64 69 65 6e 74 44 65 67 72 65 65 73 3a 39 2c 69 6d 61 67 65 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 31 30 2c 72 65 70 65 61 74 3a 31 2c 73 69 7a 65 3a 31 31 2c 6f 76 65 72 6c 61 79 43 6f 6c Data Ascii: background-color: ${M}; opacity: ${p};`)},[a,l,M,h,g,r,i,o,s,u,c,f,p]}class v extends t.f_C{constructor(e){super(),(0,t.S1n)(this,e,N,L,t.N8,{color:6,gradientStartColor:7,gradientEndColor:8,gradientDegrees:9,image:0,position:10,repeat:1,size:11,overlayCol
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 6e 64 65 78 4f 66 28 22 28 22 29 2b 31 2c 72 3d 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 29 2c 69 3d 65 2e 69 6e 64 65 78 4f 66 28 22 28 22 2c 6e 29 2c 65 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 7e 69 26 26 69 3c 72 3f 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 72 2b 31 29 3a 72 29 29 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4a 74 29 29 3a 6e 6e 2e 5f 43 45 26 26 72 6e 2e 74 65 73 74 28 74 29 3f 6e 6e 2e 5f 43 45 28 22 22 2c 74 29 3a 73 7d 28 74 29 29 7c 7c 65 7d 2c 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: ndexOf("(")+1,r=e.indexOf(")"),i=e.indexOf("(",n),e.substring(n,~i&&i<r?e.indexOf(")",r+1):r)).split(",").map(Jt)):nn._CE&&rn.test(t)?nn._CE("",t):s}(t))\|\|e},ln=function(t,e,n,r){void 0===n&&(n=function(t){return 1-e(1-t)}),void 0===r&&(r=function(t){retu
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 22 67 65 74 22 21 3d 3d 6e 3f 6e 3a 73 74 28 66 29 3f 61 3f 74 5b 65 2e 69 6e 64 65 78 4f 66 28 22 73 65 74 22 29 7c 7c 21 73 74 28 74 5b 22 67 65 74 22 2b 65 2e 73 75 62 73 74 72 28 33 29 5d 29 3f 65 3a 22 67 65 74 22 2b 65 2e 73 75 62 73 74 72 28 33 29 5d 28 61 29 3a 74 5b 65 5d 28 29 3a 66 2c 70 3d 73 74 28 66 29 3f 61 3f 53 6e 3a 6b 6e 3a 41 6e 3b 69 66 28 6f 74 28 72 29 26 26 28 7e 72 2e 69 6e 64 65 78 4f 66 28 22 72 61 6e 64 6f 6d 28 22 29 26 26 28 72 3d 51 65 28 72 29 29 2c 22 3d 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 31 29 26 26 28 28 6c 3d 24 74 28 4d 2c 72 29 2b 28 4f 65 28 4d 29 7c 7c 30 29 29 7c 7c 30 3d 3d 3d 6c 29 26 26 28 72 3d 6c 29 29 2c 21 63 7c 7c 4d 21 3d 3d 72 7c 7c 6a 6e 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 4d 2a 72 29 7c 7c 22 Data Ascii: "get"!==n?n:st(f)?a?t[e.indexOf("set")\|\|!st(t["get"+e.substr(3)])?e:"get"+e.substr(3)](a):t[e]():f,p=st(f)?a?Sn:kn:An;if(ot(r)&&(~r.indexOf("random(")&&(r=Qe(r)),"="===r.charAt(1)&&((l=$t(M,r)+(Oe(M)\|\|0))\|\|0===l)&&(r=l)),!c\|\|M!==r\|\|jn)return isNaN(M*r)\|\|"
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 5f 74 61 72 67 65 74 73 5b 30 5d 7c 7c 67 65 28 69 2c 6e 2c 6e 2e 5f 73 74 61 72 74 2d 6e 2e 5f 64 65 6c 61 79 29 2c 6e 3d 72 3b 72 65 74 75 72 6e 20 67 65 28 55 2c 69 2c 30 29 2c 69 7d 2c 63 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 58 6e 28 74 2c 65 29 3a 43 7d 2c 6d 61 74 63 68 4d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4a 6e 28 74 29 7d 2c 6d 61 74 63 68 4d 65 64 69 61 52 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3d 74 2e 63 6f 6e 64 69 74 69 6f 6e 73 3b 66 6f 72 28 6e 20 69 6e 20 72 29 72 5b 6e 5d 26 26 28 72 5b 6e 5d Data Ascii: _targets[0]\|\|ge(i,n,n._start-n._delay),n=r;return ge(U,i,0),i},context:function(t,e){return t?new Xn(t,e):C},matchMedia:function(t){return new Jn(t)},matchMediaRefresh:function(){return qn.forEach((function(t){var e,n,r=t.conditions;for(n in r)r[n]&&(r[n]
2024-04-24 02:16:33 UTC	4096	IN	Data Raw: 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 79 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 73 2c 75 2c 61 2c 63 2c 6c 3d 64 69 28 7b 7d 2c 6e 2e 5f 67 73 61 70 29 2c 66 3d 6e 2e 73 74 79 6c 65 3b 66 6f 72 28 69 20 69 6e 20 6c 2e 73 76 67 3f 28 6f 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 22 29 2c 66 5b 6b 72 5d 3d 65 2c 72 3d 73 69 28 6e 2c 31 29 2c 42 72 28 6e 2c 6b 72 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 2c 6f 29 29 3a 28 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 Data Ascii: ,e){for(var n in e)t[n]=e[n];return t},yi=function(t,e,n){var r,i,o,s,u,a,c,l=di({},n._gsap),f=n.style;for(i in l.svg?(o=n.getAttribute("transform"),n.setAttribute("transform",""),f[kr]=e,r=si(n,1),Br(n,kr),n.setAttribute("transform",o)):(o=getComputedSty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49927	13.226.228.126	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	560	OUT	GET /packs/js/wallpaper-api-v2.js HTTP/1.1 Host: prod-cdn.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:32 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10327 Connection: close Date: Fri, 19 Apr 2024 14:49:41 GMT Last-Modified: Tue, 27 Jun 2023 07:15:46 GMT ETag: "4b0b7d731b18d770c7c8e83ccbb777f8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 390b284b93b535130c65850f2530b95c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: hBKhL0DA_CONsXPwwVUUwjRIei-qUk0r5A3yLehEbk1pi1lgcZ8XSA== Age: 386812
2024-04-24 02:16:32 UTC	9594	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-24 02:16:32 UTC	733	IN	Data Raw: 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 6e 3d 77 69 6e 64 6f 77 29 7d 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 65 2e 65 78 70 6f 72 74 73 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 7d Data Ascii: urn this")()}catch(e){"object"==typeof window&&(n=window)}e.exports=n},90:function(e,t){e.exports=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r},e.exports.default=e.exports,e.exports.__esModule=!0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49928	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2088	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925881867&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:33 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -Vlwj2fnLCMlSJzjXP3EmB3oP_nj5D550YOY2OcKMzfq1COGTiI18A==
2024-04-24 02:16:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49929	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:32 UTC	2036	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:33 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Y1ae4fFMsJMQ7mUFFBh075ku_CJcNI5y_wT1OKY4EL4s-HWzw8WzSg==
2024-04-24 02:16:33 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49931	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2236	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wbwstBPWNrU2t4Zj7MAq7HqF-VwaW_TxHbj1X-tVkcFj3TP9LrVgbQ== Age: 41047
2024-04-24 02:16:33 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49932	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2038	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:16:33 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JH0HQhFHjVN1HQ5TL961j0qG1bDSmlkLsmbTmgUjB7HFtS8pSCTbsQ==
2024-04-24 02:16:33 UTC	15640	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-24 02:16:33 UTC	222	IN	Data Raw: 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 2d 31 39 38 2e 32 20 31 36 37 63 32 2e 35 20 32 2e 38 20 34 2e 39 20 35 2e 37 20 37 2e 35 20 38 2e 35 6c 37 2e 38 20 38 2e 32 20 38 2e 33 20 37 2e 38 63 32 2e 38 20 32 2e 35 20 35 2e 37 20 35 20 38 2e 35 20 37 2e 34 6c 2d 31 36 20 31 39 2e 32 63 2d 33 2e 31 2d 32 2e 37 2d 36 2e 33 2d 35 2e 33 2d 39 2e 34 2d 38 2e 31 6c 2d 39 2d 38 2e 35 2d 38 2e 36 2d 39 63 2d 32 2e 38 2d 33 2d 35 2e 34 2d 36 2e 32 2d 38 2e 32 2d 39 2e 33 6c 31 39 2e 31 2d 31 36 2e 32 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 2d 32 32 34 2e 32 20 31 33 30 63 37 2e 36 20 31 33 2e 31 20 31 36 2e 33 20 32 Data Ascii: ss="st1" d="M-198.2 167c2.5 2.8 4.9 5.7 7.5 8.5l7.8 8.2 8.3 7.8c2.8 2.5 5.7 5 8.5 7.4l-16 19.2c-3.1-2.7-6.3-5.3-9.4-8.1l-9-8.5-8.6-9c-2.8-3-5.4-6.2-8.2-9.3l19.1-16.2z"/> <path class="st2" d="M-224.2 130c7.6 13.1 16.3 2
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 35 2e 34 20 32 36 20 33 37 6c 2d 31 39 2e 31 20 31 36 2e 31 63 2d 31 30 2e 36 2d 31 32 2e 37 2d 32 30 2e 32 2d 32 36 2e 32 2d 32 38 2e 35 2d 34 30 2e 35 6c 32 31 2e 36 2d 31 32 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 2d 32 34 33 2e 36 20 38 39 2e 31 63 35 2e 32 20 31 34 2e 32 20 31 31 2e 37 20 32 37 2e 38 20 31 39 2e 33 20 34 30 2e 39 6c 2d 32 31 2e 36 20 31 32 2e 36 63 2d 38 2e 33 2d 31 34 2e 33 2d 31 35 2e 34 2d 32 39 2e 33 2d 32 31 2e 31 2d 34 34 2e 38 6c 32 33 2e 34 2d 38 2e 37 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 2d 32 35 35 2e 31 20 34 35 2e 35 63 32 2e 36 20 31 34 2e 39 20 36 2e 35 20 32 39 2e 35 20 31 31 2e 37 20 34 33 2e 36 6c 2d 32 Data Ascii: 5.4 26 37l-19.1 16.1c-10.6-12.7-20.2-26.2-28.5-40.5l21.6-12.6z"/> <path class="st3" d="M-243.6 89.1c5.2 14.2 11.7 27.8 19.3 40.9l-21.6 12.6c-8.3-14.3-15.4-29.3-21.1-44.8l23.4-8.7z"/> <path class="st0" d="M-255.1 45.5c2.6 14.9 6.5 29.5 11.7 43.6l-2
2024-04-24 02:16:33 UTC	8160	IN	Data Raw: 37 20 36 31 2e 31 63 33 2e 35 2d 39 2e 38 20 36 2e 32 2d 31 39 2e 39 20 38 2d 33 30 2e 32 6c 31 37 20 33 63 2d 32 20 31 31 2e 33 2d 34 2e 39 20 32 32 2e 34 2d 38 2e 38 20 33 33 2e 31 6c 2d 31 36 2e 32 2d 35 2e 39 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 35 35 2e 36 20 38 39 2e 35 63 35 2e 32 2d 39 2e 31 20 39 2e 36 2d 31 38 2e 36 20 31 33 2e 31 2d 32 38 2e 34 4c 31 38 35 20 36 37 63 2d 33 2e 39 20 31 30 2e 38 2d 38 2e 37 20 32 31 2e 32 2d 31 34 2e 34 20 33 31 2e 31 6c 2d 31 35 2d 38 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 33 37 2e 37 20 31 31 35 2e 31 63 36 2e 37 2d 38 20 31 32 2e 37 2d 31 36 2e 36 20 31 38 2d 32 35 2e 36 6c 31 35 20 38 2e Data Ascii: 7 61.1c3.5-9.8 6.2-19.9 8-30.2l17 3c-2 11.3-4.9 22.4-8.8 33.1l-16.2-5.9z"/> <path class="st2" d="M155.6 89.5c5.2-9.1 9.6-18.6 13.1-28.4L185 67c-3.9 10.8-8.7 21.2-14.4 31.1l-15-8.6z"/> <path class="st3" d="M137.7 115.1c6.7-8 12.7-16.6 18-25.6l15 8.
2024-04-24 02:16:33 UTC	8949	IN	Data Raw: 36 20 32 39 2e 35 2d 31 31 2e 37 20 34 33 2e 37 6c 2d 32 31 2e 35 2d 37 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 32 30 34 2e 39 20 31 31 37 2e 39 63 36 2e 39 2d 31 31 2e 39 20 31 32 2e 37 2d 32 34 2e 35 20 31 37 2e 34 2d 33 37 2e 34 6c 32 31 2e 34 20 37 2e 38 63 2d 35 2e 31 20 31 34 2e 32 2d 31 31 2e 35 20 32 37 2e 39 2d 31 39 20 34 31 6c 2d 31 39 2e 38 2d 31 31 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 31 2e 34 20 31 35 31 2e 37 63 32 2e 32 2d 32 2e 37 20 34 2e 34 2d 35 2e 33 20 36 2e 35 2d 38 6c 36 2e 31 2d 38 2e 33 20 35 2e 37 2d 38 2e 36 63 31 2e 38 2d 32 2e 39 20 33 2e 35 2d 35 2e 39 20 35 2e 33 2d 38 2e 38 6c 31 39 2e 38 20 31 31 Data Ascii: 6 29.5-11.7 43.7l-21.5-7.8z"/> <path class="st3" d="M204.9 117.9c6.9-11.9 12.7-24.5 17.4-37.4l21.4 7.8c-5.1 14.2-11.5 27.9-19 41l-19.8-11.4z"/> <path class="st0" d="M181.4 151.7c2.2-2.7 4.4-5.3 6.5-8l6.1-8.3 5.7-8.6c1.8-2.9 3.5-5.9 5.3-8.8l19.8 11
2024-04-24 02:16:33 UTC	14345	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 34 2e 39 20 36 37 63 2e 39 2d 32 2e 37 20 31 2e 39 2d 35 2e 34 20 32 2e 38 2d 38 2e 31 6c 32 2e 34 2d 38 2e 32 20 32 2d 38 2e 33 63 2e 36 2d 32 2e 38 20 31 2e 31 2d 35 2e 36 20 31 2e 37 2d 38 2e 34 6c 31 38 2e 37 20 33 2e 33 63 2d 2e 36 20 33 2e 31 2d 31 2e 31 20 36 2e 32 2d 31 2e 38 20 39 2e 32 6c 2d 32 2e 32 20 39 2e 31 2d 32 2e 36 20 39 63 2d 2e 39 20 33 2d 32 20 35 2e 39 2d 33 20 38 2e 39 6c 2d 31 38 2d 36 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 37 30 2e 34 20 39 38 2e 31 63 35 2e 37 2d 39 2e 39 20 31 30 2e 35 2d 32 30 2e 33 20 31 34 2e 35 2d 33 31 2e 31 6c 31 37 2e 38 20 36 2e 35 63 2d 34 2e 33 20 31 Data Ascii: > <path class="st0" d="M184.9 67c.9-2.7 1.9-5.4 2.8-8.1l2.4-8.2 2-8.3c.6-2.8 1.1-5.6 1.7-8.4l18.7 3.3c-.6 3.1-1.1 6.2-1.8 9.2l-2.2 9.1-2.6 9c-.9 3-2 5.9-3 8.9l-18-6.5z"/> <path class="st1" d="M170.4 98.1c5.7-9.9 10.5-20.3 14.5-31.1l17.8 6.5c-4.3 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49930	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2238	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Thu, 22 Feb 2024 02:45:11 GMT Last-Modified: Wed, 21 Feb 2024 21:08:01 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RUJTsIWNFZqly0nYYqglWFsgquDkQIiw6ofAMnq8fFy2VlWv_gVxiQ== Age: 5355083
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 Data Ascii: o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedStat
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 65 20 70 61 75 73 65 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 43 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 44 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 55 70 20 72 61 74 65 63 68 61 6e 67 65 20 72 61 74 65 43 68 61 6e 67 65 20 72 65 73 65 74 20 72 65 73 65 74 20 73 65 65 6b 65 64 20 73 65 65 6b 65 64 20 73 75 62 6d 69 74 20 73 75 62 6d 69 74 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 43 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 45 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 53 74 61 72 74 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 76 6f 6c 75 6d 65 43 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 Data Ascii: e pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 63 61 28 72 2c 6c 29 3b 61 2e 74 61 67 3d 31 2c 61 2e 70 61 79 6c 6f 61 64 3d 74 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 66 61 28 65 2c 61 29 2c 68 69 28 65 2c 6c 2c 72 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 64 69 28 29 2c 72 3d 70 69 28 65 29 2c 6c 3d 63 61 28 6e 2c 72 29 3b 6c 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6c 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 66 61 28 65 Data Ascii: =e._reactInternals;var r=di(),l=pi(e),a=ca(r,l);a.tag=1,a.payload=t,void 0!==n&&null!==n&&(a.callback=n),fa(e,a),hi(e,l,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=di(),r=pi(e),l=ca(n,r);l.tag=2,void 0!==t&&null!==t&&(l.callback=t),fa(e
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 65 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3a 74 7d 29 2e 64 69 73 70 61 74 63 68 3d 7a 6f 2e 62 69 6e 64 28 6e 75 6c 6c 2c 4a 61 2c 65 29 2c 5b 72 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 65 5d 7d 2c 75 73 65 52 65 66 3a 79 6f 2c 75 73 65 53 74 61 74 65 3a 76 6f 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 50 6f 2c 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 6f 28 65 29 2c 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 31 5d 3b 72 65 74 75 72 6e 20 53 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 31 3b 74 72 Data Ascii: ch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=zo.bind(null,Ja,e),[r.memoizedState,e]},useRef:yo,useState:vo,useDebugValue:Po,useDeferredValue:function(e){var t=vo(e),n=t[0],r=t[1];return So((function(){var t=Ga.transition;Ga.transition=1;tr
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 32 3a 31 26 74 29 2c 6e 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 45 69 28 29 2c 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 21 3d 3d 28 6e 75 6c 6c 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 22 75 6e 73 74 61 62 6c 65 2d 64 65 66 65 72 2d 77 69 74 68 6f 75 74 2d 68 69 64 69 6e 67 22 21 3d 3d 72 2e 6d 6f 64 65 26 26 28 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6e 75 6c 6c 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 35 36 2c 74 2e 74 61 67 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 75 28 65 29 7b 73 77 69 74 63 68 28 65 2e 74 61 67 29 7b 63 61 73 65 20 31 3a 67 6c 28 65 2e 74 79 70 65 29 26 26 79 6c 28 29 3b 76 61 72 20 74 3d 65 2e 66 6c 61 67 Data Ascii: 2:1&t),n):null;case 23:case 24:return Ei(),null!==e&&null!==e.memoizedState!==(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags\|=4),null}throw Error(o(156,t.tag))}function iu(e){switch(e.tag){case 1:gl(e.type)&&yl();var t=e.flag
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 66 28 30 3d 3d 3d 28 36 34 26 64 2e 66 6c 61 67 73 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 7c 7c 6e 75 6c 6c 21 3d 3d 53 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 26 26 28 6e 75 6c 6c 3d 3d 3d 5a 75 7c 7c 21 5a 75 2e 68 61 73 28 53 29 29 29 29 7b 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 74 26 3d 2d 74 2c 64 2e 6c 61 6e 65 73 7c 3d 74 2c 64 61 28 64 2c 70 75 28 64 2c 61 2c 74 29 29 3b 62 72 65 61 6b 20 65 7d 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 7d 7a 69 28 6e 29 7d 63 61 74 63 68 28 45 29 7b 74 3d 45 2c 4d 75 3d 3d 3d 6e 26 Data Ascii: f(0===(64&d.flags)&&("function"===typeof k.getDerivedStateFromError\|\|null!==S&&"function"===typeof S.componentDidCatch&&(null===Zu\|\|!Zu.has(S)))){d.flags\|=4096,t&=-t,d.lanes\|=t,da(d,pu(d,a,t));break e}}d=d.return}while(null!==d)}zi(n)}catch(E){t=E,Mu===n&
2024-04-24 02:16:33 UTC	13232	IN	Data Raw: 6c 6c 21 3d 3d 28 69 3d 75 2e 73 69 62 6c 69 6e 67 29 29 7b 69 2e 72 65 74 75 72 6e 3d 75 2e 72 65 74 75 72 6e 2c 75 3d 69 3b 62 72 65 61 6b 7d 75 3d 75 2e 72 65 74 75 72 6e 7d 69 3d 75 7d 55 6f 28 65 2c 74 2c 6c 2e 63 68 69 6c 64 72 65 6e 2c 6e 29 2c 74 3d 74 2e 63 68 69 6c 64 7d 72 65 74 75 72 6e 20 74 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 6c 3d 74 2e 74 79 70 65 2c 72 3d 28 61 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 29 2e 63 68 69 6c 64 72 65 6e 2c 61 61 28 74 2c 6e 29 2c 72 3d 72 28 6c 3d 6f 61 28 6c 2c 61 2e 75 6e 73 74 61 62 6c 65 5f 6f 62 73 65 72 76 65 64 42 69 74 73 29 29 2c 74 2e 66 6c 61 67 73 7c 3d 31 2c 55 6f 28 65 2c 74 2c 72 2c 6e 29 2c 74 2e 63 68 69 6c 64 3b 63 61 73 65 20 31 34 3a 72 65 74 75 72 6e 20 61 3d 47 6c 28 6c 3d 74 Data Ascii: ll!==(i=u.sibling)){i.return=u.return,u=i;break}u=u.return}i=u}Uo(e,t,l.children,n),t=t.child}return t;case 9:return l=t.type,r=(a=t.pendingProps).children,aa(t,n),r=r(l=oa(l,a.unstable_observedBits)),t.flags\|=1,Uo(e,t,r,n),t.child;case 14:return a=Gl(l=t
2024-04-24 02:16:33 UTC	2076	IN	Data Raw: 6c 6c 2c 4c 3d 33 2c 7a 3d 21 31 2c 4f 3d 21 31 2c 52 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 45 28 50 29 3b 6e 75 6c 6c 21 3d 3d 74 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 63 61 6c 6c 62 61 63 6b 29 5f 28 50 29 3b 65 6c 73 65 7b 69 66 28 21 28 74 2e 73 74 61 72 74 54 69 6d 65 3c 3d 65 29 29 62 72 65 61 6b 3b 5f 28 50 29 2c 74 2e 73 6f 72 74 49 6e 64 65 78 3d 74 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 2c 53 28 43 2c 74 29 7d 74 3d 45 28 50 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 69 66 28 52 3d 21 31 2c 4d 28 65 29 2c 21 4f 29 69 66 28 6e 75 6c 6c 21 3d 3d 45 28 43 29 29 4f 3d 21 30 2c 6e 28 49 29 3b 65 6c 73 65 7b 76 61 72 20 74 3d 45 28 50 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 72 28 46 2c 74 Data Ascii: ll,L=3,z=!1,O=!1,R=!1;function M(e){for(var t=E(P);null!==t;){if(null===t.callback)_(P);else{if(!(t.startTime<=e))break;_(P),t.sortIndex=t.expirationTime,S(C,t)}t=E(P)}}function F(e){if(R=!1,M(e),!O)if(null!==E(C))O=!0,n(I);else{var t=E(P);null!==t&&r(F,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49935	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2233	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Sat, 21 Oct 2023 16:35:10 GMT Last-Modified: Fri, 20 Oct 2023 16:44:07 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vqUVqsnfewtD0mclXlmfSeq4CkNvnIU-L8_rbmvykIzvpwRTymcIBg== Age: 16018883
2024-04-24 02:16:33 UTC	15774	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 29 2c 54 2e 69 73 53 73 72 26 26 22 2f 34 30 34 22 21 3d 3d 44 2e 70 61 67 65 26 26 22 2f 5f 65 72 72 6f 72 22 21 3d 3d 44 2e 70 61 67 65 26 26 28 44 2e 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 44 2e 6e 65 78 74 45 78 70 6f 72 74 26 26 28 76 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 54 2e 70 61 74 68 6e 61 6d 65 29 7c 7c Data Ascii: guments)}return a(r,[{key:"componentDidCatch",value:function(e,t){this.props.fn(e,t)}},{key:"componentDidMount",value:function(){this.scrollToHash(),T.isSsr&&"/404"!==D.page&&"/_error"!==D.page&&(D.isFallback\|\|D.nextExport&&(v.isDynamicRoute(T.pathname)\|\|
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 63 72 69 70 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 29 7d 2c 74 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 29 7d 28 65 29 29 2c 74 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 63 2e 73 65 74 28 65 2c 74 3d 66 65 74 63 68 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 74 79 6c 65 73 68 65 65 74 3a 20 22 2e 63 6f Data Ascii: new Error("Failed to load script: ".concat(e))))},t.crossOrigin=void 0,t.src=e,document.body.appendChild(t)}))}(e)),t))},r=function(e){var t=c.get(e);return t\|\|(c.set(e,t=fetch(e).then((function(t){if(!t.ok)throw new Error("Failed to load stylesheet: ".co
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 2b 31 29 3b 65 2e 68 61 73 28 75 29 3f 6f 3d 21 31 3a 65 2e 61 64 64 28 75 29 7d 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 62 61 73 65 22 3a 74 2e 68 61 73 28 61 2e 74 79 70 65 29 3f 6f 3d 21 31 3a 74 2e 61 64 64 28 61 2e 74 79 70 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 65 74 61 22 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 73 3d 70 2e 6c 65 6e 67 74 68 3b 63 3c 73 3b 63 2b 2b 29 7b 76 61 72 20 6c 3d 70 5b 63 5d 3b 69 66 28 61 2e 70 72 6f 70 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 69 66 28 22 63 68 61 72 53 65 74 22 3d 3d 3d 6c 29 72 2e 68 61 73 28 6c 29 3f 6f 3d 21 31 3a 72 2e 61 64 64 28 6c 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 70 72 6f 70 73 5b 6c 5d 2c 64 3d 6e 5b 6c 5d Data Ascii: +1);e.has(u)?o=!1:e.add(u)}switch(a.type){case"title":case"base":t.has(a.type)?o=!1:t.add(a.type);break;case"meta":for(var c=0,s=p.length;c<s;c++){var l=p[c];if(a.props.hasOwnProperty(l))if("charSet"===l)r.has(l)?o=!1:r.add(l);else{var f=a.props[l],d=n[l]
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 34 3a 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 3b 63 61 73 65 20 32 35 3a 69 66 28 22 2f 61 70 69 22 21 3d 3d 67 26 26 21 67 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 61 70 69 2f 22 29 29 7b 65 2e 6e 65 78 74 3d 32 38 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 4b 28 7b 75 72 6c 3a 69 2c 72 6f 75 74 65 72 3a 79 7d 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 3b 63 61 73 65 20 32 38 3a 69 66 28 65 2e 74 30 3d 4f 2c 65 2e 74 30 29 7b 65 2e 6e 65 78 74 3d 33 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 33 32 2c 79 2e 66 65 74 63 68 43 6f 6d 70 6f 6e 65 6e 74 28 67 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: 4:O=S&&!("initial"in S)?S:void 0;case 25:if("/api"!==g&&!g.startsWith("/api/")){e.next=28;break}return K({url:i,router:y}),e.abrupt("return",new Promise((function(){})));case 28:if(e.t0=O,e.t0){e.next=33;break}return e.next=32,y.fetchComponent(g).then((fu
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 30 5d 26 26 28 6c 3d 22 3f 22 2b 6c 29 2c 69 3d 69 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 23 5d 2f 67 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6c 3d 6c 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 25 32 33 22 29 2c 22 22 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 75 29 7d 74 2e 75 72 6c 4f 62 6a 65 63 74 4b 65 79 73 3d 5b 22 61 75 74 68 22 2c 22 68 61 73 68 22 2c 22 68 6f 73 74 22 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 22 68 72 65 66 22 2c 22 70 61 74 68 22 2c 22 70 61 74 68 6e 61 6d 65 22 2c 22 70 6f 72 74 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 2c 22 71 75 65 72 79 22 2c 22 73 65 61 72 63 68 22 2c 22 73 6c 61 73 68 65 73 22 5d 7d 2c 38 38 37 33 Data Ascii: 0]&&(l="?"+l),i=i.replace(/[?#]/g,encodeURIComponent),l=l.replace("#","%23"),"".concat(a).concat(s).concat(i).concat(l).concat(u)}t.urlObjectKeys=["auth","hash","host","hostname","href","path","pathname","port","protocol","query","search","slashes"]},8873
2024-04-24 02:16:33 UTC	16384	IN	Data Raw: 64 72 65 6e 2e 73 65 74 28 61 2c 6e 65 77 20 65 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 28 61 29 2e 5f 69 6e 73 65 72 74 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 2c 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 21 31 7d 7d 5d 29 2c 65 7d 28 29 7d 2c 39 36 31 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 65 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: dren.set(a,new e),this.children.get(a)._insert(t.slice(1),r,n)}else this.placeholder=!1}}]),e}()},96112:function(e,t){"use strict";var r;Object.defineProperty(t,"__esModule",{value:!0}),t.setConfig=function(e){r=e},t.default=void 0;t.default=function(){re
2024-04-24 02:16:33 UTC	6334	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 21 3d 3d 72 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 72 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 6d 61 78 28 65 5b 72 5d 2d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 63 28 29 3b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 Data Ascii: avigationStart"!==r&&"toJSON"!==r&&(t[r]=Math.max(e[r]-e.navigationStart,0));return t}())},s=function(e,t){var r=c();return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49934	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2239	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 03 Feb 2024 10:04:07 GMT Last-Modified: Fri, 02 Feb 2024 17:50:15 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Br44-GvGTOZTZ16bYCH8692O3iCXuzfQhgV3LbjFutDBw116TAoyYw== Age: 6970347
2024-04-24 02:16:33 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49933	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2238	OUT	GET /_next/static/chunks/pages/404-2628cd0d85d8ff64.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4562 Connection: close Date: Thu, 28 Mar 2024 13:47:35 GMT Last-Modified: Thu, 28 Mar 2024 13:47:23 GMT ETag: "34eae0e4b14ba01eee4d85c9c6fa8bbd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C7T9BiWtgPCtYYt5Yx6IlPQdyHAi6OcTYNzOZk4DtfyXZkLn7H1GVg== Age: 2291338
2024-04-24 02:16:33 UTC	4562	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 39 37 5d 2c 7b 33 30 35 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 34 30 34 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 33 32 39 33 38 29 7d 5d 29 7d 2c 31 32 31 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 72 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6e 3d 74 28 35 32 33 32 32 29 2c 6f 3d 74 28 31 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49936	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2260	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:33 UTC	605	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oqK3ncnuv3HbVaacgfi9Jw1f1xb0bLaMV_B5Czr3sHuaK8aqnGkCKg== Age: 41047
2024-04-24 02:16:33 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49937	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:33 UTC	2258	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; _ga=GA1.2.804451605.1713924969; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924971.0.0.1838502804; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _dd_s=rum=0&expire=1713925891255&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:34 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: I1aKEOm-YJAqcfBWoKaG-VhjEFknzxlird7HGSIl2r8BIC7_icSiHg== Age: 41048
2024-04-24 02:16:34 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49938	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	777	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/AdobeClean-Bold.0c32dd5fc892bc1f0e55.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:35 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 88148 Connection: close Date: Wed, 24 Apr 2024 02:16:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 23 Oct 2023 14:49:35 GMT ETag: "f9e4d4a5820cb8d9d23104783d01b4bf" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: rctocjdvOuoHLzCIfZCtdLW2gth-1Qw4Fuy1dmiFL9kFsMVhUZC7nA==
2024-04-24 02:16:35 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 58 54 00 10 00 00 00 05 28 c8 00 01 57 ed 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 5a 1b 83 e5 40 1c d1 28 06 60 00 8b 5e 11 08 0a 8d df 58 8a f2 21 0b bb 10 00 01 36 02 24 03 bb 0c 04 20 05 8f 09 07 81 a4 10 5b 6b 53 b4 0e fe 5d 8c ed 7d d9 a1 28 79 20 c5 1a dc 61 66 11 51 3a 87 98 24 9b 00 62 a5 70 fd 4f ec 0e b6 64 98 60 d9 db 2a 37 fd fb 21 0d 1f 48 d5 da bd 53 5d 41 e6 fd 6d a2 80 9e db 36 55 f2 c0 ab ae e8 ff ff ff ff ff ff ff ff ff ff ff df 9f 2c c2 df fc d9 b9 cb de 2f b9 24 10 02 e1 ab 28 28 58 6d ab 15 15 b5 b6 7d 8f ab f3 08 2a a2 87 4f 25 2a 04 64 d4 da 84 80 76 84 20 46 01 63 74 13 e4 d0 63 8a 06 b3 40 87 39 16 2a 97 48 62 25 9c a8 56 d2 41 49 70 18 93 Data Ascii: wOF2XT(W?FFTMZ@(`^X!6$ [kS]}(y afQ:$bpOd`7!HS]Am6U,/$((Xm}O%dv Fctc@9Hb%VAIp
2024-04-24 02:16:35 UTC	1632	IN	Data Raw: 37 f5 28 3d f2 e2 c2 fa 09 8a 46 15 a5 00 97 a5 2c bc b9 59 db 0e 7a c3 e4 9e 9d 79 ab e2 0e 2e 92 db 73 c7 7d 29 90 9c 4d e9 3d 9d ad 80 39 a3 92 7f d6 6c 6f ac 1d ee 72 79 0a 5b d2 86 e4 71 38 a9 fd 89 9a b8 a3 3a da 34 92 a5 a6 25 40 6b 81 25 06 39 52 a6 be f3 95 13 ba 95 cc e5 27 97 50 d9 2d 29 6a 9d e2 f2 81 96 3d 10 21 64 5a bb af 31 32 59 26 44 9d 26 9e be d2 73 93 2d 0d 1c e8 eb 32 25 2b c6 9f ec 62 7b bc 2d 80 9c 27 56 3b 8c 9b 6c 38 1e e8 71 22 94 41 d8 0f 8a e9 18 12 f1 7b 64 b2 97 72 51 56 86 13 53 8b ee 1c 77 6e 81 a5 35 9c a0 b0 52 4d 47 dc 82 b0 ee 18 56 e1 7c 87 4e d6 10 16 84 da f8 a4 0a af 2d 07 65 c4 9e aa c7 81 d6 10 b6 f2 58 02 e0 b2 10 3b ff 34 8a 7b b5 4f be 9e 47 0c b2 7b 30 32 20 18 39 33 c1 bc 38 a7 d9 23 0c 40 9f 26 ca d3 a0 3e Data Ascii: 7(=F,Yzy.s})M=9lory[q8:4%@k%9R'P-)j=!dZ12Y&D&s-2%+b{-'V;l8q"A{drQVSwn5RMGV\|N-eX;4{OG{02 938#@&>
2024-04-24 02:16:35 UTC	394	IN	Data Raw: b7 80 c3 e4 50 37 04 04 01 b1 b2 34 01 c3 1c 60 ae 2e 37 87 f5 99 0b b8 c0 dc a0 6e 30 39 d4 0d ea e6 88 74 2c 69 53 20 12 31 59 7a 4c 96 1e 8d ed 65 24 0f bd b7 26 e8 4b bd fc 6a 18 14 88 58 1e c4 5e 6e ee e5 9d 2f 7d 36 25 e8 b3 1d 81 67 3b b1 9d 47 8f 7d ec c4 49 b2 b9 ef c1 77 2f e6 54 e9 be 01 c2 26 87 be eb 30 a1 53 53 43 c7 b5 98 1b d1 74 d1 6b c9 23 5d 22 9c 26 86 d7 88 ff be 84 e5 49 ca 2f c0 0f 0e 72 de f1 e4 58 b6 62 63 b6 77 fa 6e 7c 00 1d 57 c2 47 d9 cb a0 53 87 e0 b9 88 83 bc 22 63 09 9a 81 40 32 36 01 5d d6 61 42 a7 86 8f fe 6a 31 37 a2 11 a1 b3 92 47 ba 44 38 11 47 d2 b8 f8 f2 8d a8 ef 8b 8b c1 0f 0e 72 de f1 a4 b1 d2 8c cd d2 da e9 b2 f1 a1 d1 5f 25 7c 94 bd 0c 3a f5 6c 42 a6 70 90 57 64 2c a0 19 08 94 89 23 39 af 1a 8c ce d5 eb 03 d1 1f Data Ascii: P74`.7n09t,iS 1YzLe$&KjX^n/}6%g;G}Iw/T&0SSCtk#]"&I/rXbcwn\|WGS"c@26]aBj17GD8Gr_%\|:lBpWd,#9
2024-04-24 02:16:35 UTC	1024	IN	Data Raw: 94 ba fd df 8c bd 93 2f 60 b9 bd 9b 1f ac d7 f5 d6 0e f6 c0 00 5a 72 df fa 64 6d fa ae c6 c5 83 01 c8 91 87 1a 03 fb eb 5c 2d bd c4 36 b9 b6 14 d7 49 01 9c d6 68 2f 96 11 87 eb a0 68 7e 22 98 c7 4d 46 a7 4a 28 4d 44 6b 9f 35 8f 88 bf 89 1b 7b 1b a3 4d bd 38 ff 9d ca f0 8a 3f 9c 6b 61 b6 b4 b1 d2 98 75 04 f2 82 41 09 62 99 21 1a 3f 0d ae ad 87 29 9b c7 c1 4c 85 50 40 66 50 96 09 49 2f 4e 2e 2f be 19 4d da d4 ac 63 af 28 09 ad af 1a f5 b8 f8 bc 9e 20 95 d1 85 c4 c5 00 0a 11 31 47 11 b0 59 b3 87 40 49 91 d4 b3 31 d0 fa 10 c4 78 6f d4 b6 fa f1 1d c9 64 c6 32 56 95 59 87 97 13 4e 8d 40 6d fd d9 c9 39 38 86 ab d1 1b c8 cb 25 90 4d cf 01 d4 27 40 aa 52 21 3a 3c da 06 19 b3 c8 1a 28 29 c4 0e b6 1a 28 08 01 1d 2e 00 a0 02 45 a0 50 ae 6e d7 22 81 70 8c e8 cd b3 d1 Data Ascii: /`Zrdm\-6Ih/h~"MFJ(MDk5{M8?kauAb!?)LP@fPI/N./Mc( 1GY@I1xod2VYN@m98%M'@R!:<()(.EPn"p
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: e5 d5 d7 a0 e0 af 8b cb 0b fd 63 bd a7 db f3 94 17 a3 bf d2 5c 88 b5 cc e8 5c 1a 9f bb 29 b2 48 c8 c6 dc 26 1b 67 3b 5b 83 c1 02 30 b7 49 02 c8 e9 2d 62 13 83 bc 27 a3 65 a3 25 62 2d 78 cd 1c 15 2b 97 1f 9f 7c 1b 2b bf 25 65 f7 41 5d a4 84 f4 33 09 5f e4 1e 90 a3 cf d4 69 f6 81 0e 7c 98 99 e5 9c f0 b4 39 46 38 0d 79 85 ec 69 fb b5 22 5e f4 b7 48 2d 61 ef 06 a6 6f 6e bc 82 e8 f7 64 e6 7b 04 7f e9 2f 09 91 39 61 70 a5 cf e0 70 7b cd 67 85 6c ca 16 09 18 cc 5d ad 22 5a 15 55 2b ab 64 01 5d c4 c5 aa 6b b5 3e d3 e7 3b 03 5b 81 99 f6 52 1f ca a8 74 fb b4 66 6d 1b 51 1d be bb d4 75 21 80 84 4c 16 8e ba e9 ad 15 3b b4 43 a5 a8 dc 14 17 e1 1d 2c 33 50 d2 e9 e9 9c ac 22 be 0b 7b b8 5d 82 53 c6 5e e6 01 67 cd be d1 76 45 a4 68 34 54 c9 5b ef e1 3b 19 9d dc 97 ff 62 Data Ascii: c\\)H&g;[0I-b'e%b-x+\|+%eA]3_i\|9F8yi"^H-aond{/9app{gl]"ZU+d]k>;[RtfmQu!L;C,3P"{]S^gvEh4T[;b
2024-04-24 02:16:35 UTC	14321	IN	Data Raw: 97 f5 23 c2 08 af 57 19 02 1f 6f 57 e0 3b 5a 85 b0 c8 5d 2e 70 8f 57 80 0c 46 18 72 0c 8c 09 6f f4 c3 08 07 a8 6e 39 06 72 bb a1 bc e3 71 e4 88 5b 57 89 68 d3 e8 60 54 f4 3e 2b 85 ac fe 36 82 59 70 4c e0 67 6a 85 c4 88 7b aa cf 58 9c 24 35 55 af 74 4c 6d 37 c5 e1 9b 9c 3d 7c 01 8e 91 ec 1e 5a 2d 64 d5 7c af e5 e9 01 1f ea 02 01 9b f2 d2 00 36 83 37 59 cc 8c d2 ef 77 ee 03 5c dd 7b d4 fa 21 77 33 35 34 3f e2 8b 13 d5 b0 1c 0d 43 c0 44 2c 81 c5 27 a6 fc ea 17 04 b4 12 65 29 4e e3 16 3a c2 85 f8 6a 0e a3 b0 2c 05 9d 8b fc 2e 36 6a 47 1c 88 87 8c 3a a7 ca bb 5a 2d 3b 67 7f 5e ce 95 bc 17 9b 8d 0d 44 e3 4e 11 b9 a5 3f 61 3c 1d d3 f4 2c 68 2a e5 66 c9 3f bd 08 6c 1f 77 4f a3 79 c9 5c 92 b2 25 d3 b3 e5 5f 36 32 8b e9 bb d9 37 bb dd 68 d2 4a 4a 06 57 40 ab 01 5f Data Ascii: #WoW;Z].pWFron9rq[Wh`T>+6YpLgj{X$5UtLm7=\|Z-d\|67Yw\{!w354?CD,'e)N:j,.6jG:Z-;g^DN?a<,h*f?lwOy\%_627hJJW@_
2024-04-24 02:16:35 UTC	2063	IN	Data Raw: eb 75 44 6b 42 ff 73 c9 5e 2f 1c 09 3d 49 7c 0b c1 fb 5b fe c1 f8 3e 42 f5 b1 03 74 30 ff c2 d4 a9 0f f9 24 5e 3f bb 00 47 84 c8 cd da 5e 3c 28 81 c9 6c 0a 58 82 ff 4e 89 97 97 34 a3 50 a0 15 46 2e 1a 6f 21 8e 45 9f 99 04 c6 43 8b 7b c5 93 01 20 05 95 a7 3e 61 20 f4 25 df fb 94 e1 f3 ba c8 8f 9e fb f2 e1 49 7c d6 97 52 58 a1 fd bb 30 f0 94 08 d2 06 a5 f2 69 26 f1 d3 24 0a 1a 49 94 91 29 07 f3 58 9b af 64 2d ca 2b 0f 86 61 fa 9c 8b 6d de 8d 41 c3 23 36 c4 30 a4 17 b8 f6 4d ea 8c 50 82 d0 42 2a 01 67 0b 67 39 74 0a 6f 20 b7 d6 86 26 cb 89 aa 65 d2 99 11 aa c6 f7 d2 92 65 18 5c b1 68 65 12 83 35 83 fc 1b 6d cf 1d b0 dc 4d 2b cc 38 87 73 66 bb 27 12 46 fb 6e 6c c2 0e 1a 91 93 2e e7 b6 6d 0c 66 30 8b 5d 89 68 2b d4 1b 59 39 9e 1e 9d 1b 4d b7 37 28 3b a8 80 b8 Data Ascii: uDkBs^/=I\|[>Bt0$^?G^<(lXN4PF.o!EC{ >a %I\|RX0i&$I)Xd-+amA#60MPB*gg9to &ee\he5mM+8sf'Fnl.mf0]h+Y9M7(;
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: 38 ff d8 f9 69 c3 a6 16 b4 8b 32 99 be 9d f5 e5 f4 ce b3 04 76 aa 2b b3 6d 95 13 c5 d4 4a 89 e3 92 63 d3 b8 90 01 73 92 69 fb 82 d3 cf e3 a6 41 d0 15 9f 23 17 42 a3 f1 2f 75 b0 76 49 d0 5c f5 39 13 56 5c 6a 77 60 7a 05 28 b5 6e b7 9a 48 74 2b 53 84 ca a3 0d 12 d3 0c ab e6 fd da 43 ec b5 34 d1 1c 32 83 59 c8 c0 35 d0 d2 6c b5 54 e1 c1 69 2a 59 ae dd 59 90 4a e2 59 52 c9 a8 13 7c 99 fe 14 85 72 7a 8f 5a 9b 5a 02 cb 91 b7 dc 8f 8b 1b e6 d4 fb c9 78 14 c3 6d 58 ef 57 55 7e cf aa 3a 53 59 f5 7c 8d f6 79 fd fb 95 ac f7 f5 e0 b5 ea f6 3c 96 0c 18 9e a7 a3 59 82 ec 19 06 ca 92 c5 d3 05 8b 85 fc 2d ee 99 6a c1 30 e8 3a 7c 4f a0 43 59 35 3e 37 bb 97 66 c0 b9 34 f9 b3 58 43 b7 77 22 ad bf df 5b 94 a2 c3 45 82 d4 b9 71 a7 5e 36 fe 4f 02 4d 7e dc 5e 77 44 42 13 1d 15 Data Ascii: 8i2v+mJcsiA#B/uvI\9V\jw`z(nHt+SC42Y5lTi*YYJYR\|rzZZxmXWU~:SY\|y<Y-j0:\|OCY5>7f4XCw"[Eq^6OM~^wDB
2024-04-24 02:16:35 UTC	1024	IN	Data Raw: 18 53 c7 6e b9 ba 4b 2f ec ac 0d a4 63 0f 0f 09 65 c9 2f a5 e4 bb d5 df 8e cb 29 9b fb 56 45 43 6b 26 9a a9 65 6b 0f ee 8c 55 8f c0 95 aa 32 83 7c 01 94 de d4 11 4a cb b9 b0 1c f3 e6 89 10 f6 f1 a8 95 ef ec 96 b8 fe 69 78 1c 62 a1 95 e8 f9 fa 49 08 83 17 82 22 68 8e 7c f5 15 81 a9 ca 31 08 84 e5 e2 45 d1 b0 83 05 83 ba 00 27 54 77 30 35 4e 04 a6 c6 6b 0e 31 51 06 ea be 6a 86 c2 04 9a 18 78 76 84 94 bc de 42 be 1b f1 69 bd 51 ec 68 6c 54 d1 94 55 0f ee 82 1b a6 68 c6 5c 3c 68 54 e2 45 56 c5 ad 05 6d ba 35 32 be df 79 f3 0c cf 8d dc a0 44 a6 e7 2e 55 08 4a be 37 e1 1a d5 40 d5 65 2b d2 3d 21 10 ef e8 a4 49 8e 1a ad 47 04 b3 b0 7b f6 ac 2d 21 77 a3 b9 f6 c1 2c 0f 36 18 2e b7 f1 f0 45 c3 22 5f de ff de b1 d2 17 c5 93 d7 56 c7 a0 6c 82 c1 18 5a 2b e7 fe a0 53 Data Ascii: SnK/ce/)VECk&ekU2\|JixbI"h\|1E'Tw05Nk1QjxvBiQhlTUh\<hTEVm52yD.UJ7@e+=!IG{-!w,6.E"_VlZ+S
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: 61 ce d7 b3 0e 85 7e 6e 13 ac 87 22 07 ac ca 0e 7e c9 ad 50 81 55 59 23 6e d4 aa b7 f0 2d 9d 3c eb 4f 91 30 cf f8 a3 df 1b 1e 68 bb f3 07 5a e0 ff 21 29 4c f2 0d 54 98 57 2c bf ed 77 30 5e 18 28 44 15 df 02 f5 58 84 b9 65 10 17 00 25 07 4f 20 e0 03 ba 2e d9 b2 a4 6b 6a af bd ab 11 bd b5 f6 06 6d 7c c9 c2 57 6e f9 11 2e 24 3c 3b 78 11 ce 05 c0 b3 ab 20 c6 42 fc 40 6b d5 86 6c a6 4d e2 14 2f ed 85 99 17 14 ab de 1e ab 98 68 72 c1 38 84 14 6e fd 78 61 75 ca 67 ea d8 9b 40 92 ce 23 fb 9e 2b 45 73 d9 47 62 10 5b 2a 32 b2 bc 11 2b c6 93 34 92 4e 93 51 f2 e3 a0 14 83 5f 74 09 1e 02 a9 02 d8 23 1d ba 0a c4 0e 94 cf b4 d8 65 d7 fb 8d 1e 3f 98 03 36 42 5e 43 a4 b1 c2 57 f6 63 51 cd 99 ae dd c9 aa 83 45 35 f6 96 5a c8 8d 47 48 9e e8 31 60 bc 0a 14 35 f5 92 62 5a 53 Data Ascii: a~n"~PUY#n-<O0hZ!)LTW,w0^(DXe%O .kjm\|Wn.$<;x B@klM/hr8nxaug@#+EsGb[*2+4NQ_t#e?6B^CWcQE5ZGH1`5bZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49939	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	792	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:35 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 514648 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:35 GMT ETag: "f714ed5c817117aa20b0caa4bac76725" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: OofzHau3WQeg8cCwuZvywBM3EFgLDsURK8iM98gfWyua-iYmbIrW_A==
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: bc 06 d1 ed 27 9b ec 50 3e bc 26 5d 35 b3 5f 2b a2 02 88 4d 7a 83 94 d1 1c b4 68 81 66 0e c8 e1 5b 2f 0f 2f af 77 dd 6b 77 0b d2 2b 79 fe f9 cd dc 5a d9 ea fc 95 47 6b 13 ee a0 a5 d9 dc 15 39 c5 03 98 26 e8 59 d3 90 70 24 bc 73 dc 94 f2 0c ab d7 2d d2 a6 2d 46 6b 91 64 30 ae da c5 73 12 8b 1d 38 75 b5 f6 42 de 49 a4 bf 4c f1 38 18 18 18 1d 06 06 c3 41 b0 d0 60 60 6c 30 30 30 30 30 34 18 1b 0d 06 c1 fd 97 4a d5 6e 22 b0 90 02 d0 55 d5 77 35 e8 55 ef 7f 59 cf 65 57 ac fd 8a a5 ab 9e 12 db 19 6d c0 21 26 b2 ea 72 cd 2e ee 8f 35 13 9f d1 6f 8e 98 ae 3a b0 f1 23 2c 8f 12 66 24 da ba 9a 32 b5 6c ab 53 44 bb 33 21 69 c4 7b 3d 0e de 57 3d 67 35 28 1d 0b 8a ee d4 c0 d3 a1 c9 8e a7 16 54 4d bd cd 45 f3 e7 49 d4 a9 d4 cc 84 64 d1 b5 cd 9a d1 15 ce 23 1d 25 56 b7 9c Data Ascii: 'P>&]5_+Mzhf[//wkw+yZGk9&Yp$s--Fkd0s8uBIL8A``l000004Jn"Uw5UYeWm!&r.5o:#,f$2lSD3!i{=W=g5(TMEId#%V
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: d8 5b 4e 20 da 0c 55 61 27 5e 09 3f 53 3e 39 ee 8d a7 2a df 37 d2 8a d5 b7 b6 64 59 ab 5a 86 ee 36 a7 18 9a d9 8d 65 4f 8a aa 49 86 ca 74 af 65 de d6 90 ca 30 f0 c3 40 3c 48 ea c7 56 58 fa 71 90 29 2b 64 12 78 90 f9 db e3 fe 86 5e 25 0d 28 79 64 55 4d 90 7a a8 0a 11 32 e6 36 ae ae 96 3a b3 a2 4d fb 4f c6 81 62 0f 2b ad d7 62 ed 76 3a 68 79 13 57 3e b7 ea a9 1e 1d d4 8e e9 aa c5 34 75 ea ad 53 59 52 57 53 89 06 55 b1 62 b7 9a 10 1a 12 e6 38 26 79 c5 6f 9e de 93 8b dc 30 84 f6 42 ad 18 57 b3 67 1e 6c 54 cc 92 76 1b 6b f7 a0 ea 27 b4 1b 56 3c b3 21 53 64 f7 9b 4a 5a ad 6e bf 7c e9 8e 25 27 cc e6 ac a2 dd 1e 75 a5 c9 ea 17 eb e7 cf 74 2a a3 4d 41 36 9a a2 d3 fa 39 34 7f b9 c0 4d 64 1a 01 a0 37 04 b5 c9 aa cf 79 ea e0 6e bc b8 73 23 ff 00 9f 47 08 ce 74 56 44 Data Ascii: [N Ua'^?S>97dYZ6eOIte0@<HVXq)+dx^%(ydUMz26:MOb+bv:hyW>4uSYRWSUb8&yo0BWglTvk'V<!SdJZn\|%'utMA694Md7yns#GtVD
2024-04-24 02:16:35 UTC	15375	IN	Data Raw: d9 5f 11 d5 6d 69 e0 cc 34 dc d0 4b 90 ed ab 44 17 02 b3 36 33 9d ad 2a c5 55 94 08 08 52 46 da 73 49 3c fb ef a7 c0 7e 6f 27 f0 33 13 bd e2 de f3 43 9e 92 e8 cf bd 33 07 9a 67 1e 12 31 ef cb 97 0d d1 3f a0 2d 2f 81 48 e7 b3 45 ac f0 28 e9 e7 33 d7 0e 9c 49 a6 9f 4b a6 b6 fb 7b c8 68 9b f1 e3 7a 15 93 ad 9b b9 88 4f d1 6b 9c f9 36 91 79 77 5c d3 2e 11 de e4 a5 7a c9 1b 07 5d ac 7e 45 59 8d 44 43 94 27 9b d8 b9 ee 2b 34 f8 df f5 ce fe 06 06 06 07 41 b0 d0 6c 30 30 34 18 1b 0c 0c 0d 06 06 c3 03 03 03 03 01 6f 3e b3 56 50 b4 b0 10 dc 43 75 9b 76 c0 ce cc 3d 57 a1 4d e9 6e 5d 99 6e 03 f4 58 a2 b6 23 e6 de bf a3 9a 93 75 0e 9a b4 c4 f3 25 65 47 86 1e 03 2a c3 ac 8e 48 eb 27 15 94 d2 57 e8 b4 80 29 a4 e4 a3 5a ec c8 46 0e 91 02 61 93 d2 d4 3c 3f 44 b8 71 53 b1 Data Ascii: _mi4KD63URFsI<~o'3C3g1?-/HE(3IK{hzOk6yw\.z]~EYDC'+4Al004o>VPCuv=WMn]nX#u%eGH'W)ZFa<?DqS
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: a4 50 56 19 b5 3e 5f a7 d5 da cc 45 a8 37 55 17 f4 b0 47 5a f1 c9 5c eb 1c dc fa 5a b1 88 bc c2 ae 55 74 54 f1 e7 53 33 7f 4d 68 7a 28 09 b2 8d 5a 8e ab a8 51 20 1d 10 48 05 45 ed 54 ca 23 e6 86 5c ae c6 c3 d4 c3 e8 e8 2c 22 e6 64 b8 3f 33 e0 44 5e 8e d6 9f 43 45 99 f0 f9 ea f7 bb b2 53 e2 51 31 dd b6 8c 7a cd ea 35 c0 ab 03 28 af 36 12 d5 d1 47 5a 0b b4 94 b5 93 ad 90 19 cc 24 03 64 88 b0 3c 02 41 d4 40 91 15 d7 d3 f5 70 30 30 30 3a 0d 86 06 06 06 06 83 03 61 81 a0 d8 68 36 18 18 1a 0d 86 01 ba d4 da 1d 41 c8 71 27 32 71 26 80 58 0c 44 28 45 6a 74 69 2f 07 30 8a d9 e9 5f ca b1 07 a3 d3 27 73 b5 10 b8 49 b1 3b 83 b2 46 86 19 64 f2 4a fd 37 29 55 6e 44 a0 5f 53 d7 25 c4 2d 56 f5 a9 e9 67 cf 33 f1 c6 ac e4 cb 19 30 9b 2a cd f2 e8 ae 5b 59 d5 a1 dd e8 54 7f Data Ascii: PV>_E7UGZ\ZUtTS3Mhz(ZQ HET#\,"d?3D^CESQ1z5(6GZ$d<A@p000:ah6Aq'2q&XD(Ejti/0_'sI;FdJ7)UnD_S%-Vg30*[YT
2024-04-24 02:16:35 UTC	1514	IN	Data Raw: 89 1a 6c 65 59 68 2e a5 d1 58 03 35 26 ec 2d 90 3c 03 d8 6f 72 53 50 cd 2f cc 5d 5c 2d 0d 97 32 61 31 0a 24 3d af 0c 4c c3 d1 ad c8 95 a0 a8 26 eb 71 c7 b8 b9 f1 a1 6c b5 7e 67 72 6c c2 44 c2 c0 a1 9d b0 8f f2 45 e6 cd 67 d4 7c b6 e5 71 a7 f4 47 7a 41 2b 2a 3b 2a 43 dd 2b fa a8 fa 06 44 d2 ab 3f f1 67 2f 71 4e 79 0b 6e ee f9 e7 7e 1f a1 a6 2d dc 53 c9 da 34 4f fc 8b 2f 6f d1 ca bc 7c dd b2 e1 de 3b 83 5f 26 cb 43 4a 88 ab 0b ec 47 1d 57 15 b7 ab db 57 40 cc 4e 30 d5 65 bf 32 d7 c7 1c 2d 9d dd f2 57 77 69 30 f7 98 6b 06 a7 bc 83 95 b2 38 6c 4d 4d 71 09 b9 72 68 20 39 0c 06 b3 ed 98 62 67 12 d7 36 41 86 9c a9 a7 0c 2d 9c 3d 06 3a 54 ca e1 a8 05 85 84 1a 9f d0 43 ed 0f db 17 dc 8a 0b 38 59 f4 69 ca c2 0a ec c5 ae 6b b2 81 4d 76 4e d4 7d 24 7e d5 4f ee 34 64 Data Ascii: leYh.X5&-<orSP/]\-2a1$=L&ql~grlDEg\|qGzA+;C+D?g/qNyn~-S4O/o\|;_&CJGWW@N0e2-Wwi0k8lMMqrh 9bg6A-=:TC8YikMvN}$~O4d
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: 2b 5c e9 9c 1a d7 33 11 d0 a0 2d cf 5e 16 c0 dc a2 55 93 91 b5 e2 f5 f7 4d e1 dc 7c 69 19 db d1 d1 e2 59 a1 ee 0f 93 bd 59 8c 76 d3 e9 29 00 96 46 d6 29 a5 63 8d a7 b5 c9 ca ac 8b 74 fe d8 61 fa 5b b4 93 b2 08 47 46 3b b1 8e 97 b9 34 80 bb f2 a2 01 3d f9 41 ae c4 44 7c 8e 9c b4 f7 65 36 4e c7 3e 40 e1 04 41 cd 68 ed 03 d4 7a 4e 7e 98 fd a0 fb 58 70 bb ca 32 e1 09 4a 70 40 74 db 82 61 d6 37 0d 91 57 1d 6c 9c c9 1e 72 fe aa 00 5c 77 23 e8 23 0e 8c 0f 92 2e a1 b1 12 80 20 b9 30 fd 7b 03 fb b1 3c 77 c1 f6 a0 3a 96 fd 5b 51 99 23 e8 a9 b0 10 47 d5 1f b7 bb f3 f5 38 26 74 5b ea e6 44 fa 5f 34 75 eb 86 b5 ad c4 7f d4 3b df d4 ac fe 9c 2c 22 b0 b0 8b 51 88 14 6b 84 6b 23 5c af 81 c8 c6 42 23 d0 95 94 0a 0f 28 3c 94 f2 9b 33 7b 7b c1 10 75 4e 09 8e c2 71 29 dd c5 Data Ascii: +\3-^UM\|iYYv)F)cta[GF;4=AD\|e6N>@AhzN~Xp2Jp@ta7Wlr\w##. 0{<w:[Q#G8&t[D_4u;,"Qkk#\B#(<3{{uNq)
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: d4 c9 83 bd 1e 41 4f 8b e3 24 7a 3f aa 8a b7 d4 ff 00 b0 fa 63 a1 47 d0 a7 2d 31 fd fe 4a 3f 7b 7a 3e ad 1b b0 c8 c7 4a 83 13 6a 46 1b 52 a1 8d ce 70 0b e6 c1 74 b9 5d e5 17 a7 4e b2 e7 a6 c5 85 64 e0 6b ff 00 b6 5e a5 91 45 0f 6c af ea 99 10 69 b4 d7 39 07 e5 19 03 54 3f da 21 39 53 f6 73 72 1c 08 4f 68 72 ec 2a 94 71 2b 52 76 8a fd 48 38 58 05 57 ae d6 92 70 98 ff 00 95 d9 47 aa ec 00 58 66 5a 2a 97 a6 41 d8 fc 74 7b b0 02 76 33 2b bb 4c 83 e4 11 58 0d 58 ca 6a c2 21 37 aa 74 a1 ae c8 26 4e a2 27 64 5c b8 63 14 27 ed 69 21 4f 61 b1 ac fc 8a 58 9c bf 08 b9 4d 48 04 58 41 20 a6 30 94 ca e0 26 c6 80 79 4e 61 0a 39 7e 34 c9 d8 06 3b 86 72 9a e2 0e 50 0a ec 0d 99 97 2a be ab a0 bf 96 d7 5a 99 30 e9 0e 63 69 c4 9a ca ff 00 54 47 01 8e c8 7c 61 c8 b4 b5 0e aa Data Ascii: AO$z?cG-1J?{z>JjFRpt]Ndk^Eli9T?!9SsrOhrq+RvH8XWpGXfZAt{v3+LXXj!7t&N'd\c'i!OaXMHXA 0&yNa9~4;rP*Z0ciTG\|a
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: e5 f0 86 87 20 51 2b 3e 80 ac fe 82 54 c5 14 50 f4 8a 4e c5 7a 4f 94 44 ce d4 e6 07 0d db bb 4c b6 27 99 7f 8e 91 ea be 8c c8 69 d6 8e 9c 74 67 16 15 aa ed b2 db 74 9d 5d cd 62 31 a6 84 18 4a 9a ab da aa 17 35 56 1d ce 8d eb b9 12 8a 72 3e 80 af 70 3f a9 90 75 c2 6a 3e c5 cb 28 a6 84 e6 20 d4 42 b3 f6 d4 fb 18 87 ae c4 65 11 96 ce 7b 14 36 09 3e 87 d4 84 53 93 94 7e de 85 dd a9 ef 2e 51 c5 9f 40 d2 bb 0a f8 8a f8 0a fc 6c af c6 42 b8 4c 88 14 e7 98 d3 4e 40 56 11 45 14 f0 a2 1f 52 25 38 a2 a3 67 79 6b 3b 57 6f a1 29 c7 08 8c 94 f7 0c 3e 3f 90 b2 be 10 68 4e 5d 13 9a 8b 42 96 40 f4 61 21 36 27 05 92 c0 ff 00 ad 1e 87 b7 b9 4a d0 51 b3 17 70 8b b0 39 c0 27 b9 c1 32 37 48 a4 80 b5 35 c1 c2 bc ee a8 fa 76 1b 3b 3d 1a 10 41 05 84 02 6a 08 7a 0f 40 7d 32 b2 b2 Data Ascii: Q+>TPNzODL'itgt]b1J5Vr>p?uj>( Be{6>S~.Q@lBLN@VER%8gyk;Wo)>?hN]B@a!6'JQp9'27H5v;=Ajz@}2
2024-04-24 02:16:35 UTC	16384	IN	Data Raw: 85 31 53 3f b8 bb de b9 c3 f7 52 60 d3 78 7b 34 9e fa d7 15 cc ff 00 f2 84 24 a1 59 c5 36 a3 93 a3 2c 21 00 98 10 56 bd f0 b0 87 45 1d 82 13 e2 64 ea 6a 4e 8d 53 38 68 29 dd 45 0c 86 ec 06 5a 4a d7 f4 f4 2a c0 cb 87 45 0d 9e d4 1c 1c 9c de e0 c2 63 2e ad f1 88 8e 05 83 95 03 d4 a7 29 d1 f6 19 9a 0a b3 7c 40 64 79 7b bb c2 a7 29 0e 6b d3 42 93 d9 9d 40 58 c9 3f 4a 1e e1 17 9c 07 82 ba 27 c3 84 07 69 74 83 3f 2e 4c a5 cc 32 d9 93 ba bb f2 c9 ce 45 67 22 7e b2 32 b0 9c 9b f4 38 27 8c 2b 27 a7 b2 a6 cc 92 89 46 42 f9 20 87 bc 9d 79 0f 86 3f 80 d2 d8 cb 33 b6 33 b5 8e c8 55 e7 ee 96 e9 cb 22 80 c8 aa c4 d8 06 c2 67 cc e8 c7 68 a0 cf 92 a4 80 30 cb 60 95 1c 61 c0 0c 2a ff 00 74 91 be 57 d7 88 b1 f3 3c 38 c2 06 46 16 72 5c 7a c7 fd ab 98 ef 1d 50 08 3b 00 0e b1 Data Ascii: 1S?R`x{4$Y6,!VEdjNS8h)EZJEc.)\|@dy{)kB@X?J'it?.L2Eg"~28'+'FB y?33U"gh0`atW<8Fr\zP;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49940	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	744	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-24 02:16:34 UTC	570	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 656132 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:09:41 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding Content-Range: bytes 0-656131/656132 X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: zLNkUA3vtaShOC88XcqVn0oMQG1gXSV3tc2FFIEe-GrH3Nyuw_q38Q== Age: 414
2024-04-24 02:16:34 UTC	16384	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 09 f1 92 6d 64 61 74 00 00 02 f5 06 05 ff ff f1 dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 30 36 35 20 61 65 30 33 64 39 32 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 32 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 31 3a 30 78 31 31 31 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypmp42mp42iso2avc1mp41freemdatEH, #x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=
2024-04-24 02:16:34 UTC	16384	IN	Data Raw: cc 06 bf fa ee d2 2f ef b0 ec 76 c0 f4 8f c8 37 e4 ad 5a 27 ba aa 43 27 a5 2a b1 fb d6 6c c7 73 88 62 a4 c3 f0 c3 37 38 86 73 ae 1e 1a f6 7a 95 f5 65 b1 a3 e3 8e 01 f1 e6 8a e5 33 02 86 dd eb ba d1 5b 9e 42 d7 8f 05 8a 63 1a 07 24 fb 04 e4 2f 2b 83 84 49 54 6c 66 cf 37 15 9d 85 6c 1f 66 0b ee 58 84 f3 f9 1e 71 0b bc 1e 3d 02 e2 7d e4 bb 8f 27 46 af ee aa b2 ec c8 94 dd 0f d6 a9 b3 3b cc 7e f6 c7 19 99 98 e0 22 1b d6 fc 8f 0d 53 df fc 83 df c5 bd d9 3f 8e ad d5 de ff 07 66 cf b4 24 62 e4 0d 6a 29 ee 38 36 cc 78 3c 3c bb b6 4d a2 cd 4e 3a be e7 28 03 a7 24 d3 42 10 ef 95 65 f2 c5 bd 9d e2 cc d0 5b 40 88 e6 c8 14 34 57 d3 1b dc a1 f7 b5 42 82 b9 7d 84 cf 04 b0 8a 3d 61 a3 2b d8 c1 21 d2 87 cb 80 97 cc 83 58 6b c2 b0 d2 fc 44 18 01 4b 9c fc 52 c1 37 e3 0d 4a Data Ascii: /v7Z'C'*lsb78sze3[Bc$/+ITlf7lfXq=}'F;~"S?f$bj)86x<<MN:($Be[@4WB}=a+!XkDKR7J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49943	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	3402	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924993436&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1184804152.1713924994&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713924993436&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A16%3A33.531%2B02%3A00&epn.hit_timestamp_unix=1713924993531&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713924993436-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713924993436-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=3615&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:35 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:34 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775977; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 e1781e38c27c8587a4a79b775f1d6666.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 7ePmjnJtK_nxBtqua_ba2Dhb1fsuTcNOJYTnAvluF1wSarz084nd3A==
2024-04-24 02:16:35 UTC	1245	IN	Data Raw: 34 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 32 31 30 39 37 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b Data Ascii: 4d6event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;
2024-04-24 02:16:35 UTC	655	IN	Data Raw: 32 38 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 34 38 32 36 33 33 33 36 30 26 66 73 74 3d 31 37 31 33 39 32 34 39 39 34 39 33 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 288event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1482633360&fst=1713924994935&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:16:35 UTC	355	IN	Data Raw: 31 35 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 54 7a 69 51 76 39 64 54 61 57 6f 74 52 32 39 5a 65 47 73 7a 31 66 56 47 6b 7a 44 25 32 46 72 6a 65 6c 5a 7a 71 38 6b 53 58 67 38 51 41 64 57 59 44 7a 4b 50 4b 38 56 30 73 30 78 53 31 69 61 67 6b 46 66 30 67 64 6b 66 6b 63 7a 4c 50 68 58 31 36 58 39 57 52 36 42 39 67 33 6d 46 47 30 53 31 53 67 49 55 59 64 4c 45 67 51 55 31 6e 6e 57 7a 6d 54 68 37 5a 56 58 50 7a 25 32 46 6f 59 79 68 70 43 61 6b 51 53 34 32 42 62 50 45 67 34 33 62 47 42 4d 71 31 4c 6f 41 70 4b 53 45 68 73 59 32 45 4f 41 63 63 6e 68 6d 64 7a 69 57 76 79 6b 33 7a 44 25 32 Data Ascii: 15cevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2
2024-04-24 02:16:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49942	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:35 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:35 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: PXQQ0K37PT1S5Z1FC8XJ Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:35 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49944	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:34 UTC	651	OUT	GET /api/segment?pid=712597&pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:35 UTC	748	IN	HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: Location: https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 02:16:34 GMT; Secure; SameSite=None Date: Wed, 24 Apr 2024 02:16:34 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49945	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	801	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=622592-656131 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-24 02:16:35 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 33540 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Wed, 24 Apr 2024 02:09:41 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: RhL5aVXQsIIK8pUwL_V3z3rJAJEp8cCMmyS6Y028PDRKDxbYfsUCfg== Age: 415 Content-Range: bytes 622592-656131/656132
2024-04-24 02:16:35 UTC	15832	IN	Data Raw: 8c eb 00 2a 6f c1 95 2b 14 0b 88 5e 5d 2a 1a b9 63 54 15 2a bd c5 6c 80 a1 46 03 9b f8 15 d1 8a 87 3e a0 76 6f 3b 1c 3c cf 7c b0 e5 f8 8f fa 48 1c 77 ca 01 ca 96 b8 87 15 57 bc 2e cb 1d 34 c7 01 42 6a 56 99 0f 9b fa a7 46 d2 e0 c7 14 90 24 bd 1f 08 d0 16 97 bd 6c 6c ca 48 d3 79 ce 62 f5 69 5e e3 4d dd 6a c0 84 df 1e 4e d3 11 e2 d6 38 ac e4 ef be bd ef 0d 61 45 fd 73 45 65 bb 54 c2 c7 1d 45 ce 6d 62 12 25 d4 42 2e 69 ab e5 00 ad 05 d0 31 78 45 17 3f 05 a3 11 78 3e 1c 09 19 9c 9a c8 44 38 55 0e 1d 01 58 8d 45 fd 21 ed 71 d7 82 4b 5f 9d 5c cf 62 9c 03 1e 84 a3 e1 a1 a7 55 f8 8c 38 1d 5b f4 b2 e8 88 c3 f5 25 6f 0b cd 1c 65 de 23 38 59 f2 61 37 07 93 2e e8 99 b5 67 f6 a4 37 4f 81 a9 af 59 d5 4b 1b 89 69 ad 81 59 37 b9 8f 8b a2 8b 0e 38 23 30 61 87 a2 c5 6a 21 Data Ascii: o+^]cT*lF>vo;<\|HwW.4BjVF$llHybi^MjN8aEsEeTEmb%B.i1xE?x>D8UXE!qK_\bU8[%oe#8Ya7.g7OYKiY78#0aj!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49948	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	722	OUT	GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:16:35 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:16:35 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49947	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	1379	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:35 UTC	2224	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"876923517682782373"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"876923517682782373","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"876923517682782373","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"876923517682782373","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"876923517682782373","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49951	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:35 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:35 GMT x-amzn-RequestId: 1ad7d75a-9eae-438c-8cb9-b0666f8ff6cc Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 c19c4a06d33dedc840090b8f6e8495b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: rHhOwEOowxKNonfSDMTZMx0m1HoOwNoasvj3rI0GPwgkpEyQTBeq5g==
2024-04-24 02:16:35 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49953	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	2376	OUT	GET /_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2Fr%2FfX8we7rVVFap%2FYhuXo%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:35 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 02:16:35 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 fe624e5ec67fb7582d7a2f57fd2d7078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: MfLYAEIxjXPTNMbBZHsUkybyCoZiHLhul5s10IAZIKIESOYMPnY8hg==
2024-04-24 02:16:35 UTC	54	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=
2024-04-24 02:16:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49954	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	3137	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713924993436&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1184804152.1713924994&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713924993436&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A16%3A33.531%2B02%3A00&epn.hit_timestamp_unix=1713924993531&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713924993436-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713924993436-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=4&tfd=3615&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:35 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:35 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775976; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 3c0a949a14580b1dec6535a2a3049362.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: dLTgcnBefaSpO9mP91rynozH7z62h1MfzTNv4Rars5JUttLefw9yEQ==
2024-04-24 02:16:35 UTC	662	IN	Data Raw: 32 38 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 35 37 38 37 32 31 33 37 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 Data Ascii: 28fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1578721373;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.171392496
2024-04-24 02:16:35 UTC	594	IN	Data Raw: 32 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 35 37 38 37 32 31 33 37 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 24bevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1578721373;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%
2024-04-24 02:16:35 UTC	655	IN	Data Raw: 32 38 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 38 33 30 37 30 31 37 30 38 26 66 73 74 3d 31 37 31 33 39 32 34 39 39 35 38 31 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 288event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1830701708&fst=1713924995818&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:16:36 UTC	353	IN	Data Raw: 31 35 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 69 68 30 4d 75 47 25 32 46 43 32 33 6c 64 62 33 53 4f 6d 4d 38 44 31 6b 45 5a 7a 35 64 63 36 59 74 47 63 56 4b 43 44 4a 6b 34 78 50 43 5a 4e 6d 78 6e 75 48 47 4e 4e 51 41 68 57 45 4f 46 5a 78 64 4a 71 6e 56 34 43 76 57 63 5a 33 6f 7a 39 50 58 57 4d 34 6f 39 76 76 59 70 73 66 64 67 46 6d 75 34 56 50 4d 68 4a 4c 57 47 49 50 41 34 49 64 52 72 45 4d 51 53 33 49 59 61 75 31 4d 55 46 31 75 69 39 6f 65 58 4e 35 79 53 25 32 42 6b 64 62 70 75 43 6f 44 68 6b 56 46 6f 49 72 7a 47 25 32 46 75 41 79 6b 62 53 70 50 66 6a 75 35 79 6a 30 6b 74 4f 44 Data Ascii: 15aevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=ih0MuG%2FC23ldb3SOmM8D1kEZz5dc6YtGcVKCDJk4xPCZNmxnuHGNNQAhWEOFZxdJqnV4CvWcZ3oz9PXWM4o9vvYpsfdgFmu4VPMhJLWGIPA4IdRrEMQS3IYau1MUF1ui9oeXN5yS%2BkdbpuCoDhkVFoIrzG%2FuAykbSpPfju5yj0ktOD
2024-04-24 02:16:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49950	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	1342	OUT	GET /pagead/viewthroughconversion/778938880/?random=1482633360&fst=1713924994935&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:35 UTC	1270	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1482633360&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqWbSe0BulwwkCWw3aseaYJd9A8uUVahJ8Ox6B7prR0sHTosu5&random=4065371914 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49949	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	1279	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:35 UTC	1133	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49952	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:36 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:35 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: KFXCTV46A91E8GRV6C70 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:36 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49955	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	801	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=622592-656131 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-24 02:16:36 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 33540 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Wed, 24 Apr 2024 02:09:41 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 afdb1da50225c72a4232b3531193b400.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: L9yKomMKIzyc3-5zZjeDvzt2F_FewCKsUKMWFtXzkwauF1AtAIWkSw== Age: 415 Content-Range: bytes 622592-656131/656132
2024-04-24 02:16:36 UTC	15832	IN	Data Raw: 8c eb 00 2a 6f c1 95 2b 14 0b 88 5e 5d 2a 1a b9 63 54 15 2a bd c5 6c 80 a1 46 03 9b f8 15 d1 8a 87 3e a0 76 6f 3b 1c 3c cf 7c b0 e5 f8 8f fa 48 1c 77 ca 01 ca 96 b8 87 15 57 bc 2e cb 1d 34 c7 01 42 6a 56 99 0f 9b fa a7 46 d2 e0 c7 14 90 24 bd 1f 08 d0 16 97 bd 6c 6c ca 48 d3 79 ce 62 f5 69 5e e3 4d dd 6a c0 84 df 1e 4e d3 11 e2 d6 38 ac e4 ef be bd ef 0d 61 45 fd 73 45 65 bb 54 c2 c7 1d 45 ce 6d 62 12 25 d4 42 2e 69 ab e5 00 ad 05 d0 31 78 45 17 3f 05 a3 11 78 3e 1c 09 19 9c 9a c8 44 38 55 0e 1d 01 58 8d 45 fd 21 ed 71 d7 82 4b 5f 9d 5c cf 62 9c 03 1e 84 a3 e1 a1 a7 55 f8 8c 38 1d 5b f4 b2 e8 88 c3 f5 25 6f 0b cd 1c 65 de 23 38 59 f2 61 37 07 93 2e e8 99 b5 67 f6 a4 37 4f 81 a9 af 59 d5 4b 1b 89 69 ad 81 59 37 b9 8f 8b a2 8b 0e 38 23 30 61 87 a2 c5 6a 21 Data Ascii: o+^]cT*lF>vo;<\|HwW.4BjVF$llHybi^MjN8aEsEeTEmb%B.i1xE?x>D8UXE!qK_\bU8[%oe#8Ya7.g7OYKiY78#0aj!
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: a9 ee 17 c0 59 68 e4 0e fc 9e e9 4b 27 bd 12 df 3d 66 f7 ca 1a a3 5f 81 71 31 13 a8 b0 65 b3 2a 39 c2 aa 76 a8 1f ae eb 68 6b 37 0e 6f bf 51 a7 90 0f 2a c7 e0 1b 4c 2b 37 80 10 7f b7 b5 ff 96 5e d4 92 e5 ad e0 a8 7d 48 16 4f 49 e5 bd 3c 49 4f c9 bb 44 8a 18 03 0d 6c 9b 38 54 77 a3 e2 78 d2 cb d5 74 85 e8 07 8e 10 14 b7 fb ad a5 0d a8 f2 ea 8e 41 30 4f 0e 2f 45 f8 08 c5 b7 db 98 1d bd b6 47 19 b7 52 d5 6f 19 d3 ba 07 24 67 b0 8c d1 2e 73 f8 1d 81 a6 30 56 d6 d4 00 cf 18 c4 41 68 fd f8 c2 42 db 60 1a fa 56 11 dc 5e 0c 31 a7 99 57 c8 70 59 16 83 cb 1c 0a a8 56 6b da 4d c6 86 2d a9 f6 1b ba 5a af a6 2b b7 1d e2 d1 8e f9 18 cf 1d 48 9d f2 aa 8f 1d 00 13 65 2e 76 64 12 e2 9d b5 e4 e8 85 7b ce c5 f8 c0 72 11 33 9a fc 1f b9 58 3d 25 22 d2 86 11 e7 ee 57 b5 78 d6 Data Ascii: YhK'=f_q1e9vhk7oQL+7^}HOI<IODl8TwxtA0O/EGRo$g.s0VAhB`V^1WpYVkM-Z+He.vd{r3X=%"Wx
2024-04-24 02:16:36 UTC	1324	IN	Data Raw: 7b 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 6b 6d 70 34 61 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 10 00 00 00 00 bb 80 00 00 00 00 00 33 65 73 64 73 00 00 00 00 03 80 80 80 22 00 02 00 04 80 80 80 14 40 15 00 00 00 00 00 08 ca 00 00 08 ca 05 80 80 80 02 11 90 06 80 80 80 01 02 00 00 00 14 62 74 72 74 00 00 00 00 00 00 08 ca 00 00 08 ca 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 00 ee 00 00 04 00 00 00 01 b4 73 74 73 63 00 00 00 00 00 00 00 23 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 04 00 00 00 02 00 00 00 01 00 00 00 0b 00 00 00 01 00 00 00 01 00 00 00 0c 00 00 00 02 00 00 00 01 00 00 00 13 00 00 00 01 00 00 00 01 00 00 00 14 00 00 00 02 00 00 00 Data Ascii: {stsdkmp4a3esds"@btrtsttsstsc#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49956	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:35 UTC	796	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 36189 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:37 GMT ETag: "998a47703d2bd3c00db0bc1be6e30a11" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: kuWwV6UuEVW1Hd2suZnu1kXoLvuxue0501OZCSCMhYYNaprJt6ZtZA==
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 8d 24 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 f0 df 05 00 00 00 00 00 00 00 00 80 71 57 05 ff 47 0e 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4$IDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S)qWG
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: b8 32 84 a5 20 b5 6b 23 22 fa 39 50 44 d4 60 19 99 72 73 73 6d dc 45 c8 04 2c 2b 2b 2b c3 be 21 af 6e dd ba b8 c9 c6 8d 4b 28 d0 5e 11 ed 0d 96 99 99 99 88 48 f4 10 11 11 11 11 11 85 2b 3b 77 f6 71 a0 0a 02 14 fa b2 70 e5 88 d9 c1 bb 5f 46 54 87 4e c5 0b 99 b8 a7 59 33 44 8d 7a 87 a4 02 d1 88 6c 57 d4 e0 3d 41 e9 0d fc e5 72 38 f2 48 1f 12 1e 1a 22 3a a5 45 d4 60 29 22 12 b1 8a 8a 8a 42 2a 30 55 58 58 e8 7a a3 a6 8d b4 08 20 fb 9c a1 17 6c 13 71 a1 0d d6 5e ec 08 fe b9 22 22 22 22 22 22 22 22 e2 ad c7 2e 3e b8 70 a5 59 19 80 96 b3 b4 34 0b 57 06 3f 74 2a de 29 02 72 72 72 5c 1a 3d dc 80 40 a9 54 e0 2d a2 54 22 81 3b de 1a 10 cd 2a 2a 90 5f 49 01 fe 73 2e 4c 18 ed 53 b8 32 cc 34 4c 42 01 fd 4a 44 44 01 4b 11 51 83 a5 ee 5f ef 47 fe ba 1f f8 8c 89 89 a1 51 Data Ascii: 2 k#"9PD`rssmE,+++!nK(^H+;wqp_FTNY3DzlW=Ar8H":E`)"B0UXXz lq^"""""""".>pY4W?t)rrr\=@T-T";**_Is.LS24LBJDDKQ_GQ
2024-04-24 02:16:36 UTC	3421	IN	Data Raw: 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 02 4b 00 00 00 00 00 00 00 00 00 00 81 25 Data Ascii: ,K%@` X,K%K%@` X,K%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49957	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	799	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 37028 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:37 GMT ETag: "62615becf8831f197e70175a43c41000" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ZIRuyRFxICYkpU11K0eQWC6_A--zEtJMMH5CTBKPQHlnAT3eTvA0hQ==
2024-04-24 02:16:36 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 90 6b 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 06 29 c6 9d ff 2e 00 00 00 00 00 00 00 00 00 50 c5 ff 41 8e ff 03 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4kIDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S).PA
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 3c fa 77 68 42 92 a4 ae 25 59 33 5c da 90 24 19 58 4a ea 12 91 e5 82 05 0b 48 85 e0 a9 d4 81 03 07 a2 68 0b 22 c4 a8 06 96 41 3c 1a 8d b5 c6 92 24 49 92 24 49 aa af a7 93 a8 8a cc 12 8f 1b 59 f6 07 ce 3f bf 84 54 78 f9 e5 04 c7 dc bd 96 0f 91 24 a9 6b 4a d6 4b 8c ad 48 92 ba 44 60 29 49 4f 3f fd 74 f8 b4 67 2a 6c b5 d5 56 c8 c0 72 4b 34 35 35 d1 d9 f2 f2 f2 0c 2c 25 49 92 24 49 fa 3f f6 ee 03 ba 8a 32 ef e3 f8 37 a1 13 3a 01 92 40 ca 05 42 70 69 81 50 a4 77 50 3a 56 c4 82 d2 ec ec 2a ae 18 ac 14 c1 ee ca 76 b0 be 2b be f6 06 56 90 5e 85 a5 c5 46 91 09 24 f4 4e 42 48 10 c8 eb 33 e7 70 2c c7 57 42 ee 33 37 f7 26 bf cf 39 63 17 72 ef cc 9d 64 9e f9 cd ef 2f 22 e2 a7 ca 94 34 0a 59 de d5 cd 7e 6b a9 79 28 ff 99 67 1c ee fe 08 b2 28 2a 52 01 68 0c 5c 0c f4 00 Data Ascii: <whB%Y3\$XJHh"A<$I$IY?Tx$kJKHD`)IO?tglVrK455,%I$I?27:@BpiPwP:Vv+V^F$NBH3p,WB37&9crd/"4Y~ky(g(*Rh\
2024-04-24 02:16:37 UTC	9200	IN	Data Raw: 27 40 ef 39 78 ea 9d 5a f8 c5 9d 15 6e c0 b6 ba ba 9a 50 f4 d9 67 0e 37 df ec 70 db 12 44 44 01 4b 11 91 c3 1f 45 3d 66 cc 18 ee be fb 6e a6 4c 99 12 b0 a0 97 09 43 7e fa e9 a7 d8 f4 f9 e7 9f e3 a5 e3 8e 3b 8e 2b ae b8 c2 93 f0 69 ef de bd 99 36 6d 1a 43 87 0e e5 fb 29 60 99 94 94 c4 09 27 9c 10 71 7f 2e e3 8c 33 ce 08 d6 a8 df 80 d4 e0 8f 1d 3b 96 5b 6f bd 95 11 23 46 84 cc eb de c8 91 23 b9 ea aa ab b8 f4 d2 4b 69 2a 11 2f 76 e1 9a 60 72 db b6 6d b1 2f dc 5a 23 d5 5e 29 22 22 22 22 22 72 b0 01 43 33 66 28 5c 29 52 fa 65 13 de af 1e 85 f1 53 1d 1e 79 c4 61 c3 06 27 e4 c7 92 ae 58 e1 90 9d ed f0 ff fe 27 97 73 9e 85 67 b6 c3 36 42 c7 4e e0 7f de 85 73 a6 3a fc f3 9f 4e 48 6c 70 35 ad 68 e6 75 ef 8c 6b f2 dc 16 d3 a5 d8 55 8f 1d 81 9c 5e 5f 6b 2d b4 4a 50 Data Ascii: '@9xZnPg7pDDKE=fnLC~;+i6mC)`'q.3;[o#F#Ki*/v`rm/Z#^)"""""rC3f(\)ReSya'X'sg6BNs:NHlp5hukU^_k-JP
2024-04-24 02:16:37 UTC	2495	IN	Data Raw: 1b 18 99 e2 4d 61 db bd 62 4e bf b8 7a 2b c2 73 7e a8 dc 6f bc c8 85 3c fd f4 d3 5f 6a 34 1a 63 01 00 00 00 00 00 00 00 00 00 74 ac ac 05 7c fc f1 c7 bf 54 64 60 63 5e 2c 99 1b 66 2e b1 fe 58 46 79 e5 68 ce 25 e4 be fd a9 a7 9e 3a 7d e2 c4 89 cf a4 94 6a 01 00 00 00 00 00 00 00 00 00 74 a2 72 b3 05 fc f4 73 cf 3d 77 ba 40 4c 99 ff f6 d6 f7 59 36 fd cb 30 b9 b2 ad e8 b2 e8 88 cf 87 1e 7a e8 91 4b 97 2e 7d 2d 00 00 00 00 00 00 00 00 00 80 8e 73 f6 ec d9 cf 35 5b c0 47 17 6b 05 0b 74 86 85 3a c6 0e 98 60 99 1f 57 de ca d9 bb 77 ef 3f 26 26 26 7e 11 00 00 00 00 00 00 00 00 00 40 c7 c8 da bf 43 87 0e 3d 10 11 8d ec 14 6f 07 8b 47 96 9d b0 22 3c ef 07 ca fb 01 53 c1 d3 c8 ce dd 77 df fd f3 99 99 99 7f c4 9a 07 00 00 00 00 00 00 00 00 00 34 9b bf 7f 65 ed 5f db Data Ascii: MabNz+s~o<_j4ct\|Td`c^,f.XFyh%:}jtrs=w@LY60zK.}-s5[Gkt:`Ww?&&&~@C=oG"<Sw4e_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49959	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713924993552 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:36 GMT x-amzn-RequestId: cb35f3b9-f4ea-4cc3-8434-27b9b7315753 X-Cache: Miss from cloudfront Via: 1.1 8fe62b5c336640e23f746f6e7b2b7fc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: 43ehTWu2iyJ48t_d9TkZ4NagPY538lVlcTBr0se0Y4RuYCBoG5NvGw==
2024-04-24 02:16:36 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49958	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	1072	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=14210971;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:36 UTC	2224	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"876923517682782373"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"876923517682782373","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"876923517682782373","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"876923517682782373","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"876923517682782373","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49962	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	2143	OUT	GET /_set_cookie?val=TziQv9dTaWotR29ZeGsz1fVGkzD%2FrjelZzq8kSXg8QAdWYDzKPK8V0s0xS1iagkFf0gdkfkczLPhX16X9WR6B9g3mFG0S1SgIUYdLEgQU1nnWzmTh7ZVXPz%2FoYyhpCakQS42BbPEg43bGBMq1LoApKSEhsY2EOAccnhmdziWvyk3zD%2Fr%2FfX8we7rVVFap%2FYhuXo%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; _pin_unauth=dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:36 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:16:36 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 10084ccafdc318e0abba7148b0b1b088.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 9uwZn4v1An2Q0cCR3u-Eu3Tagwvys6HV-bAw_fSOVWdLr0jtxVJNOg==
2024-04-24 02:16:36 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49960	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	1322	OUT	GET /pagead/1p-user-list/778938880/?random=1482633360&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqWbSe0BulwwkCWw3aseaYJd9A8uUVahJ8Ox6B7prR0sHTosu5&random=4065371914 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49963	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:16:36 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:16:36 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49964	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	426	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background1.2effbc15f540c17f65a0.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:36 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 514648 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:35 GMT ETag: "f714ed5c817117aa20b0caa4bac76725" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: eSWZ5S5nAz17s8ZawPSF_sQSRewY2yD_9hiyIq59izTCLADEt1-V9g== Age: 1
2024-04-24 02:16:36 UTC	15866	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 73 93 cc 75 63 8d 11 23 71 f7 c7 7d 5a 1e 7c cb 68 e7 d3 bc 4e 06 06 06 07 41 b0 c0 c0 c0 d0 60 6c 34 18 1b 0c 0c 0d 06 c3 41 b0 c0 d0 3c f2 eb 54 95 09 6c 72 67 66 a7 4b 0a 53 ac 9d c9 e9 34 ea ea c8 16 72 d9 69 ad 65 ab 54 d5 85 19 86 0e ac bd 81 bc 9a 9d 2d 4c 8f d0 e7 32 b9 fd 16 c0 e4 61 86 56 1e 18 c2 48 f1 26 a1 ce 24 a8 c4 aa 56 ca 95 34 43 b7 29 83 22 6a 60 31 55 0a 54 54 56 c7 58 a7 43 13 ab a8 8d a1 ca 51 cf 95 5f 14 59 30 f4 ed 5d 4d b1 b4 24 7f 4e b7 0d 36 8c 8c 79 58 f4 32 b5 6d 39 59 44 43 d4 ca d4 4b 50 b2 ed 90 f0 d8 36 ac b1 1d dd 36 66 8c cd 4d 3c 3c 20 c2 31 d4 75 7a ec 3f 55 8b 30 ef 2a ae 99 32 5c 81 bb 9d 50 77 67 95 31 6a b0 98 35 91 db 82 9a f6 b9 9a 92 e2 f0 fa d6 33 9d b6 6d 83 cd 2f 49 4c c5 91 98 57 70 ae 4f 37 a6 d9 e7 ee 7c Data Ascii: suc#q}Z\|hNA`l4A<TlrgfKS4rieT-L2aVH&$V4C)"j`1UTTVXCQ_Y0]M$N6yX2m9YDCKP66fM<< 1uz?U0*2\Pwg1j53m/ILWpO7\|
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 26 4c 2b 18 59 1e 24 68 93 2a c6 96 76 43 0f 46 15 9a 51 56 b4 28 db 23 dd f4 12 74 e8 0e a0 e8 ce a9 16 00 33 27 59 0e dc 8a a0 8e 4e db 56 12 0a 34 b8 aa de 39 27 51 94 d1 d7 52 c7 45 0d 2c f5 78 95 67 a1 9e 17 b2 64 08 6b 69 9b 54 4d ae 85 7d 99 64 fe 07 55 0e da e2 dd f2 c4 e3 de 3b d6 e3 a6 d7 15 17 2d 2b 2c d7 64 9b 8e c8 4f 7d 1b 02 6f 0d f7 46 c5 99 81 a3 8a cc d5 62 f6 24 72 d5 aa 19 ed 6c 0a 41 d6 4c 44 a8 24 d8 bc 7a cc a4 d7 6d f9 55 51 ac de 1d 72 d6 7b 28 f7 47 04 ef ca f5 4f 77 e7 4e f5 d6 62 c4 a6 7b a9 5a cf 72 cd 55 d2 2e e7 05 31 eb 2a d2 69 05 9a a1 fb 82 a9 f3 89 5c 77 a6 50 35 4c b5 cd aa 21 e9 da 8f 30 a9 9e b8 9f b7 a1 bb ae cd 87 61 a9 0f 54 a6 ab 82 ec 76 32 dc 31 fc e9 26 f0 e8 9d f8 f4 9a b2 d9 fb 8d 40 9c ec ce e4 a2 d1 73 f3 Data Ascii: &L+Y$hvCFQV(#t3'YNV49'QRE,xgdkiTM}dU;-+,dO}oFb$rlALD$zmUQr{(GOwNb{ZrU.1i\wP5L!0aTv21&@s
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: bc f7 13 8b 1b d6 d6 11 06 55 a6 6c f6 c8 59 34 b7 ed ad bd 65 69 d1 0f 2f 35 ae 13 f5 1c a9 b3 8f b6 55 f0 fe 35 7b 91 e7 23 4e e3 f4 4b a3 03 ca fe 79 d3 ef 68 c7 bd 64 cd e6 11 17 55 89 f7 49 98 4b 53 f3 d0 b3 e7 76 60 2a df bc d3 3d 79 48 a3 9f 53 64 0d 8f a6 7b b1 e5 b6 42 9b b3 19 25 8d da e8 30 b6 8d 3d b1 22 e3 b2 e3 f2 89 3e 21 75 95 66 e3 bb 02 56 4b 7e 65 b8 aa 4d 56 5d 95 a7 5b f4 78 bb f4 7e 9e 06 06 06 07 41 b0 c0 c0 c0 c0 c0 d0 6c 30 30 30 30 34 1b 0c 0d 06 c3 40 bd 46 b3 0d 9d 66 24 9c 88 f6 27 35 ed c2 c5 f6 ca 76 ab 8b 59 58 16 e5 5d 80 fd 16 a8 23 a2 e7 e8 2d df cb 23 75 6b c9 a2 28 65 3c b2 2a b6 44 9b 56 1e 24 65 93 51 27 20 51 ad d6 ea 72 70 2c d6 c8 b6 57 c2 8d 3d 19 9a 3a 72 a6 5d 23 44 99 87 52 cb 9d 5b 3d 69 5a f4 63 ed 51 47 3c Data Ascii: UlY4ei/5U5{#NKyhdUIKSv`=yHSd{B%0=">!ufVK~eMV][x~Al00004@Ff$'5vYX]#-#uk(e<DV$eQ' Qrp,W=:r]#DR[=iZcQG<
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 23 4d a5 a6 e7 9f 2f 45 8c f2 fa 5d 9c 6a 53 e6 5b 1b 1d 4e 98 29 64 25 dd 29 b7 88 3a d8 8d d2 db d9 2d 7d ac a9 4c b4 7a 50 fd cb a6 6b e6 75 d1 34 5c 3b 2c e3 cd e9 46 bb 33 d4 1f 43 e7 d3 e6 bb 55 e6 2f 29 8b 24 6f d5 ac ca b2 2e 98 32 67 29 5d 4d 2d f8 cd 25 02 a4 0e 89 da ae e1 46 85 19 01 56 07 44 12 23 71 07 14 72 67 98 7f bb bf 16 a7 46 2a ee 17 cd bc ec 61 dc b9 17 5e 89 bf cb 51 1b f6 ef 9c 3c e7 35 0f 4c b5 7b 3d 5a b9 ec 77 ae 67 ab 71 18 1c b5 81 b5 ba 6b 0a 3c 96 b2 48 da c5 5d 85 89 09 81 62 4d 22 ec 8d 05 78 f4 dd 5c 0c 0c 0c 0e 83 61 81 81 81 81 81 a0 d8 60 60 60 60 68 36 18 1a 0d 86 81 56 98 01 a3 70 6e 27 53 18 1b 0c 89 e8 3b 20 45 17 f3 31 49 5d cc ee 20 78 50 ad bf 9b 6c 12 01 22 44 24 48 93 11 2b 15 58 b9 45 a6 51 90 ad 46 d6 8a 4f Data Ascii: #M/E]jS[N)d%):-}LzPku4\;,F3CU/)$o.2g)]M-%FVD#qrgF*a^Q<5L{=Zwgqk<H]bM"x\a````h6Vpn'S; E1I] xPl"D$H+XEQFO
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: a5 ab 70 f1 1b 9d 75 a1 7e 73 48 16 58 f5 b7 da c9 aa 92 8f 32 8e d2 7d b6 bd 34 04 1d 84 c9 1c 0c 55 9d 22 65 06 b5 56 8c 31 d6 a3 12 b4 65 a6 8b b2 db 0f ec 7e b6 4e b1 d5 ea ec e7 d8 35 dd 37 11 10 da f2 7c 8d 95 bd 2c 8e f9 2c 9e d9 35 5b 77 eb 22 b7 bd b5 64 d0 df d8 62 d5 f2 83 44 d1 f2 48 90 3a c3 7b 21 b4 f0 da db 07 58 75 bb 8f b0 a9 d6 ec 6f 25 ff 00 c5 d1 34 b6 51 1f 5d 84 99 6d 33 fb 6f 6f 58 46 4b 5a 1a 27 93 e3 65 0b ae 9d 77 00 36 2f 05 99 38 88 82 d0 f3 f2 bf ea 0d 29 e7 e9 8b ec 98 66 69 48 c8 39 2d 6b 82 7b 7b 8b e6 ec 3a f3 de ce c5 d8 b0 b1 e9 2f db 17 b4 3f 6c 5e fe 81 4d 64 31 45 21 72 b2 f2 d6 d0 71 78 23 09 a7 2a e8 c9 69 c2 7f 45 1f be e0 7d 07 ab 2b 8f dc 88 e4 26 f5 40 61 33 a1 dc c4 5f 62 08 b0 62 04 83 31 07 e4 20 fc 85 ce db Data Ascii: pu~sHX2}4U"eV1e~N57\|,,5[w"dbDH:{!Xuo%4Q]m3ooXFKZ'ew6/8)fiH9-k{{:/?l^Md1E!rqx#*iE}+&@a3_bb1
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 1e 07 67 69 3d 13 87 72 c7 6b 9c ec 0b 07 2d a8 7b 5f 7b da 39 43 1d 4e 71 df 90 56 d1 a1 b2 36 9b 0a 8c 60 14 c6 e5 d5 7a 37 24 8b 67 28 2c 61 33 d9 fe cd 2b b8 97 31 c1 ea f7 56 b5 34 a0 e4 0e 53 a3 05 3e b2 ec 73 10 97 08 3c 14 1c 42 a5 b5 f8 1b 7a c3 66 65 7f b5 a1 00 b1 d2 41 f5 86 f4 73 70 2b ff 00 6e 97 db ba 76 5d a4 fb dd ef 5b ed 71 fa ee 7b 5c 3f 44 18 c3 cf d4 14 df 73 bd 9c dc 96 b7 b4 b9 04 d4 3a 99 de 18 d7 4c e0 ee ee e0 f6 a0 70 e7 1c 82 dc 96 85 8e b1 75 90 95 66 6e f7 46 de d6 bc a9 8e 48 0a 63 d8 df ea 0f f4 45 11 ea 7f 41 28 a8 06 1a 56 70 a3 76 48 67 79 ec 5d aa 49 83 53 ad 80 8d c0 e4 e6 36 52 23 60 4c 63 4a 7b 70 a3 27 b8 b0 b4 22 9a 3a 14 7d 0a 7a d4 3b b6 5d d9 c4 db fe 92 68 ce 63 c7 70 a7 21 73 f5 a4 98 e0 18 7b 97 fb b4 75 ac Data Ascii: gi=rk-{_{9CNqV6`z7$g(,a3+1V4S>s<BzfeAsp+nv][q{\?Ds:LpufnFHcEA(VpvHgy]IS6R#`LcJ{p'":}z;]hcp!s{u
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: e5 f9 ae 7a 2f 72 ef 4d 72 e8 88 00 69 a7 12 c2 4e 13 9d 84 e2 82 28 8c a0 3a 7f 51 21 c1 0e c2 1f 69 f6 72 6a 7f b9 28 7a d8 1d 2b 7d 91 fb 7a ec d5 81 96 80 54 60 e1 1f d2 51 45 54 e8 d5 95 95 95 95 95 2d 80 d4 e7 97 98 e0 58 c2 72 c2 c2 f6 51 33 b9 7c 0d 46 ab 4a 91 9d a4 a2 9c 14 9e d0 7d f5 fd 93 de 9c 72 8a 71 f4 86 1e f4 02 2b dd 14 e7 00 81 ca 9b 2b fb 62 76 92 98 3a 11 d4 92 10 28 37 29 d1 05 db 84 e6 04 6b 84 21 c2 31 f6 a1 3f c4 a1 b2 5e 43 0a ee c2 32 00 9f 2b 9a 64 01 c1 f1 9c c5 11 0e a5 50 40 cf d0 d6 a2 30 b0 5c 5a 3b 40 28 7a 05 85 8f d7 94 ef 63 26 1d 1b b2 8a 68 5d ab 18 59 44 ac fa 65 3c ac a0 73 fa 41 40 ac e1 77 82 89 4f 67 70 b1 57 06 de b2 3b ac da 71 c8 b5 b0 31 ff 00 20 ab f4 a8 fb 9a e8 cb 5e 98 5e c2 fb 06 35 59 cc 7a 6b 1a 11 Data Ascii: z/rMriN(:Q!irj(z+}zT`QET-XrQ3\|FJ}rq++bv:(7)k!1?^C2+dP@0\Z;@(zc&h]YDe<sA@wOgpW;q1 ^^5Yzk
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 0c 4e 2a 98 ec 6d f3 dd 2c 64 b5 35 dd 3b d3 c6 51 66 17 6a a2 3f 68 a9 5a de d9 a3 01 57 77 69 69 04 6b 86 66 63 30 39 4a d6 1e d9 79 d9 cc f1 b4 b9 9a ca 3f 86 6c 12 e0 e9 b0 24 7b 9c bb 57 6a ed 44 2c 20 80 f4 27 3e 85 6b fe d9 09 cc e7 e9 43 aa 6d 37 95 f8 c0 27 c6 1a 8f b3 50 1e 83 d0 f4 45 e0 23 22 ea 50 58 ca 2c 28 04 46 45 73 f5 4c dc 98 db f5 63 ab 47 6b bf db fa 8a aa 5f ba 41 d1 3f dd 57 09 aa 6f 78 d5 af 67 f5 1f fc 50 41 4f ec 0a 8d 04 10 f5 6f e8 1e 80 fd 43 ee b2 f0 1a 5d 84 64 c2 0f 51 bb 20 a2 c4 46 15 62 01 90 75 8d 98 0f 8f b9 b1 74 2c 41 0f 50 ac b3 b9 32 b8 25 ba f6 94 dd 4b 4a bf 47 f1 bd 01 40 a0 7d 07 a3 50 08 04 d6 a8 db 84 f9 fb 08 2d 91 6b 6e 36 ba da 4c d7 c9 27 dd e9 4b ec 05 3f da 08 c4 8d b1 59 a0 06 15 04 61 c4 0c 22 50 7f Data Ascii: N*m,d5;Qfj?hZWwiikfc09Jy?l${WjD, '>kCm7'PE#"PX,(FEsLcGk_A?WoxgPAOoC]dQ Fbut,AP2%KJG@}P-kn6L'K?Ya"P
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: ea 31 d0 85 84 46 13 a5 19 d8 59 ee 24 ac a6 94 e4 13 42 68 40 26 f5 38 44 2f f6 2b 1e 8c 67 f5 de c8 7a e7 d3 2b b9 77 2e f5 dc b2 56 4f a0 e8 9b e8 3d 42 1e 92 c7 94 46 14 43 26 67 10 5c e2 50 28 22 32 bb 02 74 68 2c 2e e2 17 70 51 bb 04 75 f5 1e e3 d0 20 82 db 48 59 17 13 71 75 6e 32 ef d8 df b3 b9 fb 2a e2 49 36 43 f6 39 26 19 35 a7 82 d0 72 8e 70 d1 81 76 33 23 99 57 b5 c2 32 84 44 a6 d7 2a 26 76 a9 ac 06 38 4d 1b 93 7e 22 ad 57 60 8d ce ed 01 e1 ea 46 e5 46 30 ab b8 77 5d 39 72 29 88 04 5c 00 12 60 c6 df 95 49 49 dd ae 44 2c 65 00 9a de 89 8f e8 0a 63 94 a9 cb b0 84 1b 94 d8 70 88 69 24 00 bf db d9 0e ab 3e 83 fd 37 04 e0 b3 85 91 87 f5 47 aa 69 5d c0 26 9c a6 e5 38 a2 9b ee ce 9e 81 0f 48 de 5a 6a 35 b3 2f c6 21 55 67 69 7f 45 b2 e8 d8 07 5b ec 2d Data Ascii: 1FY$Bh@&8D/+gz+w.VO=BFC&g\P("2th,.pQu HYqun2I6C9&5rpv3#W2D&v8M~"W`FF0w]9r)\`IID,ecpi$>7Gi]&8HZj5/!UgiE[-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49965	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	488	OUT	GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:16:36 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:16:36 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49966	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	800	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/video.2232be3dda510bed2aae.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=32768-622591 If-Range: "39ec2ab63fa9a8679ed9063eb5932a8d"
2024-04-24 02:16:36 UTC	552	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 589824 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Wed, 24 Apr 2024 02:09:41 GMT ETag: "39ec2ab63fa9a8679ed9063eb5932a8d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: GhGQQQ_6CVGJu-MG2BXzOALo-xuMnbcdpoJiq7FBp_sorBQ-1XU6Rw== Age: 416 Content-Range: bytes 32768-622591/656132
2024-04-24 02:16:36 UTC	15832	IN	Data Raw: fc 82 79 c6 03 42 4d d1 35 17 32 cb ad 64 94 3c 98 32 89 62 ae 23 56 ba c1 be 61 d0 ba 2c 7d bf 1f ae 0b 85 a3 70 e5 12 f0 39 1f 9b 8c 6d 85 69 84 f8 6e a3 ed 35 19 f9 c9 9d 2c 1a 20 f1 3b 8f d9 e6 e8 01 a8 f7 3b 85 48 18 09 d2 8a a0 97 27 93 9a 1c cf d3 52 c3 1a 3e 3d 4d 59 c2 72 0b 11 92 c8 4c 55 f1 b0 82 26 48 6a 43 66 2f 97 21 9b ac 2d 43 40 0d 62 ab d8 80 d8 7f 46 89 a3 a1 75 df 1e 3b a0 1f d0 df 6e 6b 4b bb 92 c2 33 83 01 d8 c0 fb 50 d2 e7 9d 3c 37 4c 2f 7d 01 2c e7 e4 5e 68 97 9d 2b 0a 6d 89 c9 bd 7b d0 87 dd 97 3f 5d d0 a9 c7 bb 81 c2 75 b9 0f cf ff cb dd f2 76 bb 55 56 a0 a3 d6 df 82 98 a5 ac 2f 71 85 6d c9 1b 52 c7 49 ee c8 d9 6d d7 8c 2f cc 9e 05 ec 50 7a 2f f8 cf 7d 47 19 39 20 b6 d4 03 00 9b 6a 31 19 77 08 ba 1e fc 26 a3 92 ff 9b 42 9e a7 28 Data Ascii: yBM52d<2b#Va,}p9min5, ;;H'R>=MYrLU&HjCf/!-C@bFu;nkK3P<7L/},^h+m{?]uvUV/qmRIm/Pz/}G9 j1w&B(
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: e0 91 cf fc 3d 63 94 58 0d d4 ca 16 00 8a ba f9 f1 1a 70 6e 78 1a 0b 98 9e 96 80 2a 61 14 71 fa 03 27 33 5f 07 3f 49 54 25 c5 61 b1 63 a6 0f ab 71 e5 3d 41 21 c1 96 45 25 5b f7 42 0a 0e 14 30 6b 4f d5 64 63 6a df 30 66 4c 5d 56 8f 70 6e d2 42 15 57 8f 41 7b c2 42 a3 22 a3 c6 00 b2 1c 2a e3 3d 67 0c 6d e3 05 84 50 db 15 e4 b5 90 ea 88 92 0e 46 50 d9 11 0d a2 f4 1b fe 08 bf fc 71 a7 f0 a2 1e ea a7 f0 85 b7 05 69 f5 89 da d2 ab 4e 27 4a 77 29 e7 de da c5 95 51 bf fa b0 9c b1 7d ac f1 42 b9 c6 70 df 9c ea 06 25 64 da 8e b8 f9 32 3c 52 b7 f6 40 f6 11 c5 f2 8b 28 84 ef f1 0d 97 7f 11 b4 01 40 2a 57 44 83 e6 cb 10 e5 1d 6f 9b 4c 9d d9 4f 8a 48 93 49 76 07 50 04 32 8f 33 0e 8e 5a f5 40 35 44 42 8e bb 32 0e e8 1c 84 be 4d 1f de 40 18 c7 da d6 59 73 1e e3 35 91 47 Data Ascii: =cXpnxaq'3_?IT%acq=A!E%[B0kOdcj0fL]VpnBWA{B"=gmPFPqiN'Jw)Q}Bp%d2<R@(@*WDoLOHIvP23Z@5DB2M@Ys5G
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: b2 f1 8a b3 e9 03 20 f4 ae f9 db 5a d2 0e 34 f7 44 fa 55 f3 29 1f 5a 21 c4 88 aa 84 8f a5 f0 ad 34 de 82 ab bf 8b 23 d0 42 30 03 0c 36 05 3b 60 b6 45 38 92 b0 05 30 20 01 f1 2e 5d 21 89 06 03 45 4d bc ec d7 11 b2 af 09 c0 8d 03 a0 c5 f2 e3 3b d1 7c 8e ce 6c 9e 9b ba 06 38 64 1d 8e b6 26 42 f3 b1 8f e6 b0 ac 85 d2 52 3c 71 3f 40 92 cc 80 21 28 64 1d 8f b4 4e 42 9b a4 04 7b 4b 66 18 11 16 69 a9 da ea 74 64 12 3f a0 ac 05 71 15 ea 3b ad 4e cc 31 3a b1 06 af 14 95 6c 47 46 13 a5 45 2c ae 36 65 e5 68 81 6d ee c0 86 b9 b6 56 87 4b 91 34 1e c4 2b 27 4d 82 d6 df 29 d7 9d 61 5e f4 43 b9 81 3b 0f 78 d4 82 75 cb 20 a3 6d 3f a2 27 90 82 e1 90 36 66 3a 07 bf 64 73 42 d1 c3 81 fa 3f 19 a7 0d 88 f6 f6 b2 a0 89 06 ad 0f 5d ac 3b cc 46 17 79 81 d2 48 7b 2f 8d a7 7d dd 6f Data Ascii: Z4DU)Z!4#B06;`E80 .]!EM;\|l8d&BR<q?@!(dNB{Kfitd?q;N1:lGFE,6ehmVK4+'M)a^C;xu m?'6f:dsB?];FyH{/}o
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: b4 92 08 ee e4 c5 9b ed 8d 82 be 1c 32 32 ad be 93 a6 0f bc ba 4b e2 04 e9 c9 11 72 e1 47 79 32 b8 de e8 92 cb 8a 8c a7 e4 45 d8 c1 7c 93 7b 43 b9 e2 02 4b 9f a1 96 af 44 fa 8b 42 b2 03 d8 8d d2 16 68 8d 2c bd be 74 62 42 86 90 cd 0c e4 d3 78 3c 51 d7 12 c4 8c 06 6a 6e 54 7f f6 30 04 e0 2e 60 8c 61 20 d3 6a ba ac 2d ab 3b a1 f6 ee 09 bc 7d 38 10 a6 85 1c 47 e7 3a d4 39 ab 87 a0 84 33 78 c4 89 7e f4 cb ac 97 99 5c 2d 5f 88 70 cd 8f 71 8c 08 b2 53 d1 4c f8 86 2b 09 65 7a 56 ad 40 38 4c e1 b7 03 77 4a 25 d4 e0 9d 0e 97 d4 0f 99 d5 7d a1 7a 7c 6a 25 38 5d 5a bd 87 73 10 be 37 d9 33 a1 5f 3a 1b 99 4e 16 f1 94 18 19 8b ef 75 10 ea ce e7 b8 8d ad 0c c2 4b 47 da bc fd f8 06 a6 bc 6f 95 ac 8f 8a 4d 4c 94 2d 28 3c 2d 92 23 28 e8 f4 ce fb e8 1c db fc 43 5f f2 88 75 Data Ascii: 22KrGy2E\|{CKDBh,tbBx<QjnT0.`a j-;}8G:93x~\-_pqSL+ezV@8LwJ%}z\|j%8]Zs73_:NuKGoML-(<-#(C_u
2024-04-24 02:16:36 UTC	16384	IN	Data Raw: 86 10 57 2d e2 15 7c f3 d8 16 6a 25 8a f4 23 9f 10 38 0f 8d 82 87 28 40 ca 3b 5c 82 41 b8 a8 74 6f 82 2e 27 cc 5b 49 95 17 34 0c 4b ea ee 5a 62 2c 1a 5f bb e2 74 a1 79 91 36 55 46 c2 35 9f ff 4a b1 0c 8a 6f d7 77 a6 78 57 0c 6e f5 84 a0 b8 df 20 80 61 b2 ee a6 43 5e 4b cb a8 d9 2f 07 31 19 7f a9 96 d5 44 69 5e e1 92 b4 f0 48 1c 43 1a b1 1e 64 64 aa cd 95 e3 fa 20 8e cf 8f f2 47 cc 6a ed 07 c8 99 ce d1 27 12 d0 9a c2 70 00 00 32 3e da a2 8f ac 51 aa 70 ad cc 91 0a 2c e7 10 e1 c8 43 3d c3 3d ca 9c bb 98 6b f5 e5 86 4c 88 14 30 44 95 19 7a 49 6f 93 ee ba 24 84 02 b0 31 18 81 5a 5f 13 60 c7 60 4a 23 fc 40 9b 91 40 67 fc f1 ad 33 7e 4c 9b 00 c6 af 45 ac fb d8 cf 83 1f 94 33 1f 6c 30 50 e1 cd 7b b0 08 11 9c 16 35 de 68 08 b8 6f c0 20 88 c8 ec 39 ce f0 9e 3c eb Data Ascii: W-\|j%#8(@;\Ato.'[I4KZb,_ty6UF5JowxWn aC^K/1Di^HCdd Gj'p2>Qp,C==kL0DzIo$1Z_``J#@@g3~LE3l0P{5ho 9<
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 9e 7e 60 60 b5 66 c6 d2 fd 86 07 6d b1 5b 40 f5 5c 08 dd 40 07 ea bb b7 78 66 a9 33 d5 3c 66 c2 31 09 3f a8 df 05 68 09 51 b1 61 6d 94 f6 d9 aa 63 14 76 a9 60 a9 ed c2 e7 eb 88 28 ee 61 5e 8d 0c 87 77 d9 f3 c3 cc 3e bf ec f2 67 51 89 ed ca 51 72 4b c4 a4 6a e3 bb c7 c6 19 4b d1 0c a6 d8 51 03 a5 5c b7 93 a0 4a a7 35 b3 5e 8a d0 40 a1 75 44 5a f8 e8 95 84 97 40 ce d2 8f 49 b3 55 3c b6 fd 98 24 2f 69 f6 67 12 99 b8 46 ec 6b 63 c7 51 25 4f b6 ec 75 02 f5 1a eb 61 ba ab 31 0d 0c 97 09 44 7d be 8f 34 ba c8 cf aa 95 31 1b 42 95 b4 c2 0a 07 0b 26 a4 56 1c 37 b6 6b b7 0d 67 31 ce dc 61 22 81 07 68 4e 64 f8 3c 0c 12 ae 5a 99 f4 4e 52 5b 56 cd a1 62 05 7c 97 36 ed 42 e0 63 02 c4 d7 7d 7b d5 93 e8 e4 45 ed 0a c4 f6 a3 50 a1 71 6e 2c 86 1d ef 8d 1e b6 0c 68 3d c3 95 Data Ascii: ~``fm[@\@xf3<f1?hQamcv`(a^w>gQQrKjKQ\J5^@uDZ@IU<$/igFkcQ%Oua1D}41B&V7kg1a"hNd<ZNR[Vb\|6Bc}{EPqn,h=
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: bc 0c cd 9c ca 63 0f cb 8d 59 44 06 1c f0 6e 7f c6 28 bb 28 5e 36 51 09 b9 4c 30 22 cb 2b 4e 70 2a 7f 6f 8e cb e9 24 d6 f5 82 ad fd ac 18 b2 5d b9 aa 89 04 93 91 57 ce ac 7f 71 0c f5 90 d1 ce af ee e5 a0 dd f5 77 c2 fe 86 ad 7e ca 16 5f 91 07 da e4 a9 d4 fc 99 40 f3 10 45 1d b2 42 23 a8 89 81 77 5f af ca 6b eb 98 42 ec 79 0f 1d c3 3a 11 37 ba 85 7b 9f d7 7f 10 82 49 ac 46 eb b8 60 e8 ec 94 4f 1d d6 ee 6a 1e b4 d8 6f 7e da 7c 30 5e be 1c 0f 42 35 02 b9 c6 da d0 1c 71 8e 51 60 8b b5 5c 66 a7 e5 0a c3 62 11 9a 3e 62 e4 0f fe cb 2f 9e 18 e4 7e 94 3d c0 8a a2 39 cc 86 21 aa 40 fc cf 5c 60 76 4a 46 ef 20 aa b3 6f e0 ad cb 05 05 ce 83 80 d7 df 5d 25 2b 9d e9 19 24 dc 45 db 3e da 2a d2 50 e7 ec 2e 8e 7f d0 fa 8c 85 db 7e 11 1f 7d 38 0e 50 62 b1 5e 4d 13 23 49 f7 Data Ascii: cYDn((^6QL0"+Npo$]Wqw~_@EB#w_kBy:7{IF`Ojo~\|0^B5qQ`\fb>b/~=9!@\`vJF o]%+$E>P.~}8Pb^M#I
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 6a 4b 5e 94 6f df bc f6 e0 51 51 75 01 c1 02 3b 16 3f b1 eb 03 81 95 cd d6 d1 a1 db 25 1b 64 98 cb 44 ca 7a d8 e0 10 b4 71 18 dc f3 dc 5b 94 90 d9 35 de 41 4b d3 71 41 d0 54 5b ad bc 59 f5 73 13 f9 53 32 be e3 71 39 cb 91 c1 5c 9b b6 17 d2 1a 6c db 0e 8a e1 f4 fc 96 c0 fa a9 9a 3e 09 8e 64 46 49 05 d0 c2 53 33 16 d8 e7 e6 85 f6 f1 bf 8d 4d c0 b0 83 10 d3 64 5e 23 79 01 2a c9 ea 99 32 05 86 15 a1 b5 4d 79 5b 08 27 79 84 2d 60 5a 2f c2 07 ef 40 33 6a 18 b6 3f 25 95 8b c5 d5 68 3a 98 16 77 4d b8 71 93 f7 33 6e c9 69 5e 88 c5 55 e2 9f 36 b0 c9 7b 89 9b f8 3c f5 ee 7a 9c 10 24 6c 9d 40 f8 41 fe 66 3d 10 9c 9b 15 f6 53 95 fe 25 ab a4 55 4b 9a 0e c9 db 18 6e f6 64 a9 47 2c 4c da be e2 1b 52 2d b1 59 c9 37 cb 34 74 82 f1 aa ab dd e8 11 63 bf ef 2f f6 3d f7 e3 df Data Ascii: jK^oQQu;?%dDzq[5AKqAT[YsS2q9\l>dFIS3Md^#y*2My['y-`Z/@3j?%h:wMq3ni^U6{<z$l@Af=S%UKndG,LR-Y74tc/=
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: cf 83 4c 16 7c 45 2e 76 f6 ed d2 65 84 83 a4 32 07 79 07 6c ec 4f e8 65 9e 81 40 8a 7f 7a 1c ba 87 7d ba ee 15 4b be 50 ec 8a 30 89 5a e8 3c 07 c2 cd 6a 00 55 d6 69 83 c8 fe fc e6 b9 97 8b 6c f4 72 30 fc 67 d1 24 a9 27 b9 d9 a5 86 04 7c 33 dd 0d 73 e2 e7 6e e9 b8 d5 9a b2 b4 31 9b 88 ad e0 73 fe 38 c6 36 ed 93 cd 91 a3 db b5 76 8d 02 ed 63 c4 7c 22 01 7c 2a 5f e5 19 e4 96 40 67 d0 b7 64 f5 6e 80 00 02 3a 23 a7 d0 46 4f 02 e0 86 e0 0a 3a 1c ee 61 c3 bf 90 c1 2f a3 30 7a 00 9d 8f 0d ed fe d3 35 93 c1 50 3d 95 e5 b6 f9 9e 20 2e 13 e7 21 52 7e 91 5a cc 39 3a 71 f3 32 82 5d 1f a5 6b 3d 08 f7 83 64 72 00 de c8 c5 b2 85 fb 07 7d be 15 52 e7 90 8c b9 21 6c 27 fd 3c d6 02 3c 0c 48 73 01 cf fb d8 9f 2f c0 6f 67 2c 54 0b 47 52 b0 0d f5 bd fd ff 68 ba 95 f0 b7 27 68 Data Ascii: L\|E.ve2ylOe@z}KP0Z<jUilr0g$'\|3sn1s86vc\|"\|*_@gdn:#FO:a/0z5P= .!R~Z9:q2]k=dr}R!l'<<Hs/og,TGRh'h
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: e6 52 40 ef 33 9a 22 41 d5 2b ca 1f 41 71 1f e9 a2 ad 67 41 b1 86 c4 cf 2d 59 48 21 90 a0 43 df e9 3c 5f 5b 9f 9c 07 26 bc c6 69 4a b1 5c 64 94 98 6a 4f 1c c3 e5 47 68 eb 91 28 0c f8 8e 10 f3 de 5e bc fb 05 0c 1b 2f bb f1 e8 75 d8 26 d2 7f 65 ab 00 4e b1 a6 64 54 7c 8d 78 6f 0b b9 c4 0c 81 d2 26 8b f8 2f b5 80 a1 9d ca 69 36 7f c0 0c 6d 45 f6 d4 3e 49 94 d2 d2 13 98 96 70 9c 01 cd 7b f4 cd 04 2a c8 25 79 2f d5 a3 77 6a e2 57 8c ca 5c ef f4 e0 90 c2 10 9c 1d 46 cd 83 8e 84 26 9c de 8d d7 b9 1a 6f 4a 79 0c 04 fd 2b b6 f0 20 f0 8d 60 10 ef c3 b6 e3 fc be d6 e2 f0 0b fb 06 ee 3d 18 64 28 f2 32 11 73 6c 79 f2 bc 3a 2d d7 3e b7 0b 59 f6 97 98 89 46 95 33 a0 04 51 62 1f e8 57 4e 53 91 dc 6d 02 9a 75 10 cd 4d 01 df d2 dc 2d 66 9e 6a a9 93 c9 0b 56 8a 85 ff f7 af Data Ascii: R@3"A+AqgA-YH!C<_[&iJ\djOGh(^/u&eNdT\|xo&/i6mE>Ip{*%y/wjW\F&oJy+ `=d(2sly:->YF3QbWNSmuM-fjV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49967	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	792	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1618888 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:38 GMT ETag: "9459ab37c159826cc66c30f9f6df33d0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Nnq80I70YPelmLt38qiYwBKDKV1LwBMhc_x2veP1VGManNaFiIie7A==
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 03 c8 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 01 03 02 0a 0b ff da 00 08 01 01 00 00 00 00 fc ff 00 f3 33 3a 7a cd 66 6f 5b d6 f3 35 bc d6 f1 46 3b 7b f7 bf 59 eb d7 bf 5e bd fb f7 ef a7 be 9e fb 76 12 2c cc Data Ascii: JFIFHH3:zfo[5F;{Y^v,
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: c1 64 21 4a dd dd 78 9e a5 23 47 09 a3 a4 8b 77 63 5f d1 8c 69 7d 8e 2a 56 de 21 b2 01 32 5e c5 4a 7a ea 5e 5c 6c 60 aa db 01 49 4e a8 a0 76 92 4c cb 66 8a 3b b4 4d 17 0f 7d 8c 87 0f 32 76 dd 17 0c 2a 25 6e c1 9c ac 5a b7 66 4e 84 a1 0c cc cf 7e b3 33 33 33 33 7a cc cc d6 cd c5 7a f5 eb d7 bf 5e fd 7a f7 eb a7 4e 9d bb f5 eb db b8 81 5d fb 89 1c 3d 1e d9 84 3c 0e 10 78 6d 9c 28 97 29 c3 97 19 6d d1 d5 8f 87 8a 95 5a d2 6e 55 4b f7 17 a4 4b 52 ef cf 3a c1 63 cc 1b 8f 36 24 52 e5 bc 75 2e be 64 d0 40 d6 7e a5 a0 73 48 22 5b e2 40 3d af 23 ce 8c 96 e8 29 75 28 7c b0 4a 6a c1 48 46 b8 4d 70 0d 63 e5 1c fc a3 a0 ca c1 12 90 0c 7d 20 4e 19 e6 3f 90 6f 5e 85 b9 8f ab b2 ae 7c 1d 67 70 8e 1d 20 a4 53 6e cb 32 11 8b 17 92 21 5c 70 f3 b0 92 2b e8 1c 44 27 43 f1 67 Data Ascii: d!Jx#Gwc_i}V!2^Jz^\l`INvLf;M}2v%nZfN~3333zz^zN]=<xm()mZnUKKR:c6$Ru.d@~sH"[@=#)u(\|JjHFMpc} N?o^\|gp Sn2!\p+D'Cg
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 37 ac 74 4c 96 e1 e2 df 35 7a db e8 7d d7 cf 1a f6 63 7d bf d0 66 ec 99 76 67 70 9c 6a b7 0f ae 4a e7 35 aa c6 a7 98 d9 9c c3 53 7d 6f e2 e9 dd 8a af 71 bc c9 d7 d9 2a a4 ac d3 d5 4d 13 96 4e 5b 2c 06 e5 b7 3e a1 e9 aa d5 28 37 6b 05 2d 86 99 b1 79 73 35 90 a3 7a 5b 36 87 80 65 7a de c0 00 00 00 00 00 00 00 00 d0 bc e0 e7 00 e7 39 ce 02 f3 85 21 48 9a 68 24 83 64 4d 67 41 e4 e8 ae c7 58 51 ec 64 7e 8b 99 e9 7e 78 b1 37 e7 21 75 39 14 f0 7f 63 d0 0e 01 99 55 29 ce 6e d9 c5 0b 7a a6 6b 16 5b 96 5f 83 44 3e 2e e4 8b 0c ad 18 fb 8f 2d 50 c8 5d b1 ca f4 b4 a2 3f 3b f1 e8 16 5b 36 f5 a9 4d 37 56 51 12 2e a3 76 ec 2c 1b 1c bf 9d 32 df 44 1e 7b cd db 5d 65 6b ed 92 5e 69 b3 4f 1e e4 1e 9d bd f8 93 ce 7b e7 90 bd d3 ec eb 5e 4d 7b 61 7c 6e b5 8f 33 c5 d5 95 bf 99 Data Ascii: 7tL5z}c}fvgpjJ5S}oq*MN[,>(7k-ys5z[6ez9!Hh$dMgAXQd~~x7!u9cU)nzk[_D>.-P]?;[6M7VQ.v,2D{]ek^iO{^M{a\|n3
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 29 71 2a ee 76 25 a5 b2 a8 97 a6 55 77 2e dd 2d 07 ef a0 00 00 00 00 00 00 00 00 42 bc 6e bb c3 0e 41 49 48 a1 1c de 16 71 e3 45 da 37 09 26 44 92 6e c1 36 77 e0 d6 32 32 61 48 69 95 5d b6 68 82 2d 22 67 d0 6a da 2b 66 90 62 72 12 4a 9f 63 91 9b 6b 56 8a 46 b9 0d 70 9d 46 1a 7e b7 d4 51 b7 b5 68 dd f4 f3 31 47 cf 22 68 ef 1d b2 61 03 76 83 77 38 d1 3e a2 10 33 53 22 87 51 63 23 91 f9 8b d0 b9 d3 2f 78 cc e7 d9 1e c9 8a fa 0b 60 d9 21 f1 ed 2b 7d c1 65 7c c1 c7 f1 71 56 37 0e a4 5a de a7 5e cb 28 ce 36 6d fc 04 a3 ae 2d 5a 8f 9c b0 c0 d9 a2 51 7e 12 86 af 48 3a e6 1f bc e6 fe 57 ce b5 42 d4 f1 e9 4d 63 0c 9f 90 4f c7 6e 2a 7e b4 f3 ef be ac 6e 30 4b 40 d3 6d 36 6a ee 7e 45 a4 9e 3c 3a 2d d6 b6 7b 54 00 00 00 00 00 00 00 00 11 2e 51 3b d6 7c 73 1c f5 fa 51 Data Ascii: )qv%Uw.-BnAIHqE7&Dn6w22aHi]h-"gj+fbrJckVFpF~Qh1G"havw8>3S"Qc#/x`!+}e\|qV7Z^(6m-ZQ~H:WBMcOn~n0K@m6j~E<:-{T.Q;\|sQ
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 40 57 27 d8 62 73 3d de 6a d3 4d 27 47 dc 7a 47 ca d9 ea ba 30 4c e3 10 f8 a5 2c 40 2e 81 28 6c f4 86 07 ee 80 ff 00 21 f4 58 cc a4 d5 79 e7 b0 54 1d 01 55 f4 5a 1d 75 87 40 ea 75 99 bb ec 0d c6 04 ab 5b 2d b7 c9 dd 4e 97 29 9c 6e 9b 3b 6d 73 6d 88 1a 5f 48 80 fd 18 3d 13 9d ed 3d b0 82 28 03 16 0f 5a 5a 28 8a ca d6 c3 13 9b ea f3 d4 9d ef 9e fa 9d ef 8f 7a 7a 7b dd 95 49 24 92 49 24 92 49 24 91 32 7b ef be fb ef be fa 92 f2 b3 c5 e4 b7 d2 4b 24 92 4a e9 4b c1 d3 27 bb c1 a8 fa 0e 43 69 d1 c4 1a a2 22 a6 98 e3 5d ce e0 f5 3d ae 94 72 8b 91 cf 2e d8 aa 3b 4b 01 e9 28 ad ed ac 39 5e 8f 25 ce be 95 9a 8f 47 59 79 a3 fa 5a bf e6 58 ea ab ab 6d 38 a4 13 c9 e4 cd ad 9b da f8 45 32 3f 0b 26 c8 6a 41 bc 2a ce 23 8a 7c 61 4e 3c cd a1 a3 d3 7d 34 66 8b b4 e0 79 bb Data Ascii: @W'bs=jM'GzG0L,@.(l!XyTUZu@u[-N)n;msm_H==(ZZ(zz{I$I$I$2{K$JK'Ci"]=r.;K(9^%GYyZXm8E2?&jA*#\|aN<}4fy
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 3d 8f c1 02 57 b5 52 4f 21 27 98 41 97 b3 73 4a 56 a6 c6 a3 7b 1a b4 f4 a1 7b 73 9f 33 50 f8 64 78 72 4c a3 32 7f 67 79 f5 f9 ea ba 46 be d2 1a 71 4e b0 8a b6 c2 b6 ea d7 40 e1 df ef b1 f9 0f 84 0c 23 32 dc 73 92 77 8e a9 53 21 77 76 00 d4 17 23 2a b8 3d b6 9f de 3f 9f 20 f9 23 95 85 46 e9 d9 2e f6 ca 2c 4e 38 29 08 9a 7b 6b ef 6c 89 2f 5b ac 7f af 74 e4 d8 d6 c8 19 8a 52 4e 10 71 64 b1 9a aa 18 31 b5 63 c7 12 f2 38 99 e3 df 7a fa ff 00 6a 70 91 59 dc cc 10 f5 d7 17 75 23 5b 07 66 38 42 9d 3b 89 91 bd ad 24 92 49 24 92 49 24 92 5e a5 e7 89 79 eb df 33 9a c0 25 f2 c5 f4 51 3e ca f2 5a f8 6c 48 2f 13 5b e4 5e c6 d9 62 81 fa 11 44 74 b5 f4 72 5f e8 53 9b e3 bd 1e 0d 00 04 97 91 8d c1 08 23 e4 d3 d0 06 88 2e 8f d8 ac 16 9e c2 83 58 2a 72 8f df 62 77 82 0c 1f Data Ascii: =WRO!'AsJV{{s3PdxrL2gyFqN@#2swS!wv#=? #F.,N8){kl/[tRNqd1c8zjpYu#[f8B;$I$I$^y3%Q>ZlH/[^bDtr_S#.Xrbw
2024-04-24 02:16:38 UTC	16384	IN	Data Raw: 53 16 b2 f3 06 af 34 52 ac 78 bd 89 29 45 a4 d9 e2 fa a8 1e 43 91 d5 6f 47 05 8f d7 83 ff 00 6e a5 fa ab 8f 80 8f e8 2a fe 95 58 98 69 e3 b4 62 e2 28 27 b1 30 62 2e 3a a7 8a e4 99 d0 a8 72 04 11 07 67 92 79 05 91 df ad 1a 93 33 58 51 e7 51 66 ad 3a 3c 85 b3 4f 2c 85 ff 00 c3 6f 2f dd b2 aa ac fd c7 60 b3 27 7d 5e 37 5a 3a 70 51 9e c7 53 fa 20 2f 9d 62 2e 4a 73 22 7d ce b7 3a 69 4c 50 de b0 28 32 84 a3 c9 40 e8 66 88 db 11 d5 b5 eb 2c 10 d8 69 70 75 09 1e 02 c3 2a 58 31 19 21 bf 26 2a 2e 2c c0 53 e2 4c 5a c5 62 b2 25 8f b3 fa 64 4a 9b f6 0b a1 42 b8 95 c5 f1 9a ed 4e 3a 5f c9 be b9 60 50 c9 b5 b3 de 9c 6f da 0a a7 f7 12 7b 5d df 9d c2 b0 86 b7 2a 6e e6 46 2a 36 5c 5a da 65 d3 32 c3 61 bb c3 e7 f5 83 07 8a e3 5b 31 c7 56 e5 2c a5 79 47 6a 8c d5 ad c5 8a a1 Data Ascii: S4Rx)ECoGnXib('0b.:rgy3XQQf:<O,o/`'}^7Z:pQS /b.Js"}:iLP(2@f,ipuX1!&.,SLZb%dJBN:_`Po{]nF*6\Ze2a[1V,yGj
2024-04-24 02:16:38 UTC	13232	IN	Data Raw: ec 5c e6 bf a9 f6 a1 8d dd 05 76 47 24 30 29 6f 19 2e a4 f1 8a ae da 3e 72 bc 85 74 c5 da 0a 3f 6e 6d a4 4d e4 ca bd 5e 62 26 92 25 1e aa e7 de 37 67 9c b3 1e 89 9d 44 4d 5c 72 13 94 90 1c 92 4a a2 8f 60 ca 3a c6 2f b5 3b 31 29 db c5 42 b3 cc 77 43 64 6c 2e 4a 3a da b1 f4 2a c2 6c 56 e4 99 94 13 0c 91 17 42 a8 22 f3 bf a9 89 c5 42 5b 2b 41 64 49 8e 06 94 3b 93 40 33 37 cc 74 31 ea bb bb 3b 63 a2 3a aa ee 23 45 56 84 d1 cb 91 8b 45 5e ae ca 97 a4 0d b1 89 13 c8 d2 56 30 f1 3c d1 68 15 e9 4d 39 11 d7 e1 2c 5d 0e 19 09 22 e5 7e 2f 94 cb e1 8e ce 13 19 c3 5c 43 42 7c ad 88 78 60 f8 98 0f 8a 22 9b 00 dc 3f 47 88 72 87 9c c0 4f 8a b3 f8 13 66 b0 f3 65 f8 ff 00 88 6e e1 ed 56 b9 9a c8 35 ba 52 55 65 58 3a c3 2c d5 64 c1 71 2c 77 1e c5 51 bc 27 d2 1b 8f b7 25 94 Data Ascii: \vG$0)o.>rt?nmM^b&%7gDM\rJ`:/;1)BwCdl.J:*lVB"B[+AdI;@37t1;c:#EVE^V0<hM9,]"~/\CB\|x`"?GrOfenV5RUeX:,dq,wQ'%
2024-04-24 02:16:38 UTC	2071	IN	Data Raw: d1 c7 0e ea cb 7d 55 de 2b 2e f9 5d 93 de 8d 77 b1 75 df 57 78 07 52 e8 8f d6 b4 5b 56 89 99 39 ed 46 7a ad 56 ab 55 aa d7 b1 9d 6a 99 d6 a9 df 55 aa 13 f0 5b 2d f3 6b e1 0f 25 5a 3e aa c1 ef 93 f7 1a ba d5 6a b5 5a ad 56 e5 aa d5 6e 5b d9 6f 4c fa fc 3e 4b 60 a7 88 99 0f b8 ff 00 91 1a bf f7 1b 5d 9a 23 58 d7 f9 f6 7d ea 1e e5 8f 79 37 9b fb d1 fb d0 7a 65 e9 4e cc 8e 72 ed 5b 53 0a 61 4c 2a 0a e5 22 61 08 86 5b 0e 4a a7 46 c9 07 31 4e fb 65 d5 32 11 d4 b2 23 f5 d2 b7 84 fd 7a e9 61 fc fb 04 dc 1f bd 4a a2 96 c1 28 77 9b e4 24 20 80 59 32 64 44 83 c4 e6 5b 0b 9a a3 4f 67 62 8a 47 d7 94 2b 60 ba 28 5c 13 f8 13 4a b9 bb 90 3e ab 9b cb 2e 76 e7 02 47 6a 56 45 73 55 14 b2 13 4b 78 22 8e 59 e4 95 68 9d 96 8b 6b ad 16 8b 44 10 19 21 a8 c8 60 8d 96 8c cb 44 e2 Data Ascii: }U+.]wuWxR[V9FzVUjU[-k%Z>jZVn[oL>K`]#X}y7zeNr[SaL*"a[JF1Ne2#zaJ(w$ Y2dD[OgbG+`(\J>.vGjVEsUKx"YhkD!`D
2024-04-24 02:16:38 UTC	16384	IN	Data Raw: 37 de 4b 73 ba dd d7 55 cc 44 62 09 a6 25 cf 77 4e 64 eb 99 23 26 77 75 a1 68 fe 96 74 40 09 bc 2e 4e fa 3f 66 ba 21 9d e3 3c 77 12 d3 28 df 39 88 76 7c e5 45 f8 a3 48 81 da 66 2a e8 a1 66 5d e4 22 53 5c de 9d dd d6 8b 62 d1 6a c8 a4 65 ab ba da a8 4c 01 66 ab 56 29 38 c7 28 dc d1 2e ba 80 0b c8 9c d6 aa 2a 36 a6 42 5f 86 c2 22 e6 f1 40 52 38 c2 31 33 8e ab 6a 76 5b 13 b2 24 6e fd af a7 61 80 12 92 7e 44 bb b7 3e a9 bf 7b 45 bc 3a fc b2 f4 bb f5 11 5a 76 07 a8 df 4b 32 fc 18 cf 6e bf b9 37 90 22 f5 7c 2d d9 1f 9d c6 f9 d2 f9 4b db 56 c4 c0 76 1c b9 bb c9 6f 35 a9 2d 5d 78 95 58 e4 25 0d 66 05 24 cc 0b 57 77 52 8e 84 28 50 a6 42 ae 7d b3 44 53 4b 63 ee 39 3c fa bd 44 32 40 fc bb 07 a0 93 91 bb 0a 61 4c c9 dd 80 66 95 e6 36 64 cc ab fa ee 7d a1 79 08 27 da Data Ascii: 7KsUDb%wNd#&wuht@.N?f!<w(9v\|EHff]"S\bjeLfV)8(.6B_"@R813jv[$na~D>{E:ZvK2n7"\|-KVvo5-]xX%f$WwR(PB}DSKc9<D2@aLf6d}y'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49968	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:36 UTC	785	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/adobe/2309/interactive/6_TLm3mz/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 39025 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:38 GMT ETag: "ae3014c64b170b87e558aaab76e68dbb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: DETTzVy27-3efHb4QBhSMJgXFVF7xvUat5Okb0_8VVqxpKqX1FFpbA==
2024-04-24 02:16:37 UTC	15869	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 e1 08 06 00 00 00 4b 01 86 44 00 00 00 09 70 48 59 73 00 00 10 9c 00 00 10 9c 01 26 cd 3a 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 98 06 49 44 41 54 78 01 ed 7d 07 a0 1d 45 f5 f7 99 d9 fb 5e 7a f2 d2 0b 01 92 d0 09 bd f7 22 20 4d 90 62 28 2a 08 c8 87 0a a2 62 41 50 91 f7 57 2c 60 01 0b a2 58 c0 86 25 d2 ab 08 12 90 aa f4 a2 94 40 02 09 21 bd 97 97 f7 ee dd f3 9d d9 3a 33 3b bb 77 f7 de 7d 25 30 bf 64 de ee 9d 9d 72 66 76 76 ce 99 33 33 67 18 58 58 58 f4 38 b0 fd a0 ca d2 b5 cf 8f eb 72 b1 0d 38 1b 8c dc ed ef 20 ab 32 74 3b aa 9c 2d 1e d7 7f a7 b9 ac 7d 46 15 2c 2c 4a 02 3e 30 a9 3f ac ab 8c 02 07 db ba 5a f8 20 c6 70 40 f8 ac 02 d0 Data Ascii: PNGIHDRKDpHYs&:4sRGBgAMAaIDATx}E^z" Mb(*bAPW,`X%@!:3;w}%0drfvv33gXXX8r8 2t;-}F,,J>0?Z p@
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 9d 7a 65 f0 ef 3b 01 c5 01 85 ca 16 f4 2a 72 31 85 fb 1a 0d 58 5b bc 38 52 1d f8 83 67 37 9a 82 17 6e 60 b5 6b 69 41 52 49 c3 c2 bf 8b 8e 3b 96 52 f7 ce 3a 8a 8c 45 79 2e b6 61 e1 e5 cd fd 52 84 79 d6 5c 78 15 fa 28 18 58 58 58 f4 18 16 9d 75 ec 10 ac e0 8e b5 4a 75 1c f5 7b 3b d1 48 68 53 ea 59 07 7b 0f 19 ab 52 27 b8 9a c6 4d b3 5c c4 99 0e 6f 79 be cb a9 bc be f1 95 d3 d7 81 85 45 03 98 77 db 39 03 dd ae 15 3b 50 e3 1a e9 32 77 1b f2 da 9c d8 6d 1b fd ee 17 89 4c 0c 3b 88 75 ad e7 cc 7d a7 ca f8 9b 0c aa 6f 61 95 fd f7 3f 5d 2d 73 4e 6a d0 b6 82 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 Data Ascii: ze;*r1X[8Rg7n`kiARI;R:Ey.aRy\x(XXXuJu{;HhSY{R'M\oyEw9;P2wmL;u}oa?]-sNj
2024-04-24 02:16:37 UTC	6772	IN	Data Raw: d0 8e 85 02 83 be 20 d2 77 4c d9 8a 49 39 af 83 12 51 ed ac 1c 90 10 14 64 2d 87 f6 cc 75 e1 f7 50 22 5c 97 dd a0 b4 23 9d d9 c7 c2 42 f4 ac da 8a 07 eb e9 60 8d 2f 48 a6 e3 80 7e b0 96 24 50 2c a9 47 db 73 5b fd ea b4 1a b2 ef d2 7b ee 4c 68 3d 20 7a 2f 73 a0 86 c7 bc 38 e5 b7 9e 7d a2 52 c4 66 9c 36 cd 59 f6 d0 a2 6d 9c 56 b6 91 5b 73 05 83 da 99 33 3e 0a 01 fb 7b 9f 25 04 59 f9 d3 55 ab 19 7d 78 2e e0 eb d4 05 be ca 2a f8 f4 90 49 9d 33 d9 8c 19 99 a3 27 dc e1 b4 41 6b 56 76 0c c9 41 0e 74 41 57 c7 f0 d9 b7 14 ef b0 26 9d d1 7f cd a0 ac 09 4b f3 c2 fe c1 2f fd 4c d9 1f be 70 ea b9 83 29 e4 e0 64 c8 41 79 92 6b 18 ab 5b 06 b9 e3 1e 6d 5f a8 fb 2f d9 b3 7d 28 4d e6 0d cc 93 e9 a0 41 6b 97 b3 19 ed 85 04 ae 7a 58 76 dc 95 6d 2d 9d ad fd 75 ff d4 63 0f 07 Data Ascii: wLI9Qd-uP"\#B`/H~$P,Gs[{Lh= z/s8}Rf6YmV[s3>{%YU}x.*I3'AkVvAtAW&K/Lp)dAyk[m_/}(MAkzXvm-uc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49969	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	861	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1184804152.1713924994&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	854	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1184804152.1713924994&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49971	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	909	OUT	GET /rp.gif?ts=1713924996128&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:37 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49974	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&cb=1713924996184&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:37 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1128782053932511 Date: Wed, 24 Apr 2024 02:16:37 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:37 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49975	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713924996185&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:37 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1850894054583718 Date: Wed, 24 Apr 2024 02:16:37 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:37 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49976	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	1600	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924996187 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:37 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:37 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3699788150139458 Date: Wed, 24 Apr 2024 02:16:37 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49979	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	430	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Jaguar-UI_hover.da3d849b299737b58bf8.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 36189 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:37 GMT ETag: "998a47703d2bd3c00db0bc1be6e30a11" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: gmJqbH2bGOsFCTOL37WOFo7V1nN7XIoq28FlUlpOBA978eWv39r-ug== Age: 1
2024-04-24 02:16:37 UTC	15868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 8d 24 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 f0 df 05 00 00 00 00 00 00 00 00 80 71 57 05 ff 47 0e 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4$IDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S)qWG
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: b4 29 35 91 93 93 43 11 81 39 de 62 76 ad 38 97 5a 72 6b de b9 22 f1 40 07 e0 b0 ba d0 b1 23 ce 3a ec b0 04 e7 b8 aa 5d bb 36 ee 53 83 a5 d7 8d b4 ab 56 05 f6 f9 c3 56 1d a0 45 0b 77 7e f6 d8 46 84 11 51 c0 52 44 44 be fe fa 6b 77 03 96 2e fc 22 98 ec f2 e5 6a 16 7e 2a 2a 2a 22 50 ac b6 dd 3e a7 05 23 dd 62 95 ea 22 c1 64 23 b7 2d 90 7d f6 d9 67 bb 1a 82 6c d2 a4 89 13 b0 0c 27 d6 fc fb df ff fe 97 39 73 e6 20 22 d1 41 44 44 44 44 44 14 ae 1c 37 bc e9 7e 27 f7 ac 5a 85 a7 3a ff 4e b8 f2 c3 c2 d0 b9 5f ec e3 d4 54 aa f5 e9 43 b5 f1 e3 fd 2c 4c 67 3f a4 18 f7 34 4c 02 f2 90 83 d4 0a 5c b9 d0 fc e9 d1 3e c2 51 83 06 0d 88 21 8b 4a 22 df 4e dc 51 93 0c 5b ef fa d4 98 85 62 df 1f dd 90 30 a1 80 a5 0b ba 00 27 77 81 81 03 6d 12 5e 5b 27 48 19 8a e2 6b 01 55 d1 Data Ascii: )5C9bv8Zrk"@#:]6SVVEw~FQRDDkw."j~***"P>#b"d#-}gl'9s "ADDDDD7~'Z:N_TC,Lg?4L\>Q!J"NQ[b0'wm^['HkU
2024-04-24 02:16:37 UTC	3937	IN	Data Raw: 00 00 00 00 fc 6e 71 73 fb 72 0c 12 00 00 00 80 0d 0b a7 62 d7 e5 3f 07 02 4b ae 63 e3 c6 8d d1 2b 00 00 00 00 80 4d 9b 36 c5 30 c9 1e 68 58 37 f3 54 0c 12 00 00 00 80 52 63 22 72 20 b0 64 cb 96 2d 31 5c 00 00 00 00 00 bf 5b 34 c5 12 00 00 00 60 c7 ec b1 58 02 02 4b b6 6d db 16 eb d6 ad 8b a2 00 00 00 00 00 b6 6e dd 9a b3 22 dc 14 4b 00 00 00 80 be f9 23 d2 56 dd 7a f0 a5 08 2c 29 95 4a 31 32 32 12 00 00 00 00 00 45 ed de bd db 74 07 00 00 00 80 3e 55 89 c5 ec 8f 48 c5 95 02 4b 8a d8 b5 6b 57 6c dc b8 31 6e 04 00 00 00 00 60 e7 ce 9d cf 6f c6 19 56 cf 3f f0 d0 aa 8b 2c 01 00 00 80 be b4 2e ea b1 75 ea 7e 71 a5 c0 92 a2 ca e5 72 bc fe f5 af 5f 72 a5 0f 00 00 00 00 c0 a6 4d 9b e2 ff ff ff ff e3 45 22 cb a9 83 cf 4f 7c 00 00 00 00 e8 97 b5 e0 9b a7 8e ad a1 Data Ascii: nqsrb?Kc+M60hX7TRc"r d-1\[4`XKmn"K#Vz,)J122Et>UHKkWl1n`oV?,.u~qr_rME"O\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49977	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	1088	OUT	GET /pagead/1p-user-list/778938880/?random=1482633360&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqWbSe0BulwwkCWw3aseaYJd9A8uUVahJ8Ox6B7prR0sHTosu5&random=4065371914 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49970	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	787	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	388	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 02:16:37 GMT Content-Length: 281 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:37 UTC	281	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 70 76 3d 31 2e 31 2e 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0">https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49972	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924996149 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:16:37 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49982	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	433	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/Butterfly-UI_hover.fcf3d17255167ef1012e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:37 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 37028 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:36 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:37 GMT ETag: "62615becf8831f197e70175a43c41000" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Z1S3_ImNgFUXk3LpCP1p0kRTxRKBVIurj8TeY1yi1gMcnzwmjDoPbA== Age: 1
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 58 00 00 02 68 08 06 00 00 00 00 df 7e 34 00 00 90 6b 49 44 41 54 78 01 ec dd 05 6c 63 c9 96 80 e1 53 65 87 9a 21 e9 f7 de 30 33 33 33 35 2c 33 33 89 b5 cc cc 62 5c 66 66 de e1 19 c1 32 d3 30 33 33 a6 21 77 ed 55 66 e1 ca db 65 77 e2 1b 27 fe 3e a9 64 5f e8 24 35 e2 d1 af 53 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 06 29 c6 9d ff 2e 00 00 00 00 00 00 00 00 00 50 c5 ff 41 8e ff 03 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXh~4kIDATxlcSe!03335,33b\ff2033!wUfew'>d_$5S).PA
2024-04-24 02:16:37 UTC	16384	IN	Data Raw: 0b 57 8e 7d 1e b4 22 81 02 96 f8 43 ae ec 6d a3 bd 32 93 bd 04 ce 9c 39 fe b7 31 36 a3 64 98 bb 15 6b a2 6a e3 97 30 e0 b2 cb 2a e3 af 17 5f 0c 5c 38 f0 b0 1b c2 cb c0 1f 8d 1b d7 a3 2c 45 cf 4c e4 1a 77 df 0e 66 9e 0b 57 22 f3 e6 e1 b7 7a f5 a2 28 a9 fa d5 c0 1d 83 ef 0f 73 7f f0 f3 33 04 cc 9c 75 f8 ad 45 22 22 a2 80 a5 88 48 60 43 3c 4f 3e f9 a4 1b b2 0c 6e 22 52 a1 42 85 f3 b6 57 fe 1f 7b f7 01 1e 55 99 b7 7f fc 9b 90 84 16 48 02 09 5d c8 d0 82 b0 d4 00 0a 0a 76 5d ff 2b 5b 64 1b c5 de 75 ab ac bc 76 b3 ae 8b 1a 7b 17 ec ee e2 ab d8 95 75 ed d2 3b 28 12 94 7e 42 80 04 42 80 54 48 cf df e7 bc d6 5d 85 90 79 ce d4 fb 73 5d cf 95 58 81 99 73 66 26 e7 dc cf fd 6b 8a c7 1f 7f dc 0d e7 79 ed e5 97 5f 76 c7 85 db d4 bb 77 6f d3 ea 19 11 01 4b c7 71 78 f1 c5 Data Ascii: W}"Cm2916dkj0*_\8,ELwfW"z(s3uE""H`C<O>n"RBW{UH]v]+[duv{u;(~BBTH]ys]Xsf&ky_vwoKqx
2024-04-24 02:16:37 UTC	4260	IN	Data Raw: 73 06 65 b6 cb b2 87 79 c6 6a b3 5d 26 b1 5a 4d 37 fd 54 03 6e 97 9e fc da 16 75 f7 f7 55 5d 8b e9 7a a7 fe e9 1c 00 00 00 00 00 00 00 00 00 00 81 25 00 00 00 00 00 00 00 00 00 80 c0 12 00 00 00 00 00 00 00 00 00 40 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 cb 48 60 09 00 00 00 00 00 00 00 00 00 20 b0 04 00 00 00 00 00 00 00 00 00 10 58 02 00 00 00 00 00 00 00 00 00 08 2c 01 00 00 00 00 00 00 00 00 00 04 96 00 00 00 00 00 00 00 00 00 00 0c 46 8f 03 00 00 00 00 80 46 df 60 00 00 00 00 80 09 96 00 00 00 00 00 00 00 00 00 00 9d 17 58 02 00 00 00 00 00 00 00 00 00 7d f5 e9 b8 25 08 2c 01 00 00 00 00 60 63 f5 62 74 23 00 00 00 Data Ascii: seyj]&ZM7TnuU]z%@` X,XH` X,FF`X}%,`cbt#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49984	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	675	OUT	GET /rp.gif?ts=1713924996128&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:38 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:37 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49983	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	912	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1184804152.1713924994&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:38 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49986	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:37 UTC	1631	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924996928&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:38 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:38 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZOOERkd1FGUEkzeWRKaGJIQlh4eEcvcjJjd2VCSWpuN1JxYXBMajBpNEJKWDhPOXZvRGEyMWV4MEhmdTVOMzVxcXNkUEJTZXJPdFdFWTZDd3lxUG5DTGlvVTFhSFBweDd2TGFjQVIraklYUT0mWnRJdUVlTzRqRGcwRmlGQ3ZReGkyWXg2dTljPQ=="; Expires=Thu, 24 Apr 2025 02:16:38 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1374289536567660 Date: Wed, 24 Apr 2024 02:16:38 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49989	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	1398	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713924996187 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:38 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:38 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6096430292803830 Date: Wed, 24 Apr 2024 02:16:38 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49990	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&cb=1713924996184&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:38 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4684177927934420 Date: Wed, 24 Apr 2024 02:16:38 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:38 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49991	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713924996185&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZxc0xZWTBLR2hmeWc1UGZHRzQ0cEc4QUFiNHFaV3dzMnNjelpXRlQ3Zm13OFpYT05OWEUvekdGSTliWVh5N0NUbmxxNy9FQzFzelA0OHZsUVhYYlJqRERQS2JUK2ZnNEhRYlRWQzJFN0Jkdz0mQ0tJeWpBaC9SbVltYUY3R3IxamZTdWF0c3lBPQ=="
2024-04-24 02:16:38 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1628420233298280 Date: Wed, 24 Apr 2024 02:16:38 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:38 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49988	15.197.193.217	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	838	OUT	GET /track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb
2024-04-24 02:16:38 UTC	549	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:38 GMT Content-Type: text/html Content-Length: 929 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:38 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:16:38 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:38 UTC	929	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49992	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	419	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/copy.46f8cc66a61588b34e5e.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:38 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 39025 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:40 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:38 GMT ETag: "ae3014c64b170b87e558aaab76e68dbb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: OX3YPViqioHx851Text33hpYVTlXnfm535XDsI1CmRyNOe34mMou-g== Age: 1
2024-04-24 02:16:38 UTC	15868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 e1 08 06 00 00 00 4b 01 86 44 00 00 00 09 70 48 59 73 00 00 10 9c 00 00 10 9c 01 26 cd 3a 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 98 06 49 44 41 54 78 01 ed 7d 07 a0 1d 45 f5 f7 99 d9 fb 5e 7a f2 d2 0b 01 92 d0 09 bd f7 22 20 4d 90 62 28 2a 08 c8 87 0a a2 62 41 50 91 f7 57 2c 60 01 0b a2 58 c0 86 25 d2 ab 08 12 90 aa f4 a2 94 40 02 09 21 bd 97 97 f7 ee dd f3 9d d9 3a 33 3b bb 77 f7 de 7d 25 30 bf 64 de ee 9d 9d 72 66 76 76 ce 99 33 33 67 18 58 58 58 f4 38 b0 fd a0 ca d2 b5 cf 8f eb 72 b1 0d 38 1b 8c dc ed ef 20 ab 32 74 3b aa 9c 2d 1e d7 7f a7 b9 ac 7d 46 15 2c 2c 4a 02 3e 30 a9 3f ac ab 8c 02 07 db ba 5a f8 20 c6 70 40 f8 ac 02 d0 Data Ascii: PNGIHDRKDpHYs&:4sRGBgAMAaIDATx}E^z" Mb(*bAPW,`X%@!:3;w}%0drfvv33gXXX8r8 2t;-}F,,J>0?Z p@
2024-04-24 02:16:38 UTC	16384	IN	Data Raw: ef 9d 7a 65 f0 ef 3b 01 c5 01 85 ca 16 f4 2a 72 31 85 fb 1a 0d 58 5b bc 38 52 1d f8 83 67 37 9a 82 17 6e 60 b5 6b 69 41 52 49 c3 c2 bf 8b 8e 3b 96 52 f7 ce 3a 8a 8c 45 79 2e b6 61 e1 e5 cd fd 52 84 79 d6 5c 78 15 fa 28 18 58 58 58 f4 18 16 9d 75 ec 10 ac e0 8e b5 4a 75 1c f5 7b 3b d1 48 68 53 ea 59 07 7b 0f 19 ab 52 27 b8 9a c6 4d b3 5c c4 99 0e 6f 79 be cb a9 bc be f1 95 d3 d7 81 85 45 03 98 77 db 39 03 dd ae 15 3b 50 e3 1a e9 32 77 1b f2 da 9c d8 6d 1b fd ee 17 89 4c 0c 3b 88 75 ad e7 cc 7d a7 ca f8 9b 0c aa 6f 61 95 fd f7 3f 5d 2d 73 4e 6a d0 b6 82 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 85 Data Ascii: ze;*r1X[8Rg7n`kiARI;R:Ey.aRy\x(XXXuJu{;HhSY{R'M\oyEw9;P2wmL;u}oa?]-sNj
2024-04-24 02:16:38 UTC	6773	IN	Data Raw: af d0 8e 85 02 83 be 20 d2 77 4c d9 8a 49 39 af 83 12 51 ed ac 1c 90 10 14 64 2d 87 f6 cc 75 e1 f7 50 22 5c 97 dd a0 b4 23 9d d9 c7 c2 42 f4 ac da 8a 07 eb e9 60 8d 2f 48 a6 e3 80 7e b0 96 24 50 2c a9 47 db 73 5b fd ea b4 1a b2 ef d2 7b ee 4c 68 3d 20 7a 2f 73 a0 86 c7 bc 38 e5 b7 9e 7d a2 52 c4 66 9c 36 cd 59 f6 d0 a2 6d 9c 56 b6 91 5b 73 05 83 da 99 33 3e 0a 01 fb 7b 9f 25 04 59 f9 d3 55 ab 19 7d 78 2e e0 eb d4 05 be ca 2a f8 f4 90 49 9d 33 d9 8c 19 99 a3 27 dc e1 b4 41 6b 56 76 0c c9 41 0e 74 41 57 c7 f0 d9 b7 14 ef b0 26 9d d1 7f cd a0 ac 09 4b f3 c2 fe c1 2f fd 4c d9 1f be 70 ea b9 83 29 e4 e0 64 c8 41 79 92 6b 18 ab 5b 06 b9 e3 1e 6d 5f a8 fb 2f d9 b3 7d 28 4d e6 0d cc 93 e9 a0 41 6b 97 b3 19 ed 85 04 ae 7a 58 76 dc 95 6d 2d 9d ad fd 75 ff d4 63 0f Data Ascii: wLI9Qd-uP"\#B`/H~$P,Gs[{Lh= z/s8}Rf6YmV[s3>{%YU}x.*I3'AkVvAtAW&K/Lp)dAyk[m_/}(MAkzXvm-uc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49995	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	905	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:38 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49994	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	997	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:38 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:38 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:38 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:16:38 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:16:38 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49993	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924996149 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 927 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:38 UTC	927	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 37 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"7","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:16:39 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:39 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:16:39 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:39 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49996	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	1429	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713924996928&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1XVTJaV1EyTVRjdFlXRmtOaTAwTVRRNUxXSTFZMk10WVdZek5UVmhPV0l3WW1Jdw%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZOOERkd1FGUEkzeWRKaGJIQlh4eEcvcjJjd2VCSWpuN1JxYXBMajBpNEJKWDhPOXZvRGEyMWV4MEhmdTVOMzVxcXNkUEJTZXJPdFdFWTZDd3lxUG5DTGlvVTFhSFBweDd2TGFjQVIraklYUT0mWnRJdUVlTzRqRGcwRmlGQ3ZReGkyWXg2dTljPQ=="
2024-04-24 02:16:39 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:38 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="; Expires=Thu, 24 Apr 2025 02:16:38 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1291840601832930 Date: Wed, 24 Apr 2024 02:16:38 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49998	18.154.142.121	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	751	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:16:39 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 09:45:48 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 420e3b0d7cd0bf1d77ce55997ab31cdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: h0u4WlECndGz4pOqeDvTWaLEGYGtPuJdT_q6p3yVgf-Zn8y9T63cOg== Age: 59452
2024-04-24 02:16:39 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49999	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:38 UTC	671	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:39 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=161, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50001	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	426	OUT	GET /creator/adobe/2309/interactive/6_TLm3mz/background2.f441f5a3622eab500da2.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:39 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1618888 Connection: close Last-Modified: Mon, 23 Oct 2023 14:49:37 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:38 GMT ETag: "9459ab37c159826cc66c30f9f6df33d0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: nzYprqqds2qkwnWC_bx5Eh0jyUav5JQus3Sx_ZmANqzqcQKTRh-igA== Age: 2
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 03 c8 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 01 03 02 0a 0b ff da 00 08 01 01 00 00 00 00 fc ff 00 f3 33 3a 7a cd 66 6f 5b d6 f3 35 bc d6 f1 46 3b 7b f7 bf 59 eb d7 bf 5e bd fb f7 ef a7 be 9e fb 76 12 2c cc Data Ascii: JFIFHH3:zfo[5F;{Y^v,
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: c1 64 21 4a dd dd 78 9e a5 23 47 09 a3 a4 8b 77 63 5f d1 8c 69 7d 8e 2a 56 de 21 b2 01 32 5e c5 4a 7a ea 5e 5c 6c 60 aa db 01 49 4e a8 a0 76 92 4c cb 66 8a 3b b4 4d 17 0f 7d 8c 87 0f 32 76 dd 17 0c 2a 25 6e c1 9c ac 5a b7 66 4e 84 a1 0c cc cf 7e b3 33 33 33 33 7a cc cc d6 cd c5 7a f5 eb d7 bf 5e fd 7a f7 eb a7 4e 9d bb f5 eb db b8 81 5d fb 89 1c 3d 1e d9 84 3c 0e 10 78 6d 9c 28 97 29 c3 97 19 6d d1 d5 8f 87 8a 95 5a d2 6e 55 4b f7 17 a4 4b 52 ef cf 3a c1 63 cc 1b 8f 36 24 52 e5 bc 75 2e be 64 d0 40 d6 7e a5 a0 73 48 22 5b e2 40 3d af 23 ce 8c 96 e8 29 75 28 7c b0 4a 6a c1 48 46 b8 4d 70 0d 63 e5 1c fc a3 a0 ca c1 12 90 0c 7d 20 4e 19 e6 3f 90 6f 5e 85 b9 8f ab b2 ae 7c 1d 67 70 8e 1d 20 a4 53 6e cb 32 11 8b 17 92 21 5c 70 f3 b0 92 2b e8 1c 44 27 43 f1 67 Data Ascii: d!Jx#Gwc_i}V!2^Jz^\l`INvLf;M}2v%nZfN~3333zz^zN]=<xm()mZnUKKR:c6$Ru.d@~sH"[@=#)u(\|JjHFMpc} N?o^\|gp Sn2!\p+D'Cg
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 37 ac 74 4c 96 e1 e2 df 35 7a db e8 7d d7 cf 1a f6 63 7d bf d0 66 ec 99 76 67 70 9c 6a b7 0f ae 4a e7 35 aa c6 a7 98 d9 9c c3 53 7d 6f e2 e9 dd 8a af 71 bc c9 d7 d9 2a a4 ac d3 d5 4d 13 96 4e 5b 2c 06 e5 b7 3e a1 e9 aa d5 28 37 6b 05 2d 86 99 b1 79 73 35 90 a3 7a 5b 36 87 80 65 7a de c0 00 00 00 00 00 00 00 00 d0 bc e0 e7 00 e7 39 ce 02 f3 85 21 48 9a 68 24 83 64 4d 67 41 e4 e8 ae c7 58 51 ec 64 7e 8b 99 e9 7e 78 b1 37 e7 21 75 39 14 f0 7f 63 d0 0e 01 99 55 29 ce 6e d9 c5 0b 7a a6 6b 16 5b 96 5f 83 44 3e 2e e4 8b 0c ad 18 fb 8f 2d 50 c8 5d b1 ca f4 b4 a2 3f 3b f1 e8 16 5b 36 f5 a9 4d 37 56 51 12 2e a3 76 ec 2c 1b 1c bf 9d 32 df 44 1e 7b cd db 5d 65 6b ed 92 5e 69 b3 4f 1e e4 1e 9d bd f8 93 ce 7b e7 90 bd d3 ec eb 5e 4d 7b 61 7c 6e b5 8f 33 c5 d5 95 bf 99 Data Ascii: 7tL5z}c}fvgpjJ5S}oq*MN[,>(7k-ys5z[6ez9!Hh$dMgAXQd~~x7!u9cU)nzk[_D>.-P]?;[6M7VQ.v,2D{]ek^iO{^M{a\|n3
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 29 71 2a ee 76 25 a5 b2 a8 97 a6 55 77 2e dd 2d 07 ef a0 00 00 00 00 00 00 00 00 42 bc 6e bb c3 0e 41 49 48 a1 1c de 16 71 e3 45 da 37 09 26 44 92 6e c1 36 77 e0 d6 32 32 61 48 69 95 5d b6 68 82 2d 22 67 d0 6a da 2b 66 90 62 72 12 4a 9f 63 91 9b 6b 56 8a 46 b9 0d 70 9d 46 1a 7e b7 d4 51 b7 b5 68 dd f4 f3 31 47 cf 22 68 ef 1d b2 61 03 76 83 77 38 d1 3e a2 10 33 53 22 87 51 63 23 91 f9 8b d0 b9 d3 2f 78 cc e7 d9 1e c9 8a fa 0b 60 d9 21 f1 ed 2b 7d c1 65 7c c1 c7 f1 71 56 37 0e a4 5a de a7 5e cb 28 ce 36 6d fc 04 a3 ae 2d 5a 8f 9c b0 c0 d9 a2 51 7e 12 86 af 48 3a e6 1f bc e6 fe 57 ce b5 42 d4 f1 e9 4d 63 0c 9f 90 4f c7 6e 2a 7e b4 f3 ef be ac 6e 30 4b 40 d3 6d 36 6a ee 7e 45 a4 9e 3c 3a 2d d6 b6 7b 54 00 00 00 00 00 00 00 00 11 2e 51 3b d6 7c 73 1c f5 fa 51 Data Ascii: )qv%Uw.-BnAIHqE7&Dn6w22aHi]h-"gj+fbrJckVFpF~Qh1G"havw8>3S"Qc#/x`!+}e\|qV7Z^(6m-ZQ~H:WBMcOn~n0K@m6j~E<:-{T.Q;\|sQ
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 40 57 27 d8 62 73 3d de 6a d3 4d 27 47 dc 7a 47 ca d9 ea ba 30 4c e3 10 f8 a5 2c 40 2e 81 28 6c f4 86 07 ee 80 ff 00 21 f4 58 cc a4 d5 79 e7 b0 54 1d 01 55 f4 5a 1d 75 87 40 ea 75 99 bb ec 0d c6 04 ab 5b 2d b7 c9 dd 4e 97 29 9c 6e 9b 3b 6d 73 6d 88 1a 5f 48 80 fd 18 3d 13 9d ed 3d b0 82 28 03 16 0f 5a 5a 28 8a ca d6 c3 13 9b ea f3 d4 9d ef 9e fa 9d ef 8f 7a 7a 7b dd 95 49 24 92 49 24 92 49 24 91 32 7b ef be fb ef be fa 92 f2 b3 c5 e4 b7 d2 4b 24 92 4a e9 4b c1 d3 27 bb c1 a8 fa 0e 43 69 d1 c4 1a a2 22 a6 98 e3 5d ce e0 f5 3d ae 94 72 8b 91 cf 2e d8 aa 3b 4b 01 e9 28 ad ed ac 39 5e 8f 25 ce be 95 9a 8f 47 59 79 a3 fa 5a bf e6 58 ea ab ab 6d 38 a4 13 c9 e4 cd ad 9b da f8 45 32 3f 0b 26 c8 6a 41 bc 2a ce 23 8a 7c 61 4e 3c cd a1 a3 d3 7d 34 66 8b b4 e0 79 bb Data Ascii: @W'bs=jM'GzG0L,@.(l!XyTUZu@u[-N)n;msm_H==(ZZ(zz{I$I$I$2{K$JK'Ci"]=r.;K(9^%GYyZXm8E2?&jA*#\|aN<}4fy
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 3d 8f c1 02 57 b5 52 4f 21 27 98 41 97 b3 73 4a 56 a6 c6 a3 7b 1a b4 f4 a1 7b 73 9f 33 50 f8 64 78 72 4c a3 32 7f 67 79 f5 f9 ea ba 46 be d2 1a 71 4e b0 8a b6 c2 b6 ea d7 40 e1 df ef b1 f9 0f 84 0c 23 32 dc 73 92 77 8e a9 53 21 77 76 00 d4 17 23 2a b8 3d b6 9f de 3f 9f 20 f9 23 95 85 46 e9 d9 2e f6 ca 2c 4e 38 29 08 9a 7b 6b ef 6c 89 2f 5b ac 7f af 74 e4 d8 d6 c8 19 8a 52 4e 10 71 64 b1 9a aa 18 31 b5 63 c7 12 f2 38 99 e3 df 7a fa ff 00 6a 70 91 59 dc cc 10 f5 d7 17 75 23 5b 07 66 38 42 9d 3b 89 91 bd ad 24 92 49 24 92 49 24 92 5e a5 e7 89 79 eb df 33 9a c0 25 f2 c5 f4 51 3e ca f2 5a f8 6c 48 2f 13 5b e4 5e c6 d9 62 81 fa 11 44 74 b5 f4 72 5f e8 53 9b e3 bd 1e 0d 00 04 97 91 8d c1 08 23 e4 d3 d0 06 88 2e 8f d8 ac 16 9e c2 83 58 2a 72 8f df 62 77 82 0c 1f Data Ascii: =WRO!'AsJV{{s3PdxrL2gyFqN@#2swS!wv#=? #F.,N8){kl/[tRNqd1c8zjpYu#[f8B;$I$I$^y3%Q>ZlH/[^bDtr_S#.Xrbw
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 53 16 b2 f3 06 af 34 52 ac 78 bd 89 29 45 a4 d9 e2 fa a8 1e 43 91 d5 6f 47 05 8f d7 83 ff 00 6e a5 fa ab 8f 80 8f e8 2a fe 95 58 98 69 e3 b4 62 e2 28 27 b1 30 62 2e 3a a7 8a e4 99 d0 a8 72 04 11 07 67 92 79 05 91 df ad 1a 93 33 58 51 e7 51 66 ad 3a 3c 85 b3 4f 2c 85 ff 00 c3 6f 2f dd b2 aa ac fd c7 60 b3 27 7d 5e 37 5a 3a 70 51 9e c7 53 fa 20 2f 9d 62 2e 4a 73 22 7d ce b7 3a 69 4c 50 de b0 28 32 84 a3 c9 40 e8 66 88 db 11 d5 b5 eb 2c 10 d8 69 70 75 09 1e 02 c3 2a 58 31 19 21 bf 26 2a 2e 2c c0 53 e2 4c 5a c5 62 b2 25 8f b3 fa 64 4a 9b f6 0b a1 42 b8 95 c5 f1 9a ed 4e 3a 5f c9 be b9 60 50 c9 b5 b3 de 9c 6f da 0a a7 f7 12 7b 5d df 9d c2 b0 86 b7 2a 6e e6 46 2a 36 5c 5a da 65 d3 32 c3 61 bb c3 e7 f5 83 07 8a e3 5b 31 c7 56 e5 2c a5 79 47 6a 8c d5 ad c5 8a a1 Data Ascii: S4Rx)ECoGnXib('0b.:rgy3XQQf:<O,o/`'}^7Z:pQS /b.Js"}:iLP(2@f,ipuX1!&.,SLZb%dJBN:_`Po{]nF*6\Ze2a[1V,yGj
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: ec 5c e6 bf a9 f6 a1 8d dd 05 76 47 24 30 29 6f 19 2e a4 f1 8a ae da 3e 72 bc 85 74 c5 da 0a 3f 6e 6d a4 4d e4 ca bd 5e 62 26 92 25 1e aa e7 de 37 67 9c b3 1e 89 9d 44 4d 5c 72 13 94 90 1c 92 4a a2 8f 60 ca 3a c6 2f b5 3b 31 29 db c5 42 b3 cc 77 43 64 6c 2e 4a 3a da b1 f4 2a c2 6c 56 e4 99 94 13 0c 91 17 42 a8 22 f3 bf a9 89 c5 42 5b 2b 41 64 49 8e 06 94 3b 93 40 33 37 cc 74 31 ea bb bb 3b 63 a2 3a aa ee 23 45 56 84 d1 cb 91 8b 45 5e ae ca 97 a4 0d b1 89 13 c8 d2 56 30 f1 3c d1 68 15 e9 4d 39 11 d7 e1 2c 5d 0e 19 09 22 e5 7e 2f 94 cb e1 8e ce 13 19 c3 5c 43 42 7c ad 88 78 60 f8 98 0f 8a 22 9b 00 dc 3f 47 88 72 87 9c c0 4f 8a b3 f8 13 66 b0 f3 65 f8 ff 00 88 6e e1 ed 56 b9 9a c8 35 ba 52 55 65 58 3a c3 2c d5 64 c1 71 2c 77 1e c5 51 bc 27 d2 1b 8f b7 25 94 Data Ascii: \vG$0)o.>rt?nmM^b&%7gDM\rJ`:/;1)BwCdl.J:*lVB"B[+AdI;@37t1;c:#EVE^V0<hM9,]"~/\CB\|x`"?GrOfenV5RUeX:,dq,wQ'%
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: f2 ea 88 d6 a9 d1 b2 e1 5a 8d 63 23 14 9a 49 90 8c 27 27 1e 72 2d a8 c8 34 32 33 7d ac eb 44 49 df 55 a6 a9 99 d7 89 3e 8c cf e2 4e ce b6 13 ad a0 c9 fb 1b aa 2d 45 46 f2 c8 9a 46 08 e7 19 35 21 21 7d 93 12 6e 60 94 76 25 82 4e a4 a1 7d ae cf d3 b4 47 9a ce da 7c 71 f5 77 ec 74 3e 74 59 9a 79 a3 67 56 04 a1 3c 14 4f 68 fb c3 32 7b 24 49 9a 59 1e d3 95 a2 c4 41 1c 71 4e 5a a7 4e e9 dd 41 4a d5 a4 1c 39 69 db f0 9c 74 2b ff 00 1f 89 fb d7 0e b2 9a cf 0b ca 17 31 f8 79 1f 22 2f 0c ba f6 33 2d 3b 07 cb f7 23 e5 fc 7f 9b 79 d2 f4 ff 00 ac bc bf 9e d1 f5 4d ef 17 9f 6e 37 d3 07 bb 26 e4 fe b7 f3 f8 59 32 1f 3b fe eb a6 6e af 2b ba 77 77 5a 76 c5 01 ca f0 54 08 94 93 30 21 6d cf d8 fd a5 d5 99 0a 14 c8 15 af b4 b4 fa cd 3d 96 24 f2 99 b8 32 61 4c c9 9b b2 d5 8d Data Ascii: Zc#I''r-423}DIU>N-EFF5!!}n`v%N}G\|qwt>tYygV<Oh2{$IYAqNZNAJ9it+1y"/3-;#yMn7&Y2;n+wwZvT0!m=$2aL
2024-04-24 02:16:39 UTC	16384	IN	Data Raw: 9b bf 32 09 d7 09 b9 39 52 35 95 7c 3a 92 6e 36 a2 a3 74 62 a3 2c a1 77 73 c2 1a 1c dc 93 b5 36 7c 3b 2b 0c ef 52 be c9 8b 4f d2 ab be 2c e7 67 27 7f 1a a1 67 f3 a0 7e ca 8c 2f 7a 65 02 2d c7 cd 36 70 3f e4 26 1b fd 25 af d9 4b ca f7 42 06 f3 cf c9 f3 c3 4c c7 db 4c 78 ad 65 ad 52 42 5b 5e f9 74 f2 1b f1 9c e2 d2 b3 d2 2f 39 7a b3 ac f6 e7 08 fd 21 df dd a6 39 48 2d 2a 02 d7 63 4b 0d ab 7e 92 f1 ee 83 ac 56 55 8e 42 29 75 03 a9 22 24 0e 95 7b 13 87 6c 10 8f 12 93 e6 f4 bb 62 6a 25 47 69 af fc 22 a3 c0 d2 34 a9 ab ca 4e c3 08 9e d3 0c 70 8e af 74 5a 7e fb 61 ce 30 92 60 a8 61 f8 43 e0 93 9e 51 79 47 0e 6d 9c fa 8b 22 24 e8 fa c3 e1 13 42 81 89 2a 2e 21 5b 08 0a dd bf e3 12 71 25 27 7f 80 df ac 3b e3 94 37 d9 99 3f b0 dc 5a 67 ff 00 84 f6 ca 39 2c fe 66 c7 Data Ascii: 29R5\|:n6tb,ws6\|;+RO,g'g~/ze-6p?&%KBLLxeRB[^t/9z!9H-cK~VUB)u"${lbj%Gi"4NptZ~a0`aCQyGm"$B.![q%';7?Zg9,f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50002	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	708	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713924996219&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713924996168&coo=false&eid=1713924993436-40-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:39 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:39 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50000	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	2260	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2634 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8
2024-04-24 02:16:39 UTC	2634	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 35 31 38 38 37 61 38 65 2d 38 61 36 32 2d 34 30 62 35 2d 38 33 31 35 2d 32 32 64 62 30 62 38 33 62 36 37 35 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"51887a8e-8a62-40b5-8315-22db0b83b675","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:16:39 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:39 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:39 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:39 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50006	54.151.109.234	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	774	OUT	GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1713924987196 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:39 UTC	727	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 02:16:39 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: prod-xre-app19.sjc11 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER Access-Control-Allow-Origin: d9.flashtalking.com P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: flashtalkingad1="GUID=59582096CB411D";Comment="Flashtalking Cookie";Path=/;Domain=flashtalking.com;Expires=Sat, 24-May-2025 12:16:39 GMT;SameSite=None;Secure set-cookie: _D9J=c9e0e828d4fd42cabaee66593fb9466d; path=/; Max-Age=31536000; Expires=Thu, 24-Apr-2025 02:16:39 UTC; SameSite=None; Secure;Domain=flashtalking.com
2024-04-24 02:16:39 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50005	130.211.115.4	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	634	OUT	GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:39 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Last-Modified: Wed, 24 Apr 2024 02:16:39 UTC P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Wed, 24 Apr 2024 02:16:39 GMT Content-Length: 35 Content-Type: image/gif Connection: close
2024-04-24 02:16:39 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50004	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	2966	OUT	GET /i.gif?e=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&s=mw2wesJ-uXqJglX4A6oHxYTWMNc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924988.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.7; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA
2024-04-24 02:16:40 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:16:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50009	142.250.101.154	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:39 UTC	1045	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmQ4MjUxOGEtMDQ3NS00ZGQxLWJmZDYtYTE5MGU3OTQ1OWVi&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:40 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb&google_gid=CAESEGJeEEBqaX4DzK5Kxva6bLM&google_cver=1 Date: Wed, 24 Apr 2024 02:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:40 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50012	104.18.36.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	800	OUT	GET /rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:40 UTC	1225	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent=&C=1 CF-Ray: 879297b3cbe90ad9-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZihriNHM7OQAACEQAUBUfgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 02:16:40 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=3956; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:16:40 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=3956; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:16:40 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENRt3KNe0svPPCoXFVdsqGZU1Lm9Ay5EWcc%2F7kSaNJrSAnHGphxhINY%2FHEyceXaCWQUKIpvVIx%2F9Zrb0494jlRaGwnFtd46SltkjSuruCto6uFII1VG2fxBfwdsRGqFzIzn7qwWgj2ssrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50007	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713924996149 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:40 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:40 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50016	54.151.109.234	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	626	OUT	GET /img/img.png?D9v.CampID=3175&D9r.DeviceID=true&D9c=ftImp&D9v.CCampID=232270&D9c.placementId=8196213&D9v.gdpr=${GDPR}&D9v.gdpr_consent=${GDPR_CONSENT_78}&D9v.us_privacy=${US_PRIVACY}&cb=1713924987196 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=59582096CB411D"; _D9J=c9e0e828d4fd42cabaee66593fb9466d
2024-04-24 02:16:40 UTC	556	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: prod-xre-app12.sjc11 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER Access-Control-Allow-Origin: d9.flashtalking.com P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" set-cookie: _D9J=c9e0e828d4fd42cabaee66593fb9466d; path=/; Max-Age=31536000; Expires=Thu, 24-Apr-2025 02:16:40 UTC; SameSite=None; Secure;Domain=flashtalking.com
2024-04-24 02:16:40 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50014	34.202.201.158	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	790	OUT	GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1 Host: tracker.samplicio.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:41 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Type: image/gif Content-Length: 35 Connection: close Set-Cookie: _ftv=8609551e-5aff-4f42-bdb2-97f256b1198f; Max-Age=63072000; Expires=Fri, 24 Apr 2026 02:16:40 GMT; SameSite=None; Path=/; Domain=.samplicio.us; Secure Strict-Transport-Security: max-age=604800 X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: bd6d931a5c8b43547808bf9301e20966
2024-04-24 02:16:41 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50017	130.211.115.4	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	400	OUT	GET /img?pid=1000940&tt=g&tid=15091&l1=232270&l2=6514&l3=8196213 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:41 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Last-Modified: Wed, 24 Apr 2024 02:16:41 UTC P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Wed, 24 Apr 2024 02:16:41 GMT Content-Length: 35 Content-Type: image/gif Connection: close
2024-04-24 02:16:41 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50018	15.197.193.217	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	1038	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6d82518a-0475-4dd1-bfd6-a190e79459eb&google_gid=CAESEGJeEEBqaX4DzK5Kxva6bLM&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:16:41 UTC	552	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:40 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUgASgDMgsI9L2k3OmD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Thu, 24 Apr 2025 02:16:40 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:41 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50019	104.18.36.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	866	OUT	GET /rum?cm_dsp_id=39&external_user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expiration=1716516998&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZihriNHM7OQAACEQAUBUfgAA; CMPS=3956; CMPRO=3956
2024-04-24 02:16:41 UTC	986	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 879297b84f2c0add-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZihriNHM7OQAACEQAUBUfgAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 02:16:41 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=3956; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:16:41 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2H7bKHSB%2FY%2FTaph1C2Nx7j1vLBfSr5zlHvpxkfnCJrnDeylBLpoA8%2FPSJhpueclvJTmbAePE8aPNxNXDbgHHZRp0IPtCpEQFvD14zvqpm%2FFCZxpMJhuiQ0XTEW7GGnM8KjBL4907wAJu8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 02:16:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50015	15.197.193.217	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:40 UTC	918	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUoAzILCPS9pNzpg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:16:40 UTC	552	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:40 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:40 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI1uOhr9OD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUgASgDMgsI9L2k3OmD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Thu, 24 Apr 2025 02:16:40 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:40 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50013	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:41 UTC	1989	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924983297\|1\|1\|bat.bing.com/p/insights/c/d; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8
2024-04-24 02:16:41 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:41 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50021	99.80.201.152	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:41 UTC	2733	OUT	GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2IjoyMzQwMzQ5LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODIzNTEzMCwiY3QiOiIiLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0MDM3NDY4NCwiZGkiOiJmM2JkZjI3Y2ZkMzU0NTU1ODVkOGVmZGIxYjQxMWM0YSIsImRqIjowLCJpaSI6IjEyZGI2ODhiZjUzMDQ0Njc5ZDM0MGE0OTJmZGUzYmYxIiwiZG0iOjMsImZjIjo1MTU2Njc4MjUsImZsIjo1MDQ0NzQ2MTMsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjQwLCJvcCI6NDAsImVjIjowLCJnbSI6MCwiZXAiOm51bGwsInByIjoxNDk2ODYsInJ0IjoyLCJycyI6NTAwLCJzYSI6IjU1Iiwic2IiOiJpLTAxN2FmNmZmMWZiZWRjOTlmIiwic3AiOjEyNDQxNTIsInN0IjoxMDU1OTIyLCJ1ayI6InNwLWM0NDQzMDBmLTYwMDYtNGU4My05YzM4LTNmNDE4YjliMTExYyIsInpuIjoxOTkwNzEsInRzIjoxNzEzOTI0OTg3MTk3LCJwbiI6ImlmcmFtZSIsImdyIjp0cnVlLCJnYyI6dHJ1ZSwiZ0MiOnRydWUsImdzIjoibm9uZSIsInR6IjoiQW1lcmljYS9OZXdfWW9yayIsImJhIjoxLCJmcSI6MH0&s=mw2wesJ-uXqJglX4A6oHxYTWMNc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:16:42 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:16:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50024	34.202.201.158	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:41 UTC	607	OUT	GET /tracker/7984925b-e947-4cb7-9c2d-fe1db886c90d/pixel.gif?sid=6514&pid=8196213&crid=50126&cachebuster=1713924987196&device_id=ENTER_MOBILE_AD_ID_MACRO&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_508}&gdpr_pd=${GDPR_PD} HTTP/1.1 Host: tracker.samplicio.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ftv=8609551e-5aff-4f42-bdb2-97f256b1198f
2024-04-24 02:16:42 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:41 GMT Content-Type: image/gif Content-Length: 35 Connection: close Set-Cookie: _ftv=8609551e-5aff-4f42-bdb2-97f256b1198f; Max-Age=63072000; Expires=Fri, 24 Apr 2026 02:16:41 GMT; SameSite=None; Path=/; Domain=.samplicio.us; Secure Strict-Transport-Security: max-age=604800 X-Ratelimit-Limit: 0 X-Ratelimit-Remaining: 0 X-Ratelimit-Reset: 0 X-Tyk-Trace-Id: 35d230f402a07564031ce7e1c6bba474
2024-04-24 02:16:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50028	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:44 UTC	2358	OUT	GET /legal/ccpa HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713924998.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.8; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925899914&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:44 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10041 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:16:44 GMT ETag: "2739-Tc5ojKfI97gGQ61A2JcO+9HxZW4" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tfT0ZBzM_YA-zoX91f2ulpnTuvCO0PhAn62v67yl2s3msAwM_yAkHg==
2024-04-24 02:16:44 UTC	10041	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50030	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:45 UTC	2259	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9
2024-04-24 02:16:45 UTC	980	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 22 2c 22 70 61 67 65 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84","page":"/downloads/04c739eb07109cb2a1e7a9e50e8b62bd2024042308505
2024-04-24 02:16:45 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:45 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:45 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:45 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50031	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:45 UTC	2179	OUT	GET /_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713924993.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9
2024-04-24 02:16:45 UTC	570	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 516 Connection: close Date: Wed, 24 Apr 2024 02:16:46 GMT Last-Modified: Tue, 23 Apr 2024 23:19:11 GMT ETag: "442c1398c605b69d6cc3349439d63049" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 95026a1fefec6be0989146de8d9def62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QQqCjmi-onOvYuneMABYWO2ijJCP4rcRHVyvg-EqWjCnWl_EvP5oMQ==
2024-04-24 02:16:45 UTC	516	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 36 33 5d 2c 7b 37 39 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 32 39 30 36 36 29 7d 5d 29 7d 2c 32 39 30 36 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50032	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:45 UTC	711	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:16:45 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:16:45 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50035	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:45 UTC	3416	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:45 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:45 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775966; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 53fbe86f3600125d1772599fc7fb16c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: qRDAXPOPQR-VJWFWJw0knDvxKwaH50YYFY_lCOHVOWL_1HgpEt6IFA==
2024-04-24 02:16:45 UTC	671	IN	Data Raw: 32 39 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 32 35 33 38 37 32 33 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 Data Ascii: 298event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.171392
2024-04-24 02:16:45 UTC	603	IN	Data Raw: 32 35 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 32 35 33 38 37 32 33 38 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 Data Ascii: 254event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%
2024-04-24 02:16:45 UTC	658	IN	Data Raw: 32 38 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 34 31 31 34 30 37 30 31 38 26 66 73 74 3d 31 37 31 33 39 32 35 30 30 35 35 33 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 28bevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1411407018&fst=1713925005537&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:16:45 UTC	351	IN	Data Raw: 31 35 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4b 65 45 36 4d 38 66 72 6e 46 6a 50 55 4d 57 42 31 4c 72 6d 51 53 32 59 41 6b 6c 62 30 53 73 30 59 42 75 6e 4a 45 38 57 51 37 30 4c 4c 50 36 48 6e 30 46 4f 6e 6f 4d 31 77 7a 59 59 63 53 51 4e 55 43 35 25 32 42 64 69 57 34 46 47 4a 25 32 42 6d 59 63 36 46 72 6d 6d 76 30 6b 64 35 78 73 74 68 74 79 75 62 67 6e 75 43 34 69 70 46 65 68 49 74 53 71 6a 50 35 65 69 64 37 61 62 71 70 78 43 69 6f 55 6c 54 67 52 4e 50 45 4b 61 37 42 68 76 4b 7a 50 76 55 57 43 78 5a 39 6f 56 61 54 36 47 31 6e 47 6c 4a 69 61 72 66 4b 46 7a 34 6b 4e 69 43 4b 58 66 Data Ascii: 158event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXf
2024-04-24 02:16:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50034	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:45 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:45 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:45 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 8VY9Z53HE91EGSK8KWM7 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:45 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50036	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:46 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:47 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:46 GMT x-amzn-RequestId: 1da5839b-fe15-4247-86fc-b63ea11dcf45 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 b77b0cbd8eb4d250f56b4982e36bb5c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: 3l2m9wgLCOe8cpc31M7c5gZLgSh0cy02Wie78rF4zfBSvmu4o3h56w==
2024-04-24 02:16:47 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50040	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:46 UTC	2407	OUT	GET /_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:47 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:16:47 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 1a6e1efe30d70fc3718c47f07ff0b6f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: _ZZz12ZVQasvDA1HPXuPQAA1mpttSsX4S-79taloEvMgXEkMvbH4zw==
2024-04-24 02:16:47 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50037	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:46 UTC	1390	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:47 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16514929414173812495"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16514929414173812495","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16514929414173812495","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16514929414173812495","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16514929414173812495","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50038	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:46 UTC	1290	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:47 UTC	1144	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50039	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:46 UTC	1345	OUT	GET /pagead/viewthroughconversion/778938880/?random=1411407018&fst=1713925005537&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:47 UTC	1273	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1411407018&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqYkMyf5HV0cGCfRdcUvFvoPuWofiX-naig23WE3fEPpCFE1QL&random=4169820830 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50029	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:48 UTC	2494	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _dd_s=rum=0&expire=1713925903865&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:48 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:16:48 UTC	1518	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:16:48 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:16:48 GMT; secure Set-Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-drxr5-205009 X-Permitted-Cross-Domain-Policies: none X-Request-Id: b22afc60fe3740876e0c0d40297c5925 X-Runtime: 0.005424 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: V62Uk1NpCcAm48rZfaaye38lmOkWoYehRgsPiem4sscj4jXBNNMa_g==
2024-04-24 02:16:48 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50043	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:48 UTC	1325	OUT	GET /pagead/1p-user-list/778938880/?random=1411407018&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqYkMyf5HV0cGCfRdcUvFvoPuWofiX-naig23WE3fEPpCFE1QL&random=4169820830 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50045	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:48 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:16:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:16:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50046	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:48 UTC	2261	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:48 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:21 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FLUBcKPYfMqfWjeSG3QRQJrW9l79rGWKKOMbPEgtGJf0OGqFetMSvw== Age: 154637
2024-04-24 02:16:48 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50047	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:49 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:49 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: CVZX5FQ8CSK2CCED1HRA Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:49 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50050	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	3174	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713924969&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A44.219%2B02%3A00&epn.hit_timestamp_unix=1713925004219&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925004165-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=3&tfd=1039&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:49 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:49 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775962; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 9ce4b19720775ec7f670dd549ad5ffa6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: N6HpqYigT0wCe6VAkV2ZYY5qCCamaE0eB0Vx9yOfWhFHKzfF5_b-pA==
2024-04-24 02:16:49 UTC	671	IN	Data Raw: 32 39 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 37 37 32 35 30 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 Data Ascii: 298event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1157725051;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.171392
2024-04-24 02:16:49 UTC	603	IN	Data Raw: 32 35 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 37 37 32 35 30 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 Data Ascii: 254event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1157725051;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%
2024-04-24 02:16:49 UTC	657	IN	Data Raw: 32 38 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 39 34 33 30 30 30 30 39 38 26 66 73 74 3d 31 37 31 33 39 32 35 30 30 39 35 34 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 28aevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=943000098&fst=1713925009547&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:16:49 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 56 69 68 4f 57 74 37 65 59 30 6a 43 62 48 71 41 62 25 32 42 59 46 73 77 32 48 4c 52 25 32 42 36 4d 42 56 64 36 75 68 4f 31 45 37 77 46 32 46 4b 57 43 38 5a 32 34 52 45 25 32 46 72 33 33 4d 66 44 49 6e 36 6e 36 38 76 25 32 46 73 71 51 35 64 75 46 41 6f 76 31 68 75 4f 6f 4d 6c 71 36 4c 77 25 32 46 4a 74 34 5a 59 61 47 54 78 67 41 62 38 57 49 4e 61 42 66 48 72 6b 5a 77 72 41 59 32 63 33 58 6f 34 70 56 53 67 72 4e 38 36 73 38 76 39 6c 30 4b 6a 41 53 61 37 6e 62 72 59 4b 52 6b 43 4d 36 73 39 78 25 32 46 62 4c 4b 75 52 35 34 39 62 42 50 44 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=VihOWt7eY0jCbHqAb%2BYFsw2HLR%2B6MBVd6uhO1E7wF2FKWC8Z24RE%2Fr33MfDIn6n68v%2FsqQ5duFAov1huOoMlq6Lw%2FJt4ZYaGTxgAb8WINaBfHrkZwrAY2c3Xo4pVSgrN86s8v9l0KjASa7nbrYKRkCM6s9x%2FbLKuR549bBPD
2024-04-24 02:16:49 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50051	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	477	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:16:49 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:16:49 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50053	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	874	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=403901835.1713925004&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:49 UTC	867	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=403901835.1713925004&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50056	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	909	OUT	GET /rp.gif?ts=1713925008441&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:49 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:49 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50052	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364b sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:16:50 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:16:49 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 24 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50054	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	989	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFGAUgASgDMgsI9L2k3OmD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-24 02:16:49 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:49 GMT Content-Type: text/html Content-Length: 818 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCMKEwcrqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:16:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:49 UTC	818	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50055	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925008554 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:50 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:16:50 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50049	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	1989	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:16:50 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:50 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:50 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50059	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925004236 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:50 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:50 GMT x-amzn-RequestId: ddeed345-1c0d-4974-a599-cba3d5a8a0d0 X-Cache: Miss from cloudfront Via: 1.1 194136ce6dbff9fe3c1425c28598561c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: Gw9xZ5XpkcZij0HG4QLy2CuVUeGS57LKd_nrxS3II79EKXaBe5pu1A==
2024-04-24 02:16:50 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50058	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	1083	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1625387238;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:50 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16514929414173812495"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16514929414173812495","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16514929414173812495","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16514929414173812495","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16514929414173812495","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50060	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:49 UTC	2174	OUT	GET /_set_cookie?val=KeE6M8frnFjPUMWB1LrmQS2YAklb0Ss0YBunJE8WQ70LLP6Hn0FOnoM1wzYYcSQNUC5%2BdiW4FGJ%2BmYc6Frmmv0kd5xsthtyubgnuC4ipFehItSqjP5eid7abqpxCioUlTgRNPEKa7BhvKzPvUWCxZ9oVaT6G1nGlJiarfKFz4kNiCKXfCEbKYfbncnjtBWsm%2F9M%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
2024-04-24 02:16:50 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:16:50 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 045381a2b60538381076a2bee430ad3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: -aB7oQ_200q7pawELR8C8LWp0Z9yROLceM92mgjlFpqLxG6bRxrb_w==
2024-04-24 02:16:50 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50063	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	2119	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _dd_s=rum=0&expire=1713925903865&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:50 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:16:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-96nms-207975 X-Request-Id: 7f0c6ec3bce63b2103c9730bc7f9e257 X-Runtime: 0.001011 X-Cache: Error from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZIkh9kmytc_I1lfpKL4N7TBwICQXUmZVdt0x-kL8rmgSshFdkFnQ2w==
2024-04-24 02:16:50 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50061	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	925	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=403901835.1713925004&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:50 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50066	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	1987	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u7di5.a.1.b; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
2024-04-24 02:16:50 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:21 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UE9e7lEI5Ku9c1T9ZrWeEZ8xtGekzovmtVPEdkcRrGpgXb0EpvrHFg== Age: 154639
2024-04-24 02:16:50 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50065	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	1091	OUT	GET /pagead/1p-user-list/778938880/?random=1411407018&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqYkMyf5HV0cGCfRdcUvFvoPuWofiX-naig23WE3fEPpCFE1QL&random=4169820830 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:50 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50068	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925009242&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:50 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 6855508730557069 Date: Wed, 24 Apr 2024 02:16:50 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:50 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50069	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925009243&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:50 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3485615258446919 Date: Wed, 24 Apr 2024 02:16:50 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:50 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50070	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	1603	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925009244 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:50 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:50 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 2648377706138211 Date: Wed, 24 Apr 2024 02:16:50 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:50 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50071	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	675	OUT	GET /rp.gif?ts=1713925008441&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:50 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:50 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50072	35.212.133.238	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	847	OUT	GET /syncd?dsp_id=93&user_group=1&user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:51 UTC	898	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 02:16:50 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=93&user_group=1&user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch Set-Cookie: tuuid=0d725c7f-fbca-4c5f-b725-91b022abbd77; path=/; expires=Thu, 24-Apr-2025 02:16:50 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713925010; path=/; expires=Thu, 24-Apr-2025 02:16:50 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713925010; path=/; expires=Thu, 24-Apr-2025 02:16:50 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713925010; path=/; expires=Thu, 24-Apr-2025 02:16:50 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50073	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:50 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925008554 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:50 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 39 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"9","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:16:51 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:51 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:16:51 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:51 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50077	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	2563	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8cni.a.2.c
2024-04-24 02:16:51 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 33 35 34 33 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":3543.100000000006,"tags":{"rating":"poor","page_group":"/legal","country":"US"}}
2024-04-24 02:16:51 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Wed, 24 Apr 2024 02:16:51 GMT ETag: "37-oNOxf2pem8q6yeWQXpaQeYbghEQ" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5o6nbzoj4EclTma3xIWy3etoFFwqAw3WUcuFyROJ-MgBlg85cGa-LQ==
2024-04-24 02:16:51 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 33 35 34 33 2e 31 30 30 30 30 30 30 30 30 30 30 36 7d Data Ascii: {"status":"ok","metric":"FCP","time":3543.100000000006}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50076	151.101.130.132	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:51 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5880 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286b72-44f9c8e566265f9475c34046 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:51 GMT Age: 33 X-Served-By: cache-lax-kwhp1940051-LAX X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713925011.413731,VS0,VE1 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:16:51 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:16:51 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-24 02:16:51 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-24 02:16:51 UTC	1378	IN	Data Raw: 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 73 75 72 66 61 63 65 2d 61 63 74 69 6f 6e 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 Data Ascii: key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"experimentKey":"exp-1"},"value":"new-transfer-details"},"transfer-details-surface-actions":{"key":"on","value":"on"},"tra
2024-04-24 02:16:51 UTC	368	IN	Data Raw: 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 34 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 74 72 61 63 6b 69 6e Data Ascii: bled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspace-settings-iteration-4":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-trackin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50078	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	2563	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925004.0.0.1838502804; _ga=GA1.1.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8cni.a.2.c
2024-04-24 02:16:51 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 38 34 30 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":840,"tags":{"rating":"needs-improvement","page_group":"/legal","country":"US"}}
2024-04-24 02:16:51 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 42 Connection: close Date: Wed, 24 Apr 2024 02:16:51 GMT ETag: "2a-Gbtcfoap+2gye0TjELB1/gn6yN8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vR-QRpavC68yx8LLXYKUmO9rfmTk4gAldpIHKwygz2R3ud8lyjR02A==
2024-04-24 02:16:51 UTC	42	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 38 34 30 7d Data Ascii: {"status":"ok","metric":"TTFB","time":840}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50080	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	1635	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925010302&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:51 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:51 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="; Expires=Thu, 24 Apr 2025 02:16:51 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1447613221765344 Date: Wed, 24 Apr 2024 02:16:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50074	54.200.174.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:51 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 31 61 39 65 31 36 30 36 65 61 30 38 36 62 32 61 61 32 30 39 63 32 31 61 34 66 32 31 36 38 30 34 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 31 30 31 36 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 32 Data Ascii: checksum=1a9e1606ea086b2aa209c21a4f216804&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925010162%2C%22event_id%22%3A2%2C%22session_id%22%3A1713924976188%2C%22
2024-04-24 02:16:51 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b93-4acc89150d69aa4d35bdb893 Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:51 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50079	104.36.113.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	896	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=6d82518a-0475-4dd1-bfd6-a190e79459eb&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:51 UTC	798	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 02:16:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_377=6810-6d82518a-0475-4dd1-bfd6-a190e79459eb&KRTB&22918-6d82518a-0475-4dd1-bfd6-a190e79459eb&KRTB&22926-6d82518a-0475-4dd1-bfd6-a190e79459eb&KRTB&23031-6d82518a-0475-4dd1-bfd6-a190e79459eb; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 23-Jul-2024 02:16:51 GMT; path=/ Set-Cookie: PugT=1713925011; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 24-May-2024 02:16:51 GMT; path=/ Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-24 02:16:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50083	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	1401	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925009244 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:52 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:51 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 2605302803776817 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50084	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925009242&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1081966431186780 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50085	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925009243&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZkM29PdmRBb3lOVVFETnZ6QWs4N1FYanpjc3hyV2pZVjVGRGU4VnZNZlpHOEY0Z0RaK05jNUZPblJHd29JMzhSSnFRWFNTTG1UZnd2UEtMVlBDeUVWTmI0SDFjbVZrUHBPbnpIOW9pYzBFOD0mUzBkb3lqVGd5eGZ1RmQwZEY5U09RK3o1dDdjPQ=="
2024-04-24 02:16:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1309662474249560 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50081	35.212.133.238	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	940	OUT	GET /ul_cb/syncd?dsp_id=93&user_group=1&user_id=6d82518a-0475-4dd1-bfd6-a190e79459eb&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=0d725c7f-fbca-4c5f-b725-91b022abbd77; c=1713925010; tuuid_lu=1713925010
2024-04-24 02:16:51 UTC	523	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 02:16:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch Set-Cookie: tuuid=0d725c7f-fbca-4c5f-b725-91b022abbd77; path=/; expires=Thu, 24-Apr-2025 02:16:51 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713925011; path=/; expires=Thu, 24-Apr-2025 02:16:51 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50082	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:51 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:16:52 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 02:16:52 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 43 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50087	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50088	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	1018	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:52 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:52 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:16:52 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:16:52 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50092	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	3462	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925004.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.9; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dg1.g.2.i; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804
2024-04-24 02:16:52 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:52 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775960; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 1a6e1efe30d70fc3718c47f07ff0b6f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: njExh-7ZVdgdNWSnTJScJ-kkm2b9oxhnuCF8JixCIWtgv5LOfk5dyg==
2024-04-24 02:16:52 UTC	670	IN	Data Raw: 32 39 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 39 31 32 34 36 30 31 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 Data Ascii: 297event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924
2024-04-24 02:16:52 UTC	602	IN	Data Raw: 32 35 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 39 31 32 34 36 30 31 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 Data Ascii: 253event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2
2024-04-24 02:16:52 UTC	657	IN	Data Raw: 32 38 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 37 31 35 34 35 35 33 31 37 26 66 73 74 3d 31 37 31 33 39 32 35 30 31 32 34 31 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 28aevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=715455317&fst=1713925012418&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:16:52 UTC	365	IN	Data Raw: 31 36 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 49 25 32 42 74 5a 57 71 6a 30 48 74 65 64 51 59 25 32 42 38 30 77 47 43 36 55 5a 49 6a 30 51 70 49 67 5a 37 63 30 75 57 51 6c 70 50 42 73 49 4e 78 77 73 67 32 67 75 61 58 47 30 72 30 67 72 53 75 7a 78 67 25 32 46 70 34 6f 74 61 78 58 72 44 73 76 4e 49 57 63 78 71 65 61 51 30 59 35 35 7a 79 77 4a 7a 6a 67 37 50 25 32 42 39 72 7a 6b 49 61 38 67 5a 63 66 39 53 72 25 32 46 71 30 33 25 32 46 36 58 4a 5a 68 32 42 25 32 42 51 25 32 42 31 73 78 35 6b 6f 66 62 69 68 74 50 56 34 75 6c 44 38 55 58 25 32 46 45 54 62 57 47 76 67 63 4c 7a 45 31 38 Data Ascii: 166event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=I%2BtZWqj0HtedQY%2B80wGC6UZIj0QpIgZ7c0uWQlpPBsINxwsg2guaXG0r0grSuzxg%2Fp4otaxXrDsvNIWcxqeaQ0Y55zywJzjg7P%2B9rzkIa8gZcf9Sr%2Fq03%2F6XJZh2B%2BQ%2B1sx5kofbihtPV4ulD8UX%2FETbWGvgcLzE18
2024-04-24 02:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50090	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	967	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011136&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
2024-04-24 02:16:52 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 9369132385209545 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50091	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:52 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: YRQYS0VB7JCSJ4GRBJAB Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:52 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50097	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	1640	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011315&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
2024-04-24 02:16:52 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ1QWQyTzRjYWZVN2k4SDdXdTVlcmEza2lUN3h1aE9jeC9lSlMyaEtTU3dzdnhEN093eCtMK0FKOGsySFRXY1NlSDM5QmFqUVBWUkM3MUtnUlJoRlRPSElmZWZEb3o1Nm56cnV2TkFMMWpjUT0mZG5zZERvUHhZUFQyNjhHUlNlY080SE03TU5BPQ=="; Expires=Thu, 24 Apr 2025 02:16:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1672442585839090 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50089	15.197.193.217	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	998	OUT	GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCMKEwcrqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:16:52 UTC	620	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUgASgDMgsIwoTByuqD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Thu, 24 Apr 2025 02:16:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:52 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50099	151.101.66.132	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-66286b94-39174daa46c8a41209b5926c X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:52 GMT X-Served-By: cache-lax-kwhp1940099-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925013.549320,VS0,VE31 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:16:52 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50102	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	1433	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925010302&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
2024-04-24 02:16:52 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZxdnl6Ulk3dmc2blgzTG9OelVGdjVlT3VHM21RWW56WWNaMUcvMWtOVkNKUmEzeG8ybml1K0Q5TjkxMnVWWGo0YyswYmZVblBBSjRhbWNmZWJMWndhekphZ1ZRN3ByUzNrSHMxOUNJV1hXZz0mZEJDWEsyL2JJWWhCclVZK1JUZTcxRE5ob2R3PQ=="; Expires=Thu, 24 Apr 2025 02:16:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1596970151803930 Date: Wed, 24 Apr 2024 02:16:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50101	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	2124	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:52 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:52 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: idohZc3UHwIyNH8M5bU8UNOzMN_-NUf-Y9JNSXDHpPdV5tLAQ1fNHg==
2024-04-24 02:16:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50095	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:52 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 628Z52J5TAVBTMGNXW2A Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50103	44.224.18.40	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b94-20aa974975bba05f38a3c4b4 Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:52 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50094	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	2261	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1977 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8do9.j.2.l; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.10
2024-04-24 02:16:52 UTC	1977	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-24 02:16:53 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:52 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:53 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50096	54.200.174.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 30 33 64 66 62 65 62 36 39 62 64 39 38 63 64 66 32 39 39 39 37 39 64 34 38 35 35 32 63 35 35 64 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 31 30 39 31 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 Data Ascii: checksum=03dfbeb69bd98cdf299979d48552c55d&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925010913%2C%22event_id%22%3A11%2C%22session_id%22%3A1713924976188%2C%2
2024-04-24 02:16:52 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b94-3324de0b4e5790de6f2a71cb Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:52 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50098	15.197.193.217	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	999	OUT	GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCMKEwcrqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50086	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925011145 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:52 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:16:52 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50104	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:53 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=4, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50105	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925010314&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-39-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:53 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:53 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50106	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	765	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011136&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY4cHh4UnYzMnZ3YnU5a0wyd21rSXI2dzNGOEswZG44UkdaVWhpdENra3lWNytkQXlZS0J4TkJ4SGNyMG9LM1J5SGlzZDJ2UFhkcVgvNEJuZ0tOQ1p3cjE5RTA4Q0lCTjhCM0FRS0RnSi9VRT0mUHB4THE4YzNZcUg2T0ViRkZPYmtVVWlicm13PQ=="
2024-04-24 02:16:53 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 9287798854776364 Date: Wed, 24 Apr 2024 02:16:53 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:16:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50100	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925008554 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:53 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:53 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50108	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	1438	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925011315&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ1QWQyTzRjYWZVN2k4SDdXdTVlcmEza2lUN3h1aE9jeC9lSlMyaEtTU3dzdnhEN093eCtMK0FKOGsySFRXY1NlSDM5QmFqUVBWUkM3MUtnUlJoRlRPSElmZWZEb3o1Nm56cnV2TkFMMWpjUT0mZG5zZERvUHhZUFQyNjhHUlNlY080SE03TU5BPQ=="
2024-04-24 02:16:53 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:16:53 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="; Expires=Thu, 24 Apr 2025 02:16:53 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3912939770875162 Date: Wed, 24 Apr 2024 02:16:53 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:16:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50109	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	3203	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925004165&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=403901835.1713925004&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925004165&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A16%3A51.128%2B02%3A00&epn.hit_timestamp_unix=1713925011128&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925004165-62-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925004165-62-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=6857&tfd=7899&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
2024-04-24 02:16:53 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:16:53 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775959; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0391390c8a406ba1a7bd713ed630aaa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: gcVacmYqqlW6biLNk5_rf7hO2MIFg2e85yDewhG6sd5I1WmrhehDcA==
2024-04-24 02:16:53 UTC	670	IN	Data Raw: 32 39 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 39 37 36 34 32 31 39 34 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 Data Ascii: 297event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=976421943;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924
2024-04-24 02:16:53 UTC	602	IN	Data Raw: 32 35 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 39 37 36 34 32 31 39 34 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 Data Ascii: 253event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=976421943;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2
2024-04-24 02:16:53 UTC	657	IN	Data Raw: 32 38 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 31 31 31 32 35 32 31 38 26 66 73 74 3d 31 37 31 33 39 32 35 30 31 33 33 30 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 28aevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=211125218&fst=1713925013302&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:16:53 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 61 55 72 65 50 31 4b 68 65 35 34 37 71 5a 6b 79 68 69 57 5a 33 37 76 38 51 35 36 25 32 42 7a 74 4d 56 68 56 76 4e 38 72 65 76 56 69 46 75 49 52 33 6c 31 45 4e 73 61 43 45 56 76 42 72 6c 34 41 78 50 6d 62 59 6c 73 50 58 32 43 4f 66 49 56 6c 6f 69 47 25 32 42 6a 5a 37 54 6e 41 53 33 42 6a 6a 57 44 50 7a 34 4f 68 70 6b 6d 68 6c 76 76 78 59 7a 66 64 41 31 51 39 4c 54 62 59 33 45 46 37 33 7a 75 6a 46 47 53 73 45 4d 63 57 4a 77 4c 51 7a 30 42 6f 59 74 68 39 41 44 25 32 42 44 67 66 50 78 4f 52 25 32 42 6c 70 6f 71 5a 47 6d 75 4d 31 37 73 64 Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=aUreP1Khe547qZkyhiWZ37v8Q56%2BztMVhVvN8revViFuIR3l1ENsaCEVvBrl4AxPmbYlsPX2COfIVloiG%2BjZ7TnAS3BjjWDPz4OhpkmhlvvxYzfdA1Q9LTbY3EF73zujFGSsEMcWJwLQz0BoYth9AD%2BDgfPxOR%2BlpoqZGmuM17sd
2024-04-24 02:16:59 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:16:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50110	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:52 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:53 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:53 GMT x-amzn-RequestId: a27da0b5-65b7-4aca-8003-691d511d3773 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 1805917bae7975c146a05a871d8d67fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: NfZIa4IJcgyhrSU251Po13rm9_Qw654Bwg3bX20aOCs5XHgBPpdUpw==
2024-04-24 02:16:53 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50107	3.218.116.188	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:53 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50111	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:53 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 8J8FHABYWRBXTDGRFN7C Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:53 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50113	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	2124	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:16:53 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:53 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DYQsDxUYUnVlkguV0DVaZRV_LqQsyaeh1mvZQa8fcLEIED6Fejgz5Q==
2024-04-24 02:16:53 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50115	44.224.18.40	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:53 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286b95-0505811b318766ea68364319 Strict-Transport-Security: max-age=15768000
2024-04-24 02:16:53 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50114	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:16:53 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WNPR4BQFH6W4Z5M8D5E8 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:16:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:16:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:16:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50112	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	1057	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUgASgDMgsIwoTByuqD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-24 02:16:53 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:53 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:16:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCOjjzOzqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:16:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:16:53 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50116	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925011145 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:53 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 39 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"9","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:16:54 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:54 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:16:54 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:54 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50119	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925011146 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:16:53 GMT x-amzn-RequestId: 85214322-ba09-4442-8c07-6e3ebe61e04b X-Cache: Miss from cloudfront Via: 1.1 202a531bf43fbb0571a227d5ba4e11ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: ZcSYVBCOXTCIgwUejaPoM3LJV4J1AIiY1nz12TEn-5fkny0mqHDCvg==
2024-04-24 02:16:54 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50121	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=6, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50123	18.154.206.35	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	701	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6c07a28ff53ed915f74a27fe90616d61" If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
2024-04-24 02:16:54 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:16:54 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 360ac648682c5b4ae3b84565b3d9c7b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: JrT9E5b7fYg895-5FP-ICLj9VTxJWvPsUUOI4ZGVqySaap6vCawtHg== Age: 82931

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50122	44.195.207.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:16:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0acb4b569691c6125 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:16:54 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50118	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	1990	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
2024-04-24 02:16:54 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:54 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50117	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:53 UTC	2261	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 5289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
2024-04-24 02:16:53 UTC	5289	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 65 69 64 22 3a 22 61 62 30 31 34 37 32 34 2d 66 32 32 39 2d 34 34 63 61 2d 61 33 63 32 2d 64 39 35 61 35 66 36 31 64 32 31 34 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/legal/ccpa","page":"/","eid":"ab014724-f229-44ca-a3c2-d95a5f61d214","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","
2024-04-24 02:16:54 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:54 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:54 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:54 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50124	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:16:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50125	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	1023	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:54 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:54 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:16:54 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:16:54 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50126	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	909	OUT	GET /rp.gif?ts=1713925011127&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:54 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:54 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50128	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	1389	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:54 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4748617723040519892"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4748617723040519892","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"4748617723040519892","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"4748617723040519892","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"4748617723040519892","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50129	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	1289	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:54 UTC	1143	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50130	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:54 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:55 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:16:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50131	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925011145 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:16:55 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:16:55 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:16:55 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50137	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925011121&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925008524&coo=false&eid=1713925004165-62-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:55 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:16:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:16:55 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50138	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	675	OUT	GET /rp.gif?ts=1713925011127&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:55 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:16:55 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50135	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	1344	OUT	GET /pagead/viewthroughconversion/778938880/?random=715455317&fst=1713925012418&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:55 UTC	1271	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=715455317&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzusMGF2kOX3tdduBk-PacOpDNunYE2SYM4put-XPREE8-7Yo&random=803413425 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50140	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	1082	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=491246010;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:16:55 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4748617723040519892"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4748617723040519892","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"4748617723040519892","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"4748617723040519892","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"4748617723040519892","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:16:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50141	142.250.101.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:55 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:16:55 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:16:55 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50134	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	1990	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
2024-04-24 02:16:56 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:16:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:16:55 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:16:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50142	13.33.21.8	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:55 UTC	2422	OUT	GET /_set_cookie?val=I%2BtZWqj0HtedQY%2B80wGC6UZIj0QpIgZ7c0uWQlpPBsINxwsg2guaXG0r0grSuzxg%2Fp4otaxXrDsvNIWcxqeaQ0Y55zywJzjg7P%2B9rzkIa8gZcf9Sr%2Fq03%2F6XJZh2B%2BQ%2B1sx5kofbihtPV4ulD8UX%2FETbWGvgcLzE18AGsJBV0REHoausVnWgpg49sHPy83z%2FL2s%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713924999692\|2\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m
2024-04-24 02:16:56 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:16:55 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 dfcab4e7aac7e17a0524fce2d56dd444.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: kfAAxAtIdBKXVmhR9nn_VMcPkfsWMToYLgvVQOB1pbXuLQEPRW3h9A==
2024-04-24 02:16:56 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50144	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:56 UTC	2221	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:16:56 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:16:57 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:56 GMT ETag: W/"3cc8-jLM+S9x5ekUW4GZdSnEBpL8Rv68" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15560 Connection: Close
2024-04-24 02:16:57 UTC	15560	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 32 33 35 31 35 31 38 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 37 30 37 36 34 39 32 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 31 30 39 38 31 34 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 38 38 32 32 33 34 32 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 34 4f 44 49 79 4d Data Ascii: {"creatives":[{"adId":522351518,"creativeId":347076492,"flightId":511098143,"campaignId":308822342,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA4ODIyM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50145	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:56 UTC	1323	OUT	GET /pagead/1p-user-list/778938880/?random=715455317&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzusMGF2kOX3tdduBk-PacOpDNunYE2SYM4put-XPREE8-7Yo&random=803413425 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50147	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:56 UTC	1089	OUT	GET /pagead/1p-user-list/778938880/?random=715455317&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqzusMGF2kOX3tdduBk-PacOpDNunYE2SYM4put-XPREE8-7Yo&random=803413425 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:16:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:16:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50149	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:57 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925903851
2024-04-24 02:16:57 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 137f3de8f493458c81ba383297ffa212.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: phIKtCN9Vpq96NtZuatPCiR_WB7ngr0QLVjuCV_5ueKYMpW44J7ZfQ== Age: 71185
2024-04-24 02:16:57 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50150	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:57 UTC	639	OUT	GET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:57 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28644 Connection: close Date: Thu, 02 Nov 2023 10:14:24 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 02 Nov 2023 09:51:45 GMT ETag: "fbe81375a88b68a2a2d7ffc63e6a0d8d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 95026a1fefec6be0989146de8d9def62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: METB9-I1dCYUVYnL0lb58l2oj4ueqsH6GYdmWFWPH85pEIP1mBKX6w== Age: 15004954
2024-04-24 02:16:57 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f e4 00 12 00 00 00 01 16 3c 00 00 6f 79 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 3a 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 54 81 f7 5f 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 84 4a 1b e5 fc 37 64 6e 4e 78 27 28 a8 9d 80 aa c8 ea f6 62 69 c0 1d 86 8d 03 06 f3 3e 65 64 20 8f 03 28 f5 ff 95 fd ff ff 27 26 13 39 2c 77 b5 4b d2 16 0a e3 7f 9b 89 c9 04 2e 73 90 4b 11 90 e9 b5 39 b4 ae 98 13 9a a8 50 26 ba cc 6b b0 d5 fa bc a5 75 6f 30 76 c8 40 87 d5 0f 38 21 62 5b 57 bb 54 2b ce 20 22 78 c3 10 de e5 83 6a c2 99 af d8 41 a9 d3 4e 8c c7 c4 ce 9d f5 7d f2 c3 fe 4a 9b 89 c9 f4 2a ff 5b 9a 3a 64 b0 4d c5 9f 74 3a 44 87 42 d0 f1 d3 76 Data Ascii: wOF2o<oy?FFTM4:p`nrWT_&6$H \~J7dnNx'(bi>ed ('&9,wK.sK9P&kuo0v@8!b[WT+ "xjAN}J*[:dMt:DBv
2024-04-24 02:16:57 UTC	13013	IN	Data Raw: 00 db aa 38 a2 f3 f4 78 2b 00 22 35 2b 2b 54 de a2 c7 b9 d8 84 15 ef eb d2 fa 01 08 8c dc fe fc ba 97 9b 82 3b 38 7c 1c b5 63 8f 37 bb a4 9c d0 6a 9e 40 03 f6 69 13 fc 25 0f 75 a8 cc b9 12 5f 8a b4 fe ca b7 7c 09 1c 9f fb ca 10 c6 a7 57 9b c2 b5 76 3c e0 eb 74 40 85 5e dc 0a 06 0f 23 ff f2 13 3a e6 f5 2a 84 eb 0f 3c 7d 0d 87 dd 96 a6 de ad 1e a7 4e 7f f8 d3 52 f3 52 1b 2c e0 9c 40 18 9d 56 5b 12 18 d6 3a 18 2b 26 b8 77 69 b6 0f 90 c7 15 2b a0 fb 2a fa 13 91 61 c7 41 ee b4 d8 2c 97 15 de ba aa 9a 01 83 c1 a0 81 dc d7 77 6a 98 14 7d e7 25 7e 97 52 f9 b8 63 75 8d c1 65 70 d5 76 ae 86 fd 60 eb 5c 53 6b 70 1b dc 35 1d 6b 60 87 ae 55 64 54 40 ee 3f 60 db b1 18 3b db 65 b4 1a 54 1a 93 d1 00 7f b2 19 33 be 2e 42 29 a3 19 0b 31 98 ae 4c 41 5e de 7d 2c e8 ab 79 28 Data Ascii: 8x+"5++T;8\|c7j@i%u_\|Wv<t@^#:<}NRR,@V[:+&wi+aA,wj}%~Rcuepv`\Skp5k`UdT@?`;eT3.B)1LA^},y(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50151	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:57 UTC	1966	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:16:58 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:16:58 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:16:58 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50154	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:58 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958466089 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925903851 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-24 02:16:58 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:16:58 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 bef4627c5294d3bd6467e354e4e691a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: DhnL3V5Y0c5zzizzXVEbizmIkehtBnvOJvfY4Oz6jl75-IBZXPhRuw== Age: 62215

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	49985	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:58 UTC	813	OUT	GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:16:59 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Tue, 02 Apr 2024 13:17:08 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:59 GMT ETag: "30c957b2c050cf2dac22397319575088" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: XMJjMcOimN0EV6ZkwI0JLeCX6l4ES7a-kofWLTz0ApHPSr3Q-9kDGw==
2024-04-24 02:16:59 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50155	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:16:59 UTC	730	OUT	GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/bundle.9638fa09932eaaab7d22.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:00 UTC	521	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 45424 Connection: close Last-Modified: Tue, 02 Apr 2024 13:17:07 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:01 GMT ETag: "7f8ebe66854a795162aa69c7b44f595e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Dg74h86g_9bufTPAanciQ1GDkk_QzTFdi_N0Se73DDG1F43nzteL4w==
2024-04-24 02:17:00 UTC	15863	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 35 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 38 33 38 39 29 2c 6f 3d 72 28 34 39 38 33 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 69 28 6f 28 74 29 2b 22 20 69 73 20 6e Data Ascii: !function(){var t,e,r={4339:function(t){t.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},5514:function(t,e,r){"use strict";var n=r(8389),o=r(4983),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is n
2024-04-24 02:17:00 UTC	16384	IN	Data Raw: 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 32 33 37 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 32 37 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 7c 7c 74 21 3d 74 26 26 65 21 3d 65 7d 7d 2c 36 38 33 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 38 37 Data Ascii: ion(t,e,r){"use strict";var n=r(3237),o=TypeError;t.exports=function(t){if(n(t))throw new o("Can't call method on "+t);return t}},2741:function(t){"use strict";t.exports=function(t,e){return t===e\|\|t!=t&&e!=e}},6838:function(t,e,r){"use strict";var n=r(87
2024-04-24 02:17:00 UTC	13177	IN	Data Raw: 74 73 69 64 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 68 7d 29 28 29 2e 24 24 2e 6f 6e 5f 6d 6f 75 6e 74 2e 70 75 73 68 28 74 29 7d 6e 65 77 20 4d 61 70 3b 63 6f 6e 73 74 20 43 3d 5b 5d 2c 54 3d 5b 5d 3b 6c 65 74 20 5f 3d 5b 5d 3b 63 6f 6e 73 74 20 4d 3d 5b 5d 2c 4e 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 6c 65 74 20 50 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 5f 2e 70 75 73 68 28 74 29 7d 63 6f 6e 73 74 20 49 3d 6e 65 77 20 53 65 74 3b 6c 65 74 20 44 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 41 28 29 7b 69 66 28 30 21 3d 3d 44 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 68 3b 64 6f 7b 74 72 79 7b 66 6f 72 28 3b 44 3c 43 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 Data Ascii: tside component initialization");return h})().$$.on_mount.push(t)}new Map;const C=[],T=[];let _=[];const M=[],N=Promise.resolve();let P=!1;function F(t){_.push(t)}const I=new Set;let D=0;function A(){if(0!==D)return;const t=h;do{try{for(;D<C.length;){cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50156	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:00 UTC	2221	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:17:00 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:17:00 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:00 GMT ETag: W/"3e67-61iHkpMGlwoOvoBYLDAZmZCk3a0" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15975 Connection: Close
2024-04-24 02:17:00 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 33 33 30 35 36 34 39 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 38 30 33 33 37 31 33 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 32 30 33 35 32 38 36 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 39 37 35 35 30 33 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 35 4e 7a 55 31 4d Data Ascii: {"creatives":[{"adId":523305649,"creativeId":348033713,"flightId":512035286,"campaignId":309755030,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA5NzU1M
2024-04-24 02:17:01 UTC	12226	IN	Data Raw: 45 32 4f 44 6b 32 4e 7a 49 32 4d 57 59 30 4e 7a 4d 35 4f 44 41 31 4f 47 45 30 5a 57 4d 79 4e 44 51 7a 4f 47 45 7a 4e 69 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 56 68 59 6d 51 33 59 32 59 31 59 6a 41 35 4d 7a 51 35 4e 54 4d 35 5a 6a 55 79 4e 57 59 78 4d 6a 4d 79 4d 47 59 79 4e 7a 56 68 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 6a 4d 7a 4d 44 55 32 4e 44 6b 73 49 6d 5a 73 49 6a 6f 31 4d 54 49 77 4d 7a 55 79 4f 44 59 73 49 6d 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 49 6a 6f 78 4d 44 49 79 4d 43 77 69 63 47 4d 69 4f 6a 41 73 49 6d 39 77 49 6a 6f 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 78 73 4c 43 4a 77 63 69 49 36 4d Data Ascii: E2ODk2NzI2MWY0NzM5ODA1OGE0ZWMyNDQzOGEzNiIsImRqIjowLCJpaSI6IjVhYmQ3Y2Y1YjA5MzQ5NTM5ZjUyNWYxMjMyMGYyNzVhIiwiZG0iOjMsImZjIjo1MjMzMDU2NDksImZsIjo1MTIwMzUyODYsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50157	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:00 UTC	788	OUT	GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/img.4a0e5e5c765b8d6d522b.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:01 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 455428 Connection: close Last-Modified: Tue, 02 Apr 2024 13:17:08 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:02 GMT ETag: "eabae1ca657263a5a1cb6942d4d3fb21" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: G_YZP2hz0C1l-w_aLdwzvvjB1GEzEUiKb2v7Xy1OJP7A3hVCKMYkPg==
2024-04-24 02:17:01 UTC	15867	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 06 40 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f9 f3 81 39 68 68 24 a9 4d 17 00 a9 22 90 d0 c4 34 e6 a5 a0 62 6d 00 00 86 e4 01 c5 04 d0 4a 61 41 29 81 53 6a 40 2a 40 a9 a2 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|@"9hh$M"4bmJaA)Sj@*@
2024-04-24 02:17:01 UTC	16384	IN	Data Raw: dd 34 fb 9b 9b 9b 8a be 7b 21 43 8a 9b 4d c9 35 22 08 40 c2 58 d2 19 17 15 25 12 26 26 87 44 d0 00 c0 53 53 44 d4 a7 52 54 03 2a 6a 06 50 34 00 c4 da 1a 1a 68 b9 a9 28 c7 87 4f 26 3d 8d 2d b8 8e b9 bf 97 d0 f0 b5 33 60 e8 cf 77 43 77 9b d5 c9 e5 65 7d 13 4b a3 d0 c5 b9 cc cb 9f 6b d0 f9 7f 8e 7b fe e6 f6 7c 6b 43 85 ab b5 c8 d9 e5 3f 69 d0 fa 17 27 3e ff 00 97 f5 5e 47 9d ee 96 6c ef 97 ad 3a 1a 1e 0b 8f bb a9 a7 e8 fe 89 e5 7e 4d e1 b0 6a cc b4 64 32 04 29 4d 5c 45 6c e5 d8 e7 e8 cd 03 81 3d b6 2b 94 ea 68 26 fa 91 9b 5f 2e fe 4d 15 75 7e a7 a7 b3 9f af c5 e3 e9 cf 3f 1f ae e3 e3 cd b1 8f 01 b0 73 fc bf a5 dc c5 d3 c7 c8 dc e9 f1 76 fa 3c 3e 8f 7f 6b 27 47 b1 e9 ff 00 3f e4 9a 69 a0 27 20 9c 8d e2 1c c3 a8 65 48 86 20 01 04 80 15 22 61 71 43 40 c6 90 4d Data Ascii: 4{!CM5"@X%&&DSSDRT*jP4h(O&=-3`wCwe}Kk{\|kC?i'>^Gl:~Mjd2)M\El=+h&_.Mu~?sv<>k'G?i' eH "aqC@M
2024-04-24 02:17:01 UTC	12494	IN	Data Raw: fc e6 ae aa e8 f5 3a da 3c ed 4e 1f 7f f4 46 bf 33 73 79 fb 3c 78 b0 7c 77 e5 b3 ab a3 bd b3 18 7d 37 d8 bd 96 0f 99 7b 1f 61 a9 e5 7e 73 f1 0d 2f 4d ce f5 97 0e 71 e1 f2 7b 79 79 5e 92 36 e3 4f cc e1 c7 b1 ef f9 fc af 3f 33 ed 3a 5e 7f cf a7 39 6e 2f 0f b0 5e 5f 27 a5 fa 04 e6 c3 ea 7e f5 f2 8f 92 f1 79 f1 b1 c7 ec eb eb 6f e6 c5 9f 04 79 dd 8e af 20 e9 f4 f9 fc 1d 5f 5b d3 e1 e4 c1 b1 d4 f9 c1 d2 f6 af 9b 59 ba 3a fa 53 bd bd d3 c9 e7 b9 f9 76 70 ee 4f 42 b6 5e 78 c7 59 70 62 5a 75 ab 19 08 9c 78 e7 26 43 5f ca f9 be 7c 99 0b 00 30 5a 9a cc 9d 13 52 2c 55 8f 34 62 d8 9c 94 da 54 13 83 eb 37 b3 ce ef f2 f0 d3 36 32 e6 f9 ef d4 fc e7 73 6f 29 ed fe 83 3f 21 f8 d3 b4 4e 3d 7d aa 9c 86 38 58 35 da e6 76 b5 23 ad b3 78 3d 5f 27 8f b1 3f 51 f6 7d 8d ad 7e 37 Data Ascii: :<NF3sy<x\|w}7{a~s/Mq{yy^6O?3:^9n/^_'~yoy _[Y:SvpOB^xYpbZux&C_\|0ZR,U4bT762so)?!N=}8X5v#x=_'?Q}~7
2024-04-24 02:17:01 UTC	16384	IN	Data Raw: 73 98 c0 04 d4 80 00 c6 00 95 12 2a 40 0a 00 00 06 b0 6e 8c d0 00 51 a1 7a 03 70 1a 50 9a 6e 8b 60 bf 1e c0 18 02 40 00 33 64 02 55 35 2a 9a 91 52 0a 00 00 01 b8 37 40 00 0a 34 2a 80 00 d5 02 76 c5 a1 4a f2 90 0c 02 40 06 68 66 00 4d 48 02 a4 02 93 53 40 00 6e 0a 66 35 a0 00 14 68 56 b4 06 e3 45 04 af 73 5d 66 0a df 3b 20 60 09 00 31 94 24 00 95 48 00 00 0a 00 00 1a c0 dd 00 19 94 a3 42 f3 74 00 69 41 2d b1 7b cc ad f2 6c 86 01 98 03 1b 8c a9 6e 01 25 12 a9 00 00 02 84 d0 00 03 71 ba 63 4c 6e 1a 50 34 bc a0 01 b4 00 dd 75 98 1d 3c 40 60 19 80 66 6b 0d c0 04 85 66 00 00 00 28 00 00 03 72 b3 1a 0c 6e 94 1a 17 a1 3b a0 da 00 dd 5c 07 4f 10 cd c0 12 02 77 00 00 92 a6 a4 15 20 00 01 40 00 00 1b 9a 66 e6 ee 60 52 83 42 a9 9a c3 43 68 1a d1 d2 64 aa f1 18 00 48 Data Ascii: s@nQzpPn`@3dU5R7@4*vJ@hfMHS@nf5hVEs]f; `1$HBtiA-{ln%qcLnP4u<@`fkf(rn;\Ow @f`RBChdH
2024-04-24 02:17:01 UTC	16384	IN	Data Raw: 31 4b 83 2c 2d c7 b1 64 2d c7 c2 9e ef 8c 37 67 5e 10 e1 43 a8 b6 13 8f fa 01 d3 82 e3 d3 82 1f 0f 87 84 77 17 8d 8c 44 88 6c c7 b9 0f 0f df 85 3d be fc 3a 10 df 87 52 ae e7 c4 54 9c 62 b5 21 8e a2 9a d1 ec 7e d2 a1 e9 63 f6 95 1b 7e 9b 17 b4 e1 65 dc 63 f6 ac 3f 86 7e d3 d5 be 58 fd a9 2b 7e 98 f1 f3 74 f2 65 25 8d aa ed a1 db ab fc 85 8e c4 2f 22 78 ec 44 95 ae 8e 6d 5b f8 85 56 b7 a8 e7 d6 f5 11 c5 62 23 f1 11 c7 62 23 d4 fd a5 5a db 23 f6 85 6f 4a 3b 7d 5f 4a 1e 3a 5a 77 11 da df a4 94 9b 47 4f b7 0f 87 ee 43 74 28 66 ac d0 e2 b3 c7 4e 86 21 25 19 fd 45 ba 27 15 64 51 51 93 8f ca e2 5a c8 c5 6c 97 97 0a 50 8c a2 fe a5 2a 74 f2 ea ba 99 57 f0 c8 ca 2b e1 33 45 a1 38 db 62 54 6e b3 66 b0 f3 45 be f1 1a af bd 72 55 6d a2 21 07 3a 6e 59 ba 94 e1 9a 76 21 Data Ascii: 1K,-d-7g^CwDl=:RTb!~c~ec?~X+~te%/"xDm[Vb#b#Z#oJ;}_J:ZwGOCt(fN!%E'dQQZlP*tW+3E8bTnfErUm!:nYv!
2024-04-24 02:17:01 UTC	16384	IN	Data Raw: ec 8b 19 4b 23 2a 2c 8c a8 b1 97 dd 45 1a 50 aa 9d c8 e1 a8 d8 74 21 08 e8 54 62 8c 9a b8 f3 f5 1b 66 b6 1f b8 8e 6d 3e 55 ac 2d cc 44 ad 5e 66 63 07 8a 54 27 26 d6 e6 2f 1f 1a d0 50 8a 23 25 75 71 7b 4a 97 2b ad ec 39 e6 6d 98 1c 6c 29 41 c6 46 3b 16 ab 49 65 d9 18 5c 42 a1 5b 3b 5d 09 62 b9 d8 94 ec 3e 31 2a 55 74 63 9d 14 2b 3a b3 a9 71 ec 4b c2 ca 95 ea 4f 72 8b 7c c4 55 94 a1 69 47 7b 9c ea dc ce 65 fb c5 17 26 e4 d9 3e 6e 77 92 fb 6a 28 d4 d6 c9 e8 53 f0 2f a0 b0 d5 a0 d4 da d0 58 19 ca 31 95 f7 29 e0 aa 43 3f 78 8e 1e 55 a7 96 f6 b1 fb 3a 7e a2 78 79 51 d1 bb 9f b3 e7 68 f7 85 81 9c 73 3b a2 18 79 56 95 93 b5 8f d9 f5 2d e3 44 f0 ee 8a b5 ef 73 f6 75 4b 2e f2 3b 05 55 77 7d 89 7c 27 65 94 d2 9e 62 58 69 41 66 bf 51 50 75 2c c9 61 e5 18 27 e4 ce cf Data Ascii: K#,EPt!Tbfm>U-D^fcT'&/P#%uq{J+9ml)AF;Ie\B[;]b>1Utc+:qKOr\|UiG{e&>nwj(S/X1)C?xU:~xyQhs;yV-DsuK.;Uw}\|'ebXiAfQPu,a'
2024-04-24 02:17:01 UTC	16384	IN	Data Raw: d8 ea 31 70 63 25 d4 5f e1 ff 00 ee e3 d7 dc b9 7e 0f 8c 7c 71 fa 95 7f 52 43 fc d8 fe 8c fe be eb fd 18 7e 6a 92 39 88 e6 c8 8d 5f 31 4b bb 7e 3d 09 78 44 c8 ce ef 63 ab e2 d6 bc 2d af bf ca a5 d8 a3 53 e2 bb 3c 89 4a f6 f9 0f 62 e5 d9 a9 7f cf 88 ac 4b 5b 5c a7 18 b9 ee 57 51 56 b4 ae 45 af 31 d3 a6 e1 16 9d ee 4a 9c 13 b3 1f 2a da 5c 8e c8 f2 1c 45 c2 29 4a 06 c4 34 5a 9d d2 e8 cd 13 34 4c d1 33 12 77 89 1e 85 5f d5 a9 fe e7 f9 88 ee 8b 2f b9 d1 12 f0 88 a7 42 a5 67 68 46 e4 a9 4e 93 70 9a d4 5b 93 f0 fd cb 59 1e cb ad 46 92 9a 7e 26 62 2a d2 b5 44 62 3c 14 7f da 22 5c 3a 19 5d af c2 24 55 97 04 76 8c 4a db 63 b5 57 f3 16 22 b9 19 e2 65 e6 37 8a f9 8f 9d e9 64 a1 55 fa 87 4e ab df 31 2a 32 8e 83 8d b4 39 2f cc 54 bc ca 95 5e 4e 5a 59 63 7b d8 45 4c 5d Data Ascii: 1pc%_~\|qRC~j9_1K~=xDc-S<JbK[\WQVE1J\E)J4Z4L3w_/BghFNp[YF~&bDb<"\:]$UvJcW"e7dUN1*29/T^NZYc{EL]
2024-04-24 02:17:02 UTC	16384	IN	Data Raw: 9f b9 fb 19 19 cb 67 2d 99 2c d1 53 61 b7 e4 67 f9 1c cf 91 0f d4 46 23 57 13 29 91 19 0c 3f 89 95 21 79 b6 64 39 68 ca 61 fc 0c 66 53 21 94 ff 00 d3 99 46 8c 36 27 91 29 5e 19 ae 7e d3 8f f0 df f7 1f b5 f4 fd 2f fc 92 f6 93 ab 0c 9c ab 5c 96 f1 11 d0 5b 70 70 5d 0b c9 6e 29 5c bf b8 99 7d 90 d2 62 b2 76 3e 21 ef c7 12 f6 2f a9 98 cc 5c cc 53 5d db bd 8c cb 6d ac 5a 32 f8 b5 2c bd 64 97 7b 8e ec 7a 58 a9 e2 e0 ac 3d 59 62 c5 99 62 c8 97 be b8 dc b9 71 bd 3d c4 3e 08 4c cc 66 2e 5f 83 b9 af 04 c9 26 c4 8a 32 d4 5e 17 f4 2e b4 2e bf f2 52 7a cf 85 75 79 47 e5 22 12 4e a9 2d 99 8a ef 50 69 6e 60 93 58 74 9f 9b e1 52 6b 29 9c a5 34 e3 1f a7 09 c9 46 3a 94 71 11 8a 65 2a d9 ab 4f 86 35 fe 0c d7 cb dc 8f 87 83 76 64 e5 7d 88 f1 ba e3 78 d8 63 7a a2 ea ff 00 90 Data Ascii: g-,SagF#W)?!yd9hafS!F6')^~/\[pp]n)\}bv>!/\S]mZ2,d{zX=Ybbq=>Lf._&2^..RzuyG"N-Pin`XtRk)4F:qe*O5vd}xcz
2024-04-24 02:17:02 UTC	9200	IN	Data Raw: 40 25 a4 b6 fd 09 11 c8 82 00 da 04 6e c2 33 93 24 0c b6 f6 44 ec c8 66 32 e0 40 24 75 f4 f1 8f ff 00 07 be 58 22 9b e1 14 c7 c1 3c ef fc 14 5b 85 8d f2 b7 0d 71 42 35 47 5d 1b f8 f5 c3 7c 77 c3 62 e3 1c 19 ea a8 63 d3 62 2d 98 0d 50 c1 53 14 35 81 c5 b9 a2 c0 a8 57 d8 d9 44 9d 0f 2c bb 25 d9 8e 68 59 10 84 5d 74 29 10 c0 b2 d8 ac 4b 43 76 58 f1 0b 34 5c f7 2d 3b 74 e1 97 e0 81 4e 52 be 89 28 0c ec 92 3e c4 bd 88 7f 31 d8 28 21 2b 18 09 09 09 09 10 44 0b 62 57 67 65 bb 10 94 9e 49 52 41 d3 8a a6 a9 79 a4 16 8e 1b a4 57 22 44 58 82 08 f1 4b cd 0c 55 f3 ce 68 cf ee 93 c9 62 ba a5 97 06 91 15 48 74 8a 23 4f d8 f0 bd 45 35 f4 2f 22 0d 68 96 9d 64 b0 97 e0 89 13 ba 04 ba 2b 9d c8 09 2c 83 b4 16 7e cc 08 2a bb 8e db 7b 12 a2 d8 26 95 4b 59 9a 8f 11 ec 45 e0 a2 Data Ascii: @%n3$Df2@$uX"<[qB5G]\|wbcb-PS5WD,%hY]t)KCvX4\-;tNR(>1(!+DbWgeIRAyW"DXKUhbHt#OE5/"hd+,~*{&KYE
2024-04-24 02:17:02 UTC	12792	IN	Data Raw: 1c c0 c3 ae 02 8d 01 10 ee b5 83 21 dc 08 b6 5e 18 d1 4f d0 4d 9b 4e 1e 3c 8c ee cb b1 86 a2 62 96 99 2f 2e 95 15 e1 61 a8 93 94 f4 31 81 6e 18 b8 6a d4 2e c9 93 34 22 20 f3 8d 28 35 6c 3e ef e0 bb ff 00 01 ff 00 c4 7f e8 86 9d 51 6d 27 6c ac 93 ee fe 46 8d bf 27 fe a4 6f ff 00 43 e9 fe 46 27 fc cf 07 f2 3e 98 d3 fe e1 38 a3 1b 0f 00 f1 84 ad 47 0e 05 a0 b2 90 64 4c 3f 2c b7 b1 6e b0 90 be d4 6a 37 7e 85 7b 42 25 b3 18 51 cc cb 84 92 4f 16 1d 90 b8 2d 52 5c 7e 88 71 04 5e 93 a1 5c 80 6f aa 97 56 46 f8 4f 94 ee 91 c6 49 ec 36 f6 49 26 e3 a1 ee 8c f1 91 6f 55 31 6b 66 9e 50 94 13 f7 25 dc af 64 8c 18 bf 43 d8 b0 05 88 fc a2 16 d5 3c a9 16 43 10 22 ec 58 96 37 d8 7f d2 30 d0 5d cb 17 e7 9e 5c 98 57 1e 46 37 69 f6 24 ff 00 b0 6d a9 27 b2 7d ff 00 26 89 7f 92 Data Ascii: !^OMN<b/.a1nj.4" (5l>Qm'lF'oCF'>8GdL?,nj7~{B%QO-R\~q^\oVFOI6I&oU1kfP%dC<C"X70]\WF7i$m'}&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50161	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:01 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925917795
2024-04-24 02:17:01 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8aade2de1133827c18236076790583d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 6aAfiFTS1_PNxtrW-ksKrRQRMUwwNiU1lHniVRQqvtAX1LC5ocGShw== Age: 71189
2024-04-24 02:17:01 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50159	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:01 UTC	1966	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925011.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.13; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:17:02 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:02 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:17:02 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50162	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:02 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960361374 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925917795 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-24 02:17:02 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:17:02 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 605e2409c10fc6b5c622debf19d0582c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 6nRZdn355eTETX3Cj2qJKdvpzxGfvQYtZAhno0PVI4kPNovnyhpU2A== Age: 62219

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50163	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:02 UTC	2261	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925021.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.14
2024-04-24 02:17:02 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 66 31 30 32 35 35 39 64 2d 32 66 62 30 2d 34 61 34 36 2d 61 38 31 34 2d 32 35 38 61 34 66 37 66 38 34 36 34 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"f102559d-2fb0-4a46-a814-258a4f7f8464","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:17:03 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:03 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:03 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:03 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50165	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:03 UTC	813	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:03 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Fri, 12 Apr 2024 10:34:37 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:04 GMT ETag: "a00ef7380661369951dad5f3588121ae" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: llsNkpGSN6F5DwYVSlvwKnN0dFYYdWmJdNe9EIukR6f46KjfTmyVbA==
2024-04-24 02:17:03 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50166	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:03 UTC	420	OUT	GET /creator/wepresent/2404-p8/wp5-fs/1_qCZVBQ/img.4a0e5e5c765b8d6d522b.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:03 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 455428 Connection: close Last-Modified: Tue, 02 Apr 2024 13:17:08 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:02 GMT ETag: "eabae1ca657263a5a1cb6942d4d3fb21" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: UmS2Dl2MIeqYjVl6rMbgxHXkPPKnCJHZbeU_Fr4DjUvhOitWmHpVEw== Age: 2
2024-04-24 02:17:03 UTC	15866	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 06 40 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f9 f3 81 39 68 68 24 a9 4d 17 00 a9 22 90 d0 c4 34 e6 a5 a0 62 6d 00 00 86 e4 01 c5 04 d0 4a 61 41 29 81 53 6a 40 2a 40 a9 a2 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|@"9hh$M"4bmJaA)Sj@*@
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: e3 dd 34 fb 9b 9b 9b 8a be 7b 21 43 8a 9b 4d c9 35 22 08 40 c2 58 d2 19 17 15 25 12 26 26 87 44 d0 00 c0 53 53 44 d4 a7 52 54 03 2a 6a 06 50 34 00 c4 da 1a 1a 68 b9 a9 28 c7 87 4f 26 3d 8d 2d b8 8e b9 bf 97 d0 f0 b5 33 60 e8 cf 77 43 77 9b d5 c9 e5 65 7d 13 4b a3 d0 c5 b9 cc cb 9f 6b d0 f9 7f 8e 7b fe e6 f6 7c 6b 43 85 ab b5 c8 d9 e5 3f 69 d0 fa 17 27 3e ff 00 97 f5 5e 47 9d ee 96 6c ef 97 ad 3a 1a 1e 0b 8f bb a9 a7 e8 fe 89 e5 7e 4d e1 b0 6a cc b4 64 32 04 29 4d 5c 45 6c e5 d8 e7 e8 cd 03 81 3d b6 2b 94 ea 68 26 fa 91 9b 5f 2e fe 4d 15 75 7e a7 a7 b3 9f af c5 e3 e9 cf 3f 1f ae e3 e3 cd b1 8f 01 b0 73 fc bf a5 dc c5 d3 c7 c8 dc e9 f1 76 fa 3c 3e 8f 7f 6b 27 47 b1 e9 ff 00 3f e4 9a 69 a0 27 20 9c 8d e2 1c c3 a8 65 48 86 20 01 04 80 15 22 61 71 43 40 c6 90 Data Ascii: 4{!CM5"@X%&&DSSDRT*jP4h(O&=-3`wCwe}Kk{\|kC?i'>^Gl:~Mjd2)M\El=+h&_.Mu~?sv<>k'G?i' eH "aqC@
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: 75 fc e6 ae aa e8 f5 3a da 3c ed 4e 1f 7f f4 46 bf 33 73 79 fb 3c 78 b0 7c 77 e5 b3 ab a3 bd b3 18 7d 37 d8 bd 96 0f 99 7b 1f 61 a9 e5 7e 73 f1 0d 2f 4d ce f5 97 0e 71 e1 f2 7b 79 79 5e 92 36 e3 4f cc e1 c7 b1 ef f9 fc af 3f 33 ed 3a 5e 7f cf a7 39 6e 2f 0f b0 5e 5f 27 a5 fa 04 e6 c3 ea 7e f5 f2 8f 92 f1 79 f1 b1 c7 ec eb eb 6f e6 c5 9f 04 79 dd 8e af 20 e9 f4 f9 fc 1d 5f 5b d3 e1 e4 c1 b1 d4 f9 c1 d2 f6 af 9b 59 ba 3a fa 53 bd bd d3 c9 e7 b9 f9 76 70 ee 4f 42 b6 5e 78 c7 59 70 62 5a 75 ab 19 08 9c 78 e7 26 43 5f ca f9 be 7c 99 0b 00 30 5a 9a cc 9d 13 52 2c 55 8f 34 62 d8 9c 94 da 54 13 83 eb 37 b3 ce ef f2 f0 d3 36 32 e6 f9 ef d4 fc e7 73 6f 29 ed fe 83 3f 21 f8 d3 b4 4e 3d 7d aa 9c 86 38 58 35 da e6 76 b5 23 ad b3 78 3d 5f 27 8f b1 3f 51 f6 7d 8d ad 7e Data Ascii: u:<NF3sy<x\|w}7{a~s/Mq{yy^6O?3:^9n/^_'~yoy _[Y:SvpOB^xYpbZux&C_\|0ZR,U4bT762so)?!N=}8X5v#x=_'?Q}~
2024-04-24 02:17:03 UTC	15794	IN	Data Raw: d4 56 2f 3d 3b 80 04 95 3e 5e 97 e9 f6 73 e5 92 c9 c3 6f cd 7e 2d c9 ed bc fd 3b 55 24 74 ed 93 e9 fa 3e 78 f4 f3 f8 bc 3a fd df 67 cb fc cf 8e 17 e8 ed df e9 7e 6f 25 0e 9c f7 af a7 e6 e4 b6 bd 9e ff 00 ab bd a3 e0 7c ef 4f e8 fd 7d 79 79 e7 e6 6f 5f 37 b7 e6 7a 79 7d 2c 9b c9 cd 9c af 3f 0f 4f 8b ee 46 f8 94 90 a6 70 ae fe 4c da cd d6 47 d0 a6 e3 09 b6 25 4d 16 9c 60 26 ea 36 5c fa 64 75 68 65 74 74 f6 7a f8 47 6e 1e 3f 57 3f ad f3 3d 3f 91 f0 43 a7 ea fc bd b9 7c 0f 5f 9f d5 f3 38 d6 f7 f5 f9 bc f9 bb b5 df d7 ef ef 5e ff 00 cd 7c cf 7f d8 f5 76 df 37 0f 99 5d fc cd e7 c7 dd d6 f7 77 8e 22 38 c5 f1 fa fb 1c 19 3b cb 75 db 67 8e fa 7c 85 15 27 ab a7 2d e8 92 a4 19 a1 b5 90 09 bc 37 9c ec 5e c7 4a 68 8b ed d5 75 79 e8 f3 f7 f4 72 ce 9f 1f f3 be 3d 97 7f Data Ascii: V/=;>^so~-;U$t>x:g~o%\|O}yyo_7zy},?OFpLG%M`&6\duhettzGn?W?=?C\|_8^\|v7]w"8;ug\|'-7^Jhuyr=
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: cb a4 45 8c 95 bc 27 6b ab e4 76 c9 db c0 2c 5d 5f 24 4b 11 59 b2 f5 5b cd 72 4b a1 18 4d a1 b9 c6 77 2a 79 97 91 9a 7e 66 69 d9 a1 39 a5 6b 99 1b 8f 7b 62 38 6a 8e 96 65 6c 85 2c 3d 49 af c3 e8 64 ab 4b c6 87 3e eb ff 00 71 06 af a0 9c 15 39 dd ee c5 64 e0 61 6d da 26 62 2a c5 57 a5 ae c3 d8 af 24 a9 b3 0c ef 46 3f 23 19 fa ec f6 7b ef 48 7e 34 63 5d e9 b8 a2 3a c8 ca db b5 98 e8 4a 9e 57 14 c7 53 12 d0 f0 f5 72 66 ca 65 9f 93 23 4e a5 d6 85 2a 15 f7 51 b1 c8 9f 91 0a 2e 31 97 71 36 76 3a df 22 74 9c 2a c7 31 4a 9c 63 9b 6d cc 44 96 66 97 90 a5 16 fc 28 af 05 39 53 8f 76 df 23 b3 41 ce d7 29 e1 b2 d4 d1 df 42 77 cd fd ca b4 a7 35 2f 2b 70 7c 23 97 a9 9e 2b 41 b8 f7 4b c7 52 84 e9 c6 95 4b bd 7a 70 52 b1 82 af 4e 9b ad 9a 56 ba d0 78 da 51 96 92 b9 1f 68 Data Ascii: E'kv,]_$KY[rKMwy~fi9k{b8jel,=IdK>q9dam&bW$F?#{H~4c]:JWSrfe#NQ.1q6v:"t1JcmDf(9Sv#A)Bw5/+p\|#+AKRKzpRNVxQh
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: ea 7f ea 1e 56 25 31 c6 a2 5a c8 ad 9e ea ec e9 c1 6c 5f fe 22 df cd ef 5f 41 26 f6 5c 16 fc 34 f3 2d fc c8 b6 9e 24 54 79 13 79 88 56 ce ae 67 33 a3 31 3a d2 55 52 42 95 89 cd cb 8a dd fb 96 1c ae a3 f2 2e 5c bf bb 1b 1a 0d f1 50 77 bf 14 58 54 1b 44 a3 61 8f 82 95 35 4e 57 5d ee 86 62 fc 2e 39 b4 84 dd b8 dc 6f dd 52 64 bc 05 c4 2b de e2 ad 3d 8e 65 48 e8 8e 6c b2 65 24 34 3f 7a 1b 8e 54 e3 8c 83 9f a4 e6 53 9d 5a 99 3e 42 28 aa 6f 1a f3 1e d2 e5 27 0c b6 b9 ec de 5f 36 59 bc 8c 67 29 50 96 dc 34 34 3d 9a e8 e7 79 92 3d a7 2a 6f 25 ac 68 52 b7 32 1f 51 f1 88 9c 63 24 e5 b1 ce e6 d5 dd 6c 3d 98 fc 2f e8 4a 71 d6 de 68 75 a3 37 14 8a 8e d1 39 ab 4f a1 4a 59 bf b0 f1 52 a3 a2 39 d2 bb fa 94 fc 08 84 df 34 ec b5 9e a9 6e ce c9 5e fb 12 8b 9c ac 88 e0 2b 38 Data Ascii: V%1Zl_"_A&\4-$TyyVg31:URB.\PwXTDa5NW]b.9oRd+=eHle$4?zTSZ>B(o'_6Yg)P44=y=*o%hR2Qc$l=/Jqhu79OJYR94n^+8
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: 69 46 af fc 2d be 44 6b 7f c3 ad 0c 65 4c d4 52 f9 8b c2 4e bf e1 6c f6 2b 56 cd 87 9a b7 42 55 bf 06 97 d8 e6 27 6d f7 31 d9 79 1f f7 22 95 25 4e bc bb d7 ba 29 4a e6 23 f5 ea 7d 7f 31 6e 26 48 8a d6 c4 a5 6c b6 43 cf 27 76 66 96 c3 f0 bf a7 0b 70 bd f8 29 ca 4a d7 25 14 b8 2d b8 46 59 5d ce d1 52 5b b2 38 ba b1 6b 29 5a a4 aa 4d ca 47 41 4b 42 fa 17 23 2e fa 45 1c 42 b2 4c cf 1f 31 cf e6 57 aa f2 68 4a b2 70 f9 99 98 aa 25 b9 ce 80 eb c2 cc c2 be e4 fe a5 f3 53 90 ca 4f f1 63 f5 23 5a 32 9c 97 91 8c c5 c3 c3 17 d4 9c d6 6d ff 00 76 52 af 1f 0b f3 2b d6 86 9a 98 6a b0 cb 2b f9 94 b1 10 52 97 d0 9e 2e 9e 8b cc ed 94 9e 74 ba 22 bd 64 cc 1e 32 10 94 f3 5f 53 15 5b 35 69 5b cc 85 4f c3 77 f9 94 71 b0 e5 41 5e ce c5 2c 65 ea 65 cc b6 dc c5 d7 bc f4 68 a7 8b Data Ascii: iF-DkeLRNl+VBU'm1y"%N)J#}1n&HlC'vfp)J%-FY]R[8k)ZMGAKB#.EBL1WhJp%SOc#Z2mvR+j+R.t"d2_S[5i[OwqA^,eeh
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: 0d 70 79 32 b8 e6 6a 96 f2 35 0b 73 61 b2 2d f0 66 99 a6 c5 ca 29 e3 85 8d d3 54 d5 15 73 c1 70 74 b7 cd 9e 0e 38 3e 38 7f 25 fe 09 f8 73 57 c2 57 38 e4 ea b0 28 f8 36 67 8d ff 00 81 7a be 0f 9e ea b9 67 8e 8d ff 00 27 7f 2e c8 f9 10 f9 da 4f 14 d1 1c 74 60 dd 17 39 fe 5b e3 9e 6f 96 cc 70 76 aa b5 61 d7 43 f8 5f 0d d7 c5 1d 61 aa 22 38 63 86 ab 6e 6a 9b 11 35 5c 6d cf 34 b7 cd 6e 2b e1 75 d9 b3 75 cf c3 72 3f 86 b8 75 f2 5f e7 8e 76 e2 8c f0 b7 c5 df 14 a5 c5 67 e6 74 bf c1 63 75 cf 3d f2 7c 17 0c 70 bc f2 9a d8 bd be 3d d6 2b bf 9f 7f 25 d5 75 c7 d7 1c 1e 84 2f 8e 69 a7 47 59 9a 5b 96 78 e8 fb ae 4e cc 7c 3a f9 b7 5d d6 7e 2d f0 79 15 35 4d 18 e3 9e 37 e7 aa 5b e0 bd 27 e2 7e 39 58 43 35 c3 1f 17 aa 5b f8 b9 e7 e0 bf 09 e0 f1 48 30 b8 78 a6 2b d9 04 fc Data Ascii: py2j5sa-f)Tspt8>8%sWW8(6gzg'.Ot`9[opvaC_a"8cnj5\m4n+uur?u_vgtcu=\|p=+%u/iGY[xN\|:]~-y5M7['~9XC5[H0x+
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: 66 94 0d 5d 88 d9 22 78 19 25 95 01 48 44 cb da b7 ec 9e 34 b1 23 c2 8f 63 83 b6 7c 0a da 76 7a 13 28 53 6b 93 c6 79 7e 49 34 20 80 d8 7b 19 43 a2 f5 f5 25 44 b4 ba 74 1b aa 89 1c 13 cb b1 a1 48 bf f0 89 14 2b b2 6f 03 34 6c 16 95 7b 39 63 34 8d 29 1e 9b c6 68 28 9a 79 b3 19 8b 2a 99 52 2a b2 38 2c 7b 13 9e 4b 86 68 b9 c5 ab e7 86 ff 00 81 aa ef 85 af 48 f8 ad ff 00 e1 c7 f2 63 9b c8 79 66 c3 cb 18 ee a9 90 f2 3a de 10 70 79 16 cb 07 33 d8 d9 36 32 9a 7d 9b 49 7d f2 40 b0 a8 ad 89 4b 25 42 29 91 24 a5 04 dd 8a e4 91 45 a1 b2 7e e1 94 a0 95 57 d0 92 6e c9 0c f8 89 cb 52 7d 49 fd 8a 78 b8 96 6e 0b b0 d6 3a 21 d3 56 c9 32 cd 89 2c 15 26 6c 86 49 a0 c9 31 24 4b c5 87 55 7e 43 d4 13 49 1f 7b 62 37 9b 16 3d 02 5c 9b 70 09 6a c5 dc 38 d1 94 49 46 9d 09 e1 94 64 Data Ascii: f]"x%HD4#c\|vz(Sky~I4 {C%DtH+o4l{9c4)h(yR8,{KhHcyf:py362}I}@K%B)$E~WnR}Ixn:!V2,&lI1$KU~CI{b7=\pj8IFd
2024-04-24 02:17:03 UTC	16384	IN	Data Raw: 5b 10 a8 7c 96 2e 83 90 c3 6f 05 ab 71 ad 70 27 52 81 ca 02 2e 44 81 8c 94 ea 2f 83 cc 7e a4 54 14 e2 7f 61 66 3e 4c 46 44 22 45 23 11 52 94 a0 5b da 0d a9 9f d9 62 0c 8b 7d 4a 70 34 b7 d8 91 36 94 a1 17 a3 92 29 1a 64 30 e1 a2 09 1d 87 0d d9 89 74 8d 58 66 45 23 ad 8f 03 98 1a 97 8b d9 8b 6b 0c 69 43 45 3d 21 ab 8f a8 24 e0 43 4d 68 48 8c 40 92 07 20 f4 20 a9 6c 36 32 c2 88 45 c5 d8 d2 36 20 48 56 1b 45 56 68 88 c9 10 66 8b b0 4f 86 bb 9e eb 48 e2 92 41 34 5c 73 83 74 59 ac 69 ae 5c 98 26 87 b4 34 40 cc 0b 61 8c 9e 7b 17 52 c1 d2 c3 11 94 91 29 20 e0 43 1f b2 4d 60 81 d0 e6 05 9b 93 e0 70 df 42 4e 72 4a d1 9c 24 b7 64 99 93 51 28 32 21 aa 7e c5 84 25 d3 04 d0 14 e3 23 58 f1 1b 55 52 bb a6 cd 91 5b f3 a2 c3 f0 b1 2c f8 23 be 13 32 46 c3 a1 f1 ab 9f af 4e Data Ascii: [\|.oqp'R.D/~Taf>LFD"E#R[b}Jp46)d0tXfE#kiCE=!$CMhH@ l62E6 HVEVhfOHA4\stYi\&4@a{R) CM`pBNrJ$dQ(2!~%#XUR[,#2FN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50164	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:03 UTC	2935	OUT	GET /i.gif?e=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&s=xkRL3dPzexoQUFvMCCFjPMRgTCY HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925021.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.14
2024-04-24 02:17:03 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50169	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:03 UTC	2564	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925910109&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:03 UTC	115	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 38 30 38 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":8081.899999999994,"tags":{"rating":"poor","page_group":"/legal","country":"US"}}
2024-04-24 02:17:04 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Wed, 24 Apr 2024 02:17:04 GMT ETag: "37-K3GdcCG46MVFb6fPxmLWLR6+Jn4" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dGBhv0XcdFzoYQRskybPoHnFE4OAWii1kW-DbE__WNwln1ml23to5g==
2024-04-24 02:17:04 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 38 30 38 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"LCP","time":8081.899999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50170	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:03 UTC	2564	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922909&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:03 UTC	118	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.005007831527222084,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-24 02:17:04 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Wed, 24 Apr 2024 02:17:04 GMT ETag: "3a-9i3g5MVb/jBD5MKj57At+4Cn9MA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 db5074d02aa0b9851d4e5d66a6fc3826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: a76vKsuQF1eUN3yAPlrPIGu2aMQx6C-3_47Rqj3Zfd3hf0u1sKpN6w==
2024-04-24 02:17:04 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.005007831527222084}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50172	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:04 UTC	730	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/bundle.26bba77425699e7bd69e.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 290915 Connection: close Last-Modified: Fri, 12 Apr 2024 10:34:36 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:05 GMT ETag: "a674a153af828779418acc11b06da8c9" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: KT7IjY30nGYOBxASq25ZMol5hkQb5h4CWsuucxuHxIHo-FL0ePr0Bw==
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 32 36 62 62 61 37 37 34 32 35 36 39 39 65 37 62 64 36 39 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 38 31 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3b 72 2e 72 28 74 29 2c Data Ascii: /! For license information please see bundle.26bba77425699e7bd69e.js.LICENSE.txt /!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 6f 3d 61 2c 73 3d 30 3b 73 3c 74 3b 2b 2b 73 29 66 6f 72 28 76 61 72 20 75 3d 65 5b 73 5d 2c 63 3d 30 3b 63 3c 72 3b 2b 2b 63 29 66 6f 72 28 76 61 72 20 6c 3d 75 5b 63 5d 2c 66 3d 30 3b 66 3c 6e 3b 2b 2b 66 29 69 5b 6f 2b 2b 5d 3d 6c 5b 66 5d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 31 2c 6f 3d 72 2b 31 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6f 29 61 2a 3d 74 5b 6f 5d 3b 76 61 72 20 73 3d 74 5b 72 5d 3b 69 66 28 74 2e 6c 65 6e 67 74 68 2d 72 3d 3d 34 29 7b 76 61 72 20 75 3d 74 5b 72 2b 31 5d 2c 63 3d 74 5b 72 2b 32 5d 2c 6c 3d 74 5b 72 2b 33 5d 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 3b 2b 2b 6f 29 47 28 65 5b 6f 5d 2c 75 2c 63 2c 6c 2c 6e 2c 69 29 2c 69 2b 3d 61 7d 65 6c Data Ascii: {for(var o=a,s=0;s<t;++s)for(var u=e[s],c=0;c<r;++c)for(var l=u[c],f=0;f<n;++f)i[o++]=l[f]}function K(e,t,r,n,i){for(var a=1,o=r+1;o<t.length;++o)a*=t[o];var s=t[r];if(t.length-r==4){var u=t[r+1],c=t[r+2],l=t[r+3];for(o=0;o<s;++o)G(e[o],u,c,l,n,i),i+=a}el
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 79 2c 22 6d 69 73 73 69 6e 67 20 69 6d 61 67 65 20 64 61 74 61 22 29 2c 72 65 28 6e 29 2c 7a 28 63 2c 44 65 2c 6f 2c 73 2c 75 29 2c 6e 65 28 29 2c 24 28 63 29 2c 61 7d 2c 61 2e 72 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 30 7c 65 2c 6f 3d 30 7c 74 7c 7c 69 3b 69 66 28 69 3d 3d 3d 6e 2e 77 69 64 74 68 26 26 6f 3d 3d 3d 6e 2e 68 65 69 67 68 74 29 72 65 74 75 72 6e 20 61 3b 61 2e 77 69 64 74 68 3d 6e 2e 77 69 64 74 68 3d 69 2c 61 2e 68 65 69 67 68 74 3d 6e 2e 68 65 69 67 68 74 3d 6f 2c 72 65 28 6e 29 3b 66 6f 72 28 76 61 72 20 73 3d 30 3b 6e 2e 6d 69 70 6d 61 73 6b 3e 3e 73 3b 2b 2b 73 29 7b 76 61 72 20 63 3d 69 3e 3e 73 2c 6c 3d 6f 3e 3e 73 3b 69 66 28 21 63 7c 7c 21 6c 29 62 72 65 61 6b 3b 72 2e 74 65 78 49 6d 61 67 65 Data Ascii: y,"missing image data"),re(n),z(c,De,o,s,u),ne(),$(c),a},a.resize=function(e,t){var i=0\|e,o=0\|t\|\|i;if(i===n.width&&o===n.height)return a;a.width=n.width=i,a.height=n.height=o,re(n);for(var s=0;n.mipmask>>s;++s){var c=i>>s,l=o>>s;if(!c\|\|!l)break;r.texImage
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 74 2e 61 73 73 65 72 74 28 72 2c 73 2b 22 3e 3d 30 26 26 22 2b 75 2b 22 3e 3d 30 22 2c 22 69 6e 76 61 6c 69 64 20 22 2b 65 29 7d 29 29 2c 5b 61 2c 6f 2c 73 2c 75 5d 7d 29 29 3b 72 65 74 75 72 6e 20 74 26 26 28 70 2e 74 68 69 73 44 65 70 3d 70 2e 74 68 69 73 44 65 70 7c 7c 74 2e 74 68 69 73 44 65 70 2c 70 2e 63 6f 6e 74 65 78 74 44 65 70 3d 70 2e 63 6f 6e 74 65 78 74 44 65 70 7c 7c 74 2e 63 6f 6e 74 65 78 74 44 65 70 2c 70 2e 70 72 6f 70 44 65 70 3d 70 2e 70 72 6f 70 44 65 70 7c 7c 74 2e 70 72 6f 70 44 65 70 29 2c 70 7d 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 58 69 28 74 2e 74 68 69 73 44 65 70 2c 74 2e 63 6f 6e 74 65 78 74 44 65 70 2c 74 2e 70 72 6f 70 44 65 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 73 68 61 72 65 64 2e 63 Data Ascii: t.assert(r,s+">=0&&"+u+">=0","invalid "+e)})),[a,o,s,u]}));return t&&(p.thisDep=p.thisDep\|\|t.thisDep,p.contextDep=p.contextDep\|\|t.contextDep,p.propDep=p.propDep\|\|t.propDep),p}return t?new Xi(t.thisDep,t.contextDep,t.propDep,(function(e,t){var r=e.shared.c
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 7c 6e 2e 62 75 66 66 65 72 2b 22 2e 64 74 79 70 65 22 29 2c 72 5b 73 5d 3d 6e 2c 6e 7d 29 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 6f 5b 65 5d 3d 5a 69 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 76 61 72 20 69 3d 72 2e 69 6e 76 6f 6b 65 28 6e 2c 74 29 2c 61 3d 72 2e 73 68 61 72 65 64 2c 6f 3d 72 2e 63 6f 6e 73 74 61 6e 74 73 2c 73 3d 61 2e 69 73 42 75 66 66 65 72 41 72 67 73 2c 75 3d 61 2e 62 75 66 66 65 72 3b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 73 73 65 72 74 28 6e 2c 69 2b 22 26 26 28 74 79 70 65 6f 66 20 22 2b 69 2b 27 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 27 2b 69 Data Ascii: \|n.buffer+".dtype"),r[s]=n,n}))})),Object.keys(i).forEach((function(e){var t=i[e];o[e]=Zi(t,(function(r,n){var i=r.invoke(n,t),a=r.shared,o=r.constants,s=a.isBufferArgs,u=a.buffer;C.optional((function(){r.assert(n,i+"&&(typeof "+i+'==="object"\|\|typeof '+i
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 22 2c 6f 2c 22 29 7b 22 2c 75 2c 22 2e 65 6e 61 62 6c 65 28 22 2c 69 2c 22 29 7d 65 6c 73 65 7b 22 2c 75 2c 22 2e 64 69 73 61 62 6c 65 28 22 2c 69 2c 22 29 7d 22 2c 6c 2c 22 2e 22 2c 6e 2c 22 3d 22 2c 6f 2c 22 3b 22 29 2c 72 28 73 29 2c 74 28 22 69 66 28 22 2c 6f 2c 22 21 3d 3d 22 2c 6c 2c 22 2e 22 2c 6e 2c 22 29 7b 22 2c 73 2c 22 7d 22 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 41 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 2c 6f 2c 73 3d 41 5b 6e 5d 2c 66 3d 77 5b 6e 5d 2c 70 3d 65 2e 62 6c 6f 63 6b 28 29 3b 69 66 28 70 28 75 2c 22 2e 22 2c 73 2c 22 28 22 29 2c 4f 65 28 66 29 29 7b 76 61 72 20 64 3d 66 2e 6c 65 6e 67 74 68 3b 69 3d 65 2e 67 6c 6f 62 61 6c 2e 64 65 66 28 63 2c 22 2e 22 2c 6e 29 2c 6f 3d 65 Data Ascii: ",o,"){",u,".enable(",i,")}else{",u,".disable(",i,")}",l,".",n,"=",o,";"),r(s),t("if(",o,"!==",l,".",n,"){",s,"}")})),Object.keys(A).forEach((function(n){var i,o,s=A[n],f=w[n],p=e.block();if(p(u,".",s,"("),Oe(f)){var d=f.length;i=e.global.def(c,".",n),o=e
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 73 70 65 63 69 66 79 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 61 74 74 72 69 62 75 74 65 22 29 3b 76 61 72 20 6c 3d 7b 7d 2c 66 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 3b 66 2e 6c 65 6e 67 74 68 3d 69 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 70 29 7b 76 61 72 20 64 2c 68 3d 69 5b 70 5d 2c 6d 3d 66 5b 70 5d 3d 6e 65 77 20 7a 72 2c 76 3d 68 2e 64 61 74 61 7c 7c 68 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 76 29 7c 7c 65 28 76 29 7c 7c 55 28 76 29 3f 28 6e 2e 62 75 66 66 65 72 73 5b 70 5d 26 26 28 64 3d 6e 2e 62 75 66 66 65 72 73 5b 70 5d 2c 65 28 76 29 26 26 64 2e 5f 62 75 66 66 65 72 2e 62 79 74 65 4c 65 6e 67 74 68 3e 3d 76 2e 62 79 74 65 4c 65 6e 67 74 68 3f 64 2e 73 75 62 64 61 74 61 28 76 29 Data Ascii: specify at least one attribute");var l={},f=n.attributes;f.length=i.length;for(var p=0;p<i.length;++p){var d,h=i[p],m=f[p]=new zr,v=h.data\|\|h;Array.isArray(v)\|\|e(v)\|\|U(v)?(n.buffers[p]&&(d=n.buffers[p],e(v)&&d._buffer.byteLength>=v.byteLength?d.subdata(v)
2024-04-24 02:17:05 UTC	15269	IN	Data Raw: 63 68 6d 65 6e 74 2c 72 2c 6e 29 2c 79 28 61 2e 64 65 70 74 68 53 74 65 6e 63 69 6c 41 74 74 61 63 68 6d 65 6e 74 2c 72 2c 6e 29 2c 61 2e 77 69 64 74 68 3d 66 2e 77 69 64 74 68 3d 72 2c 61 2e 68 65 69 67 68 74 3d 66 2e 68 65 69 67 68 74 3d 6e 2c 6b 28 61 29 2c 66 7d 2c 5f 72 65 67 6c 54 79 70 65 3a 22 66 72 61 6d 65 62 75 66 66 65 72 22 2c 5f 66 72 61 6d 65 62 75 66 66 65 72 3a 61 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 28 61 29 2c 78 28 61 29 7d 2c 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 2e 73 65 74 46 42 4f 28 7b 66 72 61 6d 65 62 75 66 66 65 72 3a 66 7d 2c 65 29 7d 7d 29 7d 72 65 74 75 72 6e 20 74 28 73 2c 7b 67 65 74 46 72 61 6d 65 62 75 66 66 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 Data Ascii: chment,r,n),y(a.depthStencilAttachment,r,n),a.width=f.width=r,a.height=f.height=n,k(a),f},_reglType:"framebuffer",_framebuffer:a,destroy:function(){j(a),x(a)},use:function(e){s.setFBO({framebuffer:f},e)}})}return t(s,{getFramebuffer:function(e){if("functi
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 66 28 6c 28 65 2c 79 29 29 74 68 72 6f 77 20 6e 65 77 20 6d 28 68 29 3b 72 65 74 75 72 6e 20 74 2e 66 61 63 61 64 65 3d 65 2c 63 28 65 2c 79 2c 74 29 2c 74 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 79 29 3f 65 5b 79 5d 3a 7b 7d 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 79 29 7d 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 3a 6e 2c 67 65 74 3a 69 2c 68 61 73 3a 61 2c 65 6e 66 6f 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 29 3f 69 28 65 29 3a 6e 28 65 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3b 69 66 28 21 75 28 74 29 7c 7c 28 72 3d Data Ascii: f(l(e,y))throw new m(h);return t.facade=e,c(e,y,t),t},i=function(e){return l(e,y)?e[y]:{}},a=function(e){return l(e,y)}}e.exports={set:n,get:i,has:a,enforce:function(e){return a(e)?i(e):n(e,{})},getterFor:function(e){return function(t){var r;if(!u(t)\|\|(r=
2024-04-24 02:17:05 UTC	16384	IN	Data Raw: 6e 3d 30 3b 6e 3c 72 3b 29 61 28 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 2b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 6f 28 74 2c 65 2c 72 29 7d 29 2c 7b 41 53 5f 45 4e 54 52 49 45 53 3a 21 30 7d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 29 7d 2c 33 36 32 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 35 34 29 2c 69 3d 72 28 35 35 31 34 29 2c 61 3d 72 28 39 33 33 30 29 2c 6f 3d 72 28 37 31 39 39 29 2c 73 3d 54 79 70 65 45 72 72 6f 72 3b 6e 28 7b 74 61 72 67 65 74 3a 22 4d 61 70 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 21 30 7d 2c 7b 72 65 64 75 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 28 74 68 69 73 29 2c 72 3d 61 72 67 Data Ascii: n=0;n<r;)a(arguments[n++],(function(e,r){o(t,e,r)}),{AS_ENTRIES:!0});return t}})},3622:function(e,t,r){"use strict";var n=r(6454),i=r(5514),a=r(9330),o=r(7199),s=TypeError;n({target:"Map",proto:!0,real:!0,forced:!0},{reduce:function(e){var t=a(this),r=arg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50167	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:04 UTC	2261	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:04 UTC	2585	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 37 65 63 64 62 31 39 38 2d 64 33 65 35 2d 34 61 62 32 2d 38 30 65 38 2d 33 32 38 39 33 62 31 65 61 36 66 63 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"7ecdb198-d3e5-4ab2-80e8-32893b1ea6fc","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:17:04 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:04 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:04 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:04 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50168	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:04 UTC	1990	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:04 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:04 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50171	99.80.201.152	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:04 UTC	2702	OUT	GET /i.gif?e=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&s=xkRL3dPzexoQUFvMCCFjPMRgTCY HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:05 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50173	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:04 UTC	2124	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:05 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:04 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9ChBVs8D7zmv9cHhLk3a6v1gPpQB-G_mTN5qQu7iEMMZDOtgVz6bRA==
2024-04-24 02:17:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50176	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:05 UTC	2124	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:05 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:05 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tlJkl1TmwzjtL0Mbhb1BH8F3soJOTyg-SJwRPimu_xcrU_PyqFO9mQ==
2024-04-24 02:17:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50175	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:05 UTC	1990	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:06 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:06 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50179	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:06 UTC	805	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/wepresent-logo-white.8ce3fdff482687be2af7.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:06 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8727 Connection: close Date: Wed, 24 Apr 2024 02:17:07 GMT Last-Modified: Fri, 12 Apr 2024 10:34:38 GMT ETag: "0e643f422f061243340ecff0f9ecd49b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ad3c0e63e032c703faf8afd0daa0f23c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Bz0GOI1g4fcdgrLO2YthB6D2tyPGBkYbR3snwCGCE3M7M-LJYizBsQ==
2024-04-24 02:17:06 UTC	8727	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 36 2e 36 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 106.68"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50178	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:06 UTC	788	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/img.4449fe4a1cd58186ffec.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:06 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 397252 Connection: close Date: Wed, 24 Apr 2024 02:17:07 GMT Last-Modified: Fri, 12 Apr 2024 10:34:37 GMT ETag: "59120d257f397069247bcc0ec2464b45" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: p0uZSqoU7FIrIPMNuV3syKvfxnjekXoestxQEqs2wzYAmnR3Ny7E3w==
2024-04-24 02:17:06 UTC	15896	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-04-24 02:17:06 UTC	1114	IN	Data Raw: 37 ad 71 f0 d9 98 f0 05 91 2c ce 06 2e 0d ae 4f 97 95 16 52 a7 40 54 e4 ed aa fc 15 f6 24 96 27 06 ea 48 1f 3f c6 b4 02 a8 c1 c7 fc d5 a3 0f 16 65 62 a0 1b 0b ed d4 11 61 f0 a4 6d a9 d0 eb 7a 91 a2 b5 c9 b9 03 50 71 70 73 6a 89 8a 99 18 a0 da 0b 5d 10 5c 81 d4 28 62 6e 6d 54 3c e0 16 fe a0 2c 3c 7e da 8d 86 e0 a4 5c ae 8d 61 72 7e ca 59 39 24 fd 9e 34 ae 7a 8b 7f 2f 0a 05 84 46 0a dc 5c 5f a5 c6 a2 89 1b bd 2d a5 f0 16 c0 51 be 41 61 8f 0c d8 d2 bd c1 00 9c 68 7c 3e 54 33 b9 04 e5 f6 fa 31 8e 99 37 1d 73 55 7d e9 7d bb 7e 7f 0f 3a be 6d 60 2e 18 91 91 50 ef 8b 7e dc 5f 4f 95 0b 1b 9d 8d fc f4 d4 eb 8a cb ef ab bf 85 7f e9 c8 23 e3 5a 64 13 fc 6b 0b bd 77 18 a2 8e 6e 3c 9c 59 a6 93 d3 ec 49 17 d2 b9 f5 ef 5b 1b de b9 db 43 ae 0e 7c 00 0e a0 7c 7c 0d ea 78 Data Ascii: 7q,.OR@T$'H?ebamzPqpsj]\(bnmT<,<~\ar~Y9$4z/F\_-QAah\|>T317sU}}~:m`.P~_O#Zdkwn<YI[C\|\|\|x
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: 51 fe 77 aa 5f e3 7b e3 ea 43 37 7b ed 31 92 3d df 78 8c 81 1a 97 fb c6 2a b0 ef f2 ce db 78 3c 19 65 37 c3 36 06 3e 17 ad f8 fb 47 6e e3 a8 f6 b8 e8 2d d5 b2 71 f1 a9 d1 55 71 18 0a bd 36 8b 0f b2 98 2f f1 d7 cb 7f 43 9d 0b fb 9b 95 f4 a4 7c 65 3e 57 3f 6b 9f e1 4e 5f db 5c ee 46 79 bd c1 cf ff 00 a3 52 6d 9d 74 b0 ae 8c 48 11 d0 ae 72 34 c5 4e 48 7f 58 16 06 e6 85 8a ed 54 62 71 bf 6a 76 c8 42 ee 8c c8 dd 59 8d bf 0a da e3 70 78 90 00 b0 c2 89 e6 00 cf cc d4 89 9c 9f 95 4c 83 c2 fb 7f ca 85 9c 41 57 90 87 8f 22 cc 86 d6 b0 b6 82 b5 96 45 2a 08 16 b8 ac fe 48 8f da 22 47 54 3e 67 4a a3 07 7b e1 a4 36 67 2d b0 90 18 0d 48 a9 30 11 d0 ee 1f e6 68 60 8f 3a e6 a6 fd d3 1a 82 b0 47 bb cc 9a a1 2f ee 4e e0 f7 09 b5 2f d1 7e 14 e4 49 7e 0e c0 9b 12 59 ad 8c 5c Data Ascii: Qw_{C7{1=xx<e76>Gn-qUq6/C\|e>W?kN_\FyRmtHr4NHXTbqjvBYpxLAW"EH"GT>gJ{6g-H0h`:G/N/~I~Y\
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: 66 55 19 36 b7 4d 6a ac d3 6a 57 3f 8f db f2 a8 9d c9 19 37 d0 8f 2c f4 a1 89 c9 24 9c 80 f8 02 e4 f5 eb 54 de 45 fa 5b 07 52 2d 7a 90 f4 3e 3a 81 6a 86 44 37 16 03 3a db f1 a1 a5 92 06 67 63 e0 06 2f e1 48 9c 74 02 dd 29 12 3a 8b 8b 7c 8e 73 40 9b 37 4c f5 a1 53 82 29 6e cb b8 8b 11 91 9f 3a 11 ca d1 4b 1f 2e 3c 34 64 1d 6d 7b 54 80 dc 8c e9 af ca a1 2a 4b 32 db d2 45 aa 9b c3 3d 7b b3 73 d3 b9 76 e8 e6 52 0b a8 f5 01 f7 fd 95 8b fb ab b7 09 23 1c c8 d4 12 9f 57 c3 ee 35 8b fb 27 ba 7e 9b 96 dc 29 1b d2 da 29 3a f8 81 5d ff 00 22 05 9a 37 84 e5 58 7a 4f c7 4d 6b 3a 32 f4 bb 34 eb 7f 55 f0 d9 9e 5d 78 f8 eb 63 b6 55 22 ea ae 08 17 23 24 5b fa 4f 8d 45 27 21 99 82 05 54 2b 63 19 55 0b 6c 6d cd b3 9e b5 73 b8 f1 1f 87 cc 68 9d 70 bf 4b 1f 0f 3d 2a 88 70 3d Data Ascii: fU6MjjW?7,$TE[R-z>:jD7:gc/Ht):\|s@7LS)n:K.<4dm{TK2E={svR#W5'~)):]"7XzOMk:24U]xcU"#$[OE'!T+cUlmshpK=p=
2024-04-24 02:17:07 UTC	2048	IN	Data Raw: 4f 85 44 de f2 33 46 41 05 86 d6 e8 6d ad af 52 4a 6e 2c 49 d8 6c 32 7e 7d 29 8c 77 48 19 6e 41 1f 49 b1 19 3f 97 ad bc eb 25 6c c3 ef 5c 67 77 32 b6 4b 0b 30 bd 80 0b 90 33 a6 9a d7 61 fb 2b b9 b7 2f 82 78 73 9b f2 38 fe 92 0e b6 b7 a4 e7 c4 56 37 26 0f 7d 64 57 60 d6 51 21 60 36 8d 06 3d 76 24 e7 a5 65 76 4e 54 9d a3 bb 1e 43 ba ac 0c 56 37 dc 7d 44 31 da a5 57 53 6e be 02 aa ca 33 31 f7 2d 9e 7d b7 3d 4c 80 c0 ae 80 d7 31 cf e3 8e 3f 21 92 d6 0d 91 5d 42 b0 75 59 14 e1 85 eb 3b bb f1 7d e8 bd d4 1e a5 c9 b6 b6 ac 34 77 fd c8 e7 88 1a 1d 05 25 06 f7 f0 fb a9 c5 4d 83 f8 6b 40 0b 63 c7 37 b5 64 c4 64 9f db 6f 4b ea 4f 5f 1a b1 17 06 52 43 60 75 bd fc ea b0 63 8c e0 1c 0f 3f 3a d9 e2 be e8 f1 d3 14 49 32 39 44 03 81 81 76 f9 0f ba a3 9a 00 9e 93 af 42 6b Data Ascii: OD3FAmRJn,Il2~})wHnAI?%l\gw2K03a+/xs8V7&}dW`Q!`6=v$evNTCV7}D1WSn31-}=L1?!]BuY;}4w%Mk@c7ddoKO_RC`uc?:I29DvBk
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: 71 7a 39 f8 d0 a5 62 68 03 ad 0e b4 e1 1b 1f 2a 70 8b 4c d0 a4 47 4c 50 20 d5 91 18 a9 02 0f 0a 08 2a 7b 4c dd 29 e2 0c eb 56 42 da 81 19 a0 82 0f 69 69 e1 00 e9 52 6d ce 69 11 42 8d 03 ad 1b 53 ad 4e b5 00 c0 bf e7 42 d5 21 06 9a 45 00 db 50 2b 4e b5 1a 10 6d a8 79 9a 71 06 81 06 80 14 42 d1 b7 f8 14 45 42 8a d9 a2 05 1a 20 55 03 76 d2 b5 3c d0 b5 00 db 53 80 a4 05 1d 2a 00 5b fe 34 ad 44 0a 1a 55 00 34 c3 e3 4f 26 f9 a1 e3 50 11 b0 a8 5c 58 de ac 58 54 6e b8 f1 a1 08 41 b1 cd 27 17 07 c0 eb 42 d6 34 ec 11 ae 9f 8d 08 71 3d db 7f 64 ef bc 6e ed 15 c4 6c c2 39 ed fd 27 4a f4 48 64 59 a3 49 50 dd 5c 02 0d 72 ff 00 b8 b8 0b ce e0 48 87 5b 7f c3 ec a7 fe c9 ee 9f ac ed e7 87 29 3e ff 00 14 fb 6c 0e b8 c0 a2 d4 d2 67 50 c3 70 a8 46 0d be 55 60 54 52 2d 8d c6 Data Ascii: qz9bhpLGLP {L)VBiiRmiBSNB!EP+NmyqBEB Uv<S*[4DU4O&P\XXTnA'B4q=dnl9'JHdYIP\rH[)>lgPpFU`TR-
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: ec cf 44 fd b9 dc d3 ba 76 94 20 de 5e 38 00 f8 ec 3a 7d 86 af 32 ed 3e e0 c9 d0 fc 3a d7 9f fe da ee 0f d9 7b c0 89 cf fe de 62 6e bd 33 87 5f e3 5e 8d 24 61 5c a5 f7 21 00 a3 0e aa 74 a8 d6 47 5e 8f ad ff 00 8e 9f f1 db e4 09 c4 8b c3 79 a2 37 0a b7 18 c8 d4 ed 03 ce aa f0 c1 78 e3 e6 28 0e ea 08 7d ba ba 9f ca 46 94 d4 e4 8e 21 3c 73 23 89 1c 9d 82 d7 52 0f 99 a5 c3 9e 55 e6 08 4b 2c 6a 4e fb a2 8b 1b ea 31 8b d6 ce 36 6a ae 3c 11 72 78 bc 88 c8 ee 1d 92 05 26 6f 4f 2b 8c d6 5e b9 70 34 b8 b6 45 5b e1 f3 a0 58 57 91 1c 68 23 90 b0 66 0c 11 91 8f 88 cd 5b 2c 38 b3 ed 0d 78 64 6c 5f f2 b1 ac be 74 3c be db c8 7e 6f 12 13 c9 e1 cb 9e 47 0d 00 2c af d6 44 1d 6f d4 50 db 53 95 af ea 68 ca 52 65 10 c7 99 88 04 38 38 b7 4c f9 d7 11 ff 00 ea e7 72 ff 00 f5 83 Data Ascii: Dv ^8:}2>:{bn3_^$a\!tG^y7x(}F!<s#RUK,jN16j<rx&oO+^p4E[XWh#f[,8xdl_t<~oG,DoPShRe88Lr
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: f8 e6 9f 41 ec 51 b7 0b 8b 1b da 84 66 5c a0 87 c0 c8 37 1f 2a 89 6c 35 c9 d3 c7 e7 52 4e c5 4b 14 16 f2 3d 45 51 f7 2e 6c 75 24 eb 8c d5 83 93 69 16 0c ab 7e a0 e8 1b c2 ab 72 2d 2a 34 76 2c cd f4 f8 5e f6 eb 4f 62 77 58 69 e1 af 4a 22 ca db 58 93 6c eb 54 92 cc 0e dd 39 ed 9d fa 48 8a ec 83 96 0b 84 26 fb 5d 75 5b ff 00 a8 78 d7 5c 45 8e 34 d4 1f 23 5c 9f 7f e1 83 10 97 8f e9 98 b6 e4 2a 74 91 72 a5 be 23 15 b7 d9 3b 82 77 3e db 17 21 4f a9 45 98 78 78 8f 91 ac 59 1b eb 6f 4f f5 26 77 ee 7e df ee 47 1f 3e 30 37 40 77 4a 2e 46 e4 1a 82 57 35 c8 49 ca 76 9b 74 4c 15 22 b8 43 1f a4 05 37 c7 8e 2f 6a f4 d9 63 59 63 68 98 5c 30 20 de bc cb 9d c3 97 b7 f3 65 e2 5e ee 1a e8 5b 25 97 05 6b 5d 6f 62 77 56 22 cb d9 82 3e 1b 09 44 60 33 46 ce 4a 3d ac 2f e3 6d 6d Data Ascii: AQf\7l5RNK=EQ.lu$i~r-4v,^ObwXiJ"XlT9H&]u[x\E4#\*tr#;w>!OExxYoO&w~G>07@wJ.FW5IvtL"C7/jcYch\0 e^[%k]obwV">D`3FJ=/mm
2024-04-24 02:17:07 UTC	16384	IN	Data Raw: 6b da 84 90 59 6c 42 80 a4 00 72 75 26 a0 54 9d 8e e4 e2 96 d9 65 62 01 6b 5c 75 be 97 aa ed cb 56 72 e0 99 4e 0d c8 db 82 73 71 7e 94 f0 d2 86 59 e3 91 d1 45 ef 22 00 de a5 17 1e 90 7e 9d 05 cd 42 27 b9 1c c6 46 98 1b 02 6f b0 ae 41 07 e9 23 19 a8 0c 61 6e 8c 03 6d b0 23 1a 6b a1 f3 ab 6e 39 73 b9 e6 7b 2e a0 83 23 4c 16 e4 dc 91 bb 37 fa 9b 14 c7 02 2d ae ae 11 9c 16 6b ae db 1b 6e 36 0b 8f 2a 34 6a b6 86 46 15 d9 15 62 40 e4 0b bc 9b 72 56 e5 bc 69 c8 52 09 4b 7a ad 86 b0 3b 41 b6 32 3e 3e 14 9d e4 31 aa 2a 84 89 46 ef 55 b7 dd b2 49 20 0e ba 5e a3 54 2c 15 d0 6c 5d d6 69 2d 65 00 75 ea 35 d6 a0 1d 38 0c ec e5 3d a6 72 3d 0a 05 90 80 3d 40 54 53 c0 af 2c 44 4a 14 00 1a 4f 4b 15 6e ae 24 b9 18 38 b8 a9 95 8a 21 db 7d ec 48 59 4e 05 c0 d5 4f e3 50 88 1b Data Ascii: kYlBru&Tebk\uVrNsq~YE"~B'FoA#anm#kn9s{.#L7-kn64jFb@rViRKz;A2>>1FUI ^T,l]i-eu58=r==@TS,DJOKn$8!}HYNOP
2024-04-24 02:17:07 UTC	1514	IN	Data Raw: 44 30 83 af db a5 14 50 1b 07 27 26 ac c5 18 6c 91 73 d0 ff 00 2a ca 47 67 63 2e 7e dd fa 68 5d d0 e6 e5 af 6f 1a 8f 86 0c be a6 b9 f0 fb 6b 47 bb b3 47 c5 22 e0 16 c0 be 73 55 7b 64 47 6a ee b9 3a 92 7c 4d 65 af ba 11 55 db ac b3 46 28 45 b2 2c 7a d3 27 84 1e 96 f8 d5 d5 40 ab 76 38 d3 35 13 47 ea d7 fc 78 57 47 5c 1c 95 dc cc 91 45 18 45 2c 74 b6 00 d6 9d b5 6c 1b 36 6f 91 f9 d4 a4 0d b8 18 ff 00 19 a6 36 d2 ba e7 51 f3 ab 18 35 ca 48 65 24 2d c1 cf 5b 55 29 86 e3 b8 9c f9 e9 57 1a cc a1 46 47 5a 8e 48 98 82 09 d7 cb c6 b1 62 a0 f0 bf a3 39 c7 ce ad 34 7b 4f a8 eb 50 f1 63 11 10 b6 ab d2 c7 70 08 e9 a5 6a ab ed 32 ed 0f dc a6 e8 ac 08 39 bd 55 91 55 7d 37 d3 c7 5b 54 bc 82 eb ea b6 b8 c6 7e ea cb 3c 19 61 e5 1e 52 cc 4c 6f ea 92 12 2e 37 5a d7 07 51 5c Data Ascii: D0P'&ls*Ggc.~h]okGG"sU{dGj:\|MeUF(E,z'@v85GxWG\EE,tl6o6Q5He$-[U)WFGZHb94{OPcpj29UU}7[T~<aRLo.7ZQ\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50180	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:06 UTC	2372	OUT	GET /pricing?trk=NAV_pricing HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _dd_s=rum=0&expire=1713925922971&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:07 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10162 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:17:07 GMT ETag: "27b2-Pc9PAXdQem31WFYpcK2G14fFAx0" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BB734fkLgZgsL1_DDLgYCPv858RZdzhZXHYS1Ed1YvUadNE3APeoiw==
2024-04-24 02:17:07 UTC	10162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50181	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:07 UTC	2177	OUT	GET /_next/static/chunks/pages/pricing-43f9c565fe91f700.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _ga=GA1.2.804451605.1713924969; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925011.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:07 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 530 Connection: close Date: Sun, 14 Apr 2024 10:37:47 GMT Last-Modified: Fri, 12 Apr 2024 16:56:57 GMT ETag: "efc7d0ddd2fa9d9fc1c6637354e0e698" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RzLwPVIs6_zA53OHpMs5tC8q3VYqauRbJkyhJABnME07tL4BZaR_MA== Age: 833960
2024-04-24 02:17:07 UTC	530	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 33 39 5d 2c 7b 31 39 31 36 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 70 72 69 63 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 31 34 36 33 38 29 7d 5d 29 7d 2c 31 34 36 33 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50183	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:07 UTC	780	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:08 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47828 Connection: close Date: Wed, 24 Apr 2024 02:17:09 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 12 Apr 2024 10:34:34 GMT ETag: "6dbab1c1c6f168db27cbe727e3ad7fe8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 afdb1da50225c72a4232b3531193b400.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: bdCYaj6xp6ZsxeRCA5s959_14rCg2SEzFmCKAmzscp0tO2KUJyCP6w==
2024-04-24 02:17:08 UTC	8003	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ba d4 00 12 00 00 00 02 53 f4 00 00 ba 6b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 30 1b 81 c6 5e 1c e1 12 06 60 00 88 26 08 2a 09 82 73 11 10 0a 85 da 44 85 8b 2a 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 70 07 d2 72 0c 81 1b 5b 97 22 92 0a a9 71 ed 65 de 26 3e 00 09 e8 36 04 c8 32 75 d3 aa ce d7 7b 41 1c 63 3b 08 5a 3a c7 26 e7 03 15 a4 98 95 e2 02 ee ec 89 31 6e 47 38 e2 f4 3b 7a f6 ff ff ff ff ff ff af 4a fe f3 8c f3 cf 3d e9 dc fb 5e a5 12 08 44 7d ec 6f db 06 31 b9 23 04 a5 48 39 e5 4a 75 55 a5 26 a3 5a 57 15 5a e4 2e 67 f5 15 32 02 be 09 1b 1a c8 b6 c6 6e 1f 07 54 38 e6 71 9f f2 98 57 b0 53 61 71 f1 18 72 ed 7b 73 82 90 10 38 5f d2 59 bd e9 d2 95 aa 65 bd 6f a8 8a Data Ascii: wOF2Sk?FFTM0^`&sD6$ pr["qe&>62u{Ac;Z:&1nG8;zJ=^D}o1#H9JuU&ZWZ.g2nT8qWSaqr{s8_Yeo
2024-04-24 02:17:08 UTC	7701	IN	Data Raw: 9e 6c c5 6c b7 f3 ca 9b 2a 18 0f ed c9 3c c3 32 77 c2 43 ec 63 79 53 bd e9 d6 93 6f 86 70 c1 68 be 63 16 05 c0 d7 60 31 79 c6 ac af 35 e5 44 1c ae 09 2f 6f d8 9b a8 10 4e a1 d9 1f db a2 37 df ae 5f f6 eb f8 3c 7d 2f 1e 60 76 d9 b6 f5 c4 cd 39 97 0f 8e f4 3c 65 a9 b3 db 18 9a 21 bf 64 d5 71 7d 7c 8c 4a d4 3f 14 1a 41 be 42 d9 ae b4 81 a1 4d f5 cd 1b c5 75 02 97 85 3f 99 37 56 3f 6e 11 ff 68 c3 82 36 4e 44 3c f3 4c c9 f5 93 97 7f e5 d3 ef 84 fd c0 0d 3e 70 c3 0d 17 13 6f a5 e1 5f f9 d7 54 1f de f9 20 8c 9f 8e 01 88 75 74 2f b8 3b df f0 33 46 5b a3 22 6d 78 0f 9b 17 57 5d 9c 7b 1a 51 cd 34 59 f9 e5 e4 f9 a1 15 93 b2 b9 be e1 15 d6 97 b1 42 75 12 bf 2b 26 55 ae be 72 23 e5 9f 61 0f e7 b3 e6 93 2d d5 db d3 3d 3e b3 7d ff 53 74 35 05 cc af 45 b9 b4 00 5b 83 c8 Data Ascii: ll*<2wCcySophc`1y5D/oN7_<}/`v9<e!dq}\|J?ABMu?7V?nh6ND<L>po_T ut/;3F["mxW]{Q4YBu+&Ur#a-=>}St5E[
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 02 c0 1b b3 76 25 ae d2 c6 f9 73 12 1c 8a e2 9b e8 cb ed c2 ed b1 a0 8f 6b 16 b7 21 1d 12 a2 02 c2 69 05 90 36 81 db 28 4b fb dc 4a e1 fe c8 9c 31 90 e9 79 97 a7 80 7c 9a 31 03 34 c3 ec 32 4d e1 15 02 c1 79 0b c5 61 5b a3 b4 71 70 01 e1 ba 2c 7f c9 f0 52 0e c7 d5 9b c6 92 67 6e ec 96 ad f5 36 ac 73 2f 4f a5 b5 1e 00 33 ba 65 c6 fe e8 1a 15 93 2c c9 72 6e 76 03 44 a8 7f 39 76 0b ea f2 a7 c2 74 9c 5c cf 4f a4 7b c5 67 29 e2 01 87 21 0a 2b cc ac c1 e9 3e 62 aa 70 25 0f e7 43 42 67 69 c3 1c ac 1f e5 0d 7e 2b 0c 3d 73 34 e4 4c 2a 1d 91 34 2f a2 3f ab a1 c6 c7 bc e3 ea 6e 22 b2 59 33 f0 82 66 ba 79 24 1b f0 48 ee 5e 05 00 b5 31 79 54 22 cf bd a0 48 96 ce be 55 f5 c4 62 07 a5 d1 73 a6 51 65 59 5d 83 54 72 25 4c c3 95 33 d3 06 fb 98 ef 94 a5 d6 d3 24 94 96 38 9e Data Ascii: v%sk!i6(KJ1y\|142Mya[qp,Rgn6s/O3e,rnvD9vt\O{g)!+>bp%CBgi~+=s4L*4/?n"Y3fy$H^1yT"HUbsQeY]Tr%L3$8
2024-04-24 02:17:08 UTC	15740	IN	Data Raw: 1b ff 4f 27 8f 32 fb a3 5c 3b be 37 a6 0f d3 75 f2 b4 02 7e 0d 04 25 84 45 86 26 09 f9 f0 72 37 5d 20 b2 91 ff 22 39 c5 12 92 e3 2f 1b 59 24 70 d3 97 1f 26 37 49 0c 45 09 21 04 f1 6b 0c 66 ca 53 93 49 10 b6 17 a0 d4 fc c2 1a 81 03 e2 d6 16 14 f0 6b 21 a8 5e 60 36 b7 89 bd 6b 71 41 9a 58 64 a3 fe a5 ec f8 49 6a 82 f3 a4 95 22 61 6d d9 d6 c6 c1 6c b1 85 bb 1a 8b d9 2a f2 3d 4e 11 21 57 94 f2 71 9b ee 7a eb 96 1d 42 6e fa 02 2f 4e 64 ae e4 ee ef c0 f9 89 47 52 25 38 fc ff 8f cf 6a d3 dd 3d fe e8 cc 6e fe 84 35 7e bc cc d9 2a fc dc 2d 9f 30 3f 26 b6 ba 38 71 7d 7a 3b 9e d5 b4 55 a1 9b c7 dd db 13 4e d4 f1 3e ef 48 c3 a3 c1 bd 19 86 72 b7 56 c4 a7 c7 ad 1d ec bd 82 ce 49 f8 e4 57 39 43 83 df ee 32 ed 3b 89 e4 d2 02 b0 bf fc bb 6b 2f 22 63 aa da e6 a0 73 49 7b Data Ascii: O'2\;7u~%E&r7] "9/Y$p&7IE!kfSIk!^`6kqAXdIj"aml=N!WqzBn/NdGR%8j=n5~-0?&8q}z;UN>HrVIW9C2;k/"csI{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50184	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:07 UTC	437	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/wepresent-logo-white.8ce3fdff482687be2af7.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:07 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8727 Connection: close Date: Wed, 24 Apr 2024 02:17:07 GMT Last-Modified: Fri, 12 Apr 2024 10:34:38 GMT ETag: "0e643f422f061243340ecff0f9ecd49b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: KH3TnfAGejqAv_eUVDcEDDP4km5FbJDMfd5X9czPyg1MXvwyLS_vwA== Age: 1
2024-04-24 02:17:07 UTC	8727	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 36 2e 36 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 106.68"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50185	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:07 UTC	712	OUT	GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:17:08 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:17:08 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50187	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	3468	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A06.888%2B02%3A00&epn.hit_timestamp_unix=1713925026888&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925026772-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=8&tfd=1453&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.1.804451605.1713924969
2024-04-24 02:17:08 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:08 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775944; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: UCG-zCVLIZfhcKLzU9OVq94yIwFRvrotcFBYnrXnYPnP30TGRxSWtQ==
2024-04-24 02:17:08 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 32 30 33 30 33 36 31 32 39 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.171392496
2024-04-24 02:17:08 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 32 30 33 30 33 36 31 32 39 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%
2024-04-24 02:17:08 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 38 32 31 31 38 39 32 34 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;
2024-04-24 02:17:08 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 38 32 31 31 38 39 32 34 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2F
2024-04-24 02:17:08 UTC	1348	IN	Data Raw: 35 33 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 36 37 38 38 39 36 31 37 38 26 66 73 74 3d 31 37 31 33 39 32 35 30 32 38 34 34 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 53devent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=678896178&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:17:08 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 32 32 35 36 35 39 39 33 31 26 66 73 74 3d 31 37 31 33 39 32 35 30 32 38 34 37 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1225659931&fst=1713925028471&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:17:08 UTC	355	IN	Data Raw: 31 35 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 79 55 39 4a 74 4c 35 53 58 61 67 79 47 72 75 74 69 5a 35 36 56 45 44 79 61 6b 6d 4b 53 70 76 38 65 71 61 53 34 78 36 32 65 63 53 68 41 75 61 45 74 42 25 32 42 6f 43 61 4f 6e 77 55 4d 61 4e 25 32 42 37 69 75 4f 6c 34 61 33 52 30 72 4f 25 32 42 6c 66 59 49 6f 74 65 43 46 74 73 50 4a 49 42 6c 41 65 73 69 6e 77 4b 4d 69 44 36 71 38 5a 51 55 52 4f 4d 37 46 4a 49 36 25 32 42 49 37 37 56 74 39 56 49 33 34 52 55 7a 31 4b 31 6e 34 31 73 6d 57 6b 62 57 74 79 57 44 34 41 78 61 65 64 25 32 42 4b 4a 78 6f 31 78 35 35 53 4d 46 6e 61 6b 44 36 70 33 Data Ascii: 15cevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3
2024-04-24 02:17:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50189	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	787	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p9/wp1-sq/1_rkETnh/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:09 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28464 Connection: close Date: Wed, 24 Apr 2024 02:17:09 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 12 Apr 2024 10:34:34 GMT ETag: "ff4429feba146d5a8e608db1b13cd9b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ZeGJzeA-aZQtwT0A71ruGMPUtPEK7g7MpgnqUn5mbOh_LfCpNqJ77g==
2024-04-24 02:17:09 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 30 00 0f 00 00 00 01 59 1c 00 00 6e d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 6c 1b d8 48 1c 9d 3c 06 60 00 87 66 11 08 0a 83 da 38 83 8f 36 0b 87 1e 00 01 36 02 24 03 8e 36 04 20 05 a6 2f 07 99 07 5b f5 2e 71 02 bd 6d 8f 42 74 27 c0 a8 5a 6d ff 5d ce 12 36 b8 9a cd 79 0e 4a 99 79 2e 65 01 77 7e 70 1e 84 f0 3d bf aa 26 fb ff ff d3 92 8e 18 6b ec 6c 00 9c a6 69 d6 7f 5c ee 2c 3c cb db 2a 26 9c b8 4c ae f0 90 75 c8 d7 ed b9 a2 b7 dd ec c9 0e 04 e9 03 b2 af e1 c9 c5 35 ee 5d 8d c2 81 ad 5f 4f 73 56 55 e1 ea 77 77 9b ca 7b ab 32 55 85 3c ce 0d 9e c8 79 65 d9 0f 72 9e 58 b3 a9 fb 49 de c1 5c e6 24 e1 ec 74 17 09 d5 db 4c 54 c6 c0 6d 0e 08 eb 17 bb ec a4 21 3a 21 e6 10 d3 d0 Data Ascii: wOF2o0Yn?FFTMlH<`f866$6 /[.qmBt'Zm]6yJy.ew~p=&kli\,<*&Lu5]_OsVUww{2U<yerXI\$tLTm!:!
2024-04-24 02:17:09 UTC	1594	IN	Data Raw: aa 5d 0e 48 0d a3 db 4c 5c 87 5c 85 70 73 9a a3 50 a3 28 49 c4 14 1a 33 37 c4 28 bf 0f f9 e9 65 b5 d9 dd 64 67 6a 70 6f 1d 5f 37 d1 2d 69 c0 e3 2d a1 6d dc 32 84 37 b5 c7 5d 41 c3 e9 03 1c a5 e8 53 9c b0 49 ec 37 09 ee 5e ba 3f 08 b5 85 8c 57 c9 99 f9 28 d0 34 67 3a fa 41 e0 ee 12 80 eb 9a f0 46 ec 04 e6 99 de 7e 71 f9 89 be de dc ec 66 ed a7 ee 65 ba e4 48 97 eb 65 f6 bd 62 e8 f5 5c cf 4d f3 b6 24 17 3b 47 b8 69 9f 89 dc c6 8e 64 fb 10 2f b9 1b 95 43 b6 70 dd 7d 86 ec 67 7e 06 1e dc 37 4e 09 47 9f 2c 74 f3 f3 1b 0f 7a 69 1a 78 ee 26 1d 93 ca fd c1 40 cb 35 38 23 c3 af ef 45 e2 90 e9 a6 29 83 12 2e 7b f6 7f d8 6a aa 65 67 45 1b 93 8c 66 8f 25 77 f7 7a 42 69 a8 04 7d 32 14 68 ac fa a9 f8 3c c3 dd a4 6e 12 bb 7b 51 8e 51 b0 96 2c bf 88 e6 2d 9f 22 4d c7 4c Data Ascii: ]HL\\psP(I37(edgjpo_7-i-m27]ASI7^?W(4g:AF~qfeHeb\M$;Gid/Cp}g~7NG,tzix&@58#E).{jegEf%wzBi}2h<n{QQ,-"ML
2024-04-24 02:17:09 UTC	11145	IN	Data Raw: a3 fb 16 85 ca ec ba 64 ff b6 31 fb 30 56 ce 99 98 4a da 9f a0 43 f7 b0 42 49 b4 bf 40 df f2 cd 87 d8 53 ef 94 d7 94 42 d7 1b 29 c2 55 18 41 7c 4e 91 b2 51 f9 51 e1 f1 b6 fc f0 7b b7 9a 77 ca b3 ca 77 db 3e b8 d0 32 19 90 d0 cf 18 00 4e ad 8c 6d 30 67 9f 3b 03 53 18 fe d2 f7 cc a1 e6 ea 11 78 81 00 c4 33 15 bc 2b 4b de 0e f8 fc f6 25 97 c1 65 e7 60 19 12 7c 0a 2d e5 ba 93 96 ba ac 71 a7 10 a6 b5 25 b6 ec 91 dd 01 0a 55 34 6f 9a 45 45 91 68 23 62 1c bf 89 a7 5b a1 52 05 36 3f 8a 44 f5 95 f7 af 95 19 d5 11 3a 27 27 24 5a 05 63 49 90 5c e0 b7 37 d8 16 62 6b 5e 20 b9 ba d7 cf 48 48 ac d1 75 97 e5 96 ca c3 e4 61 b9 a5 65 dd dc d0 62 34 c9 10 57 eb 9e 2f cb 0b 24 b6 5a d8 af 77 a6 d9 ef 4c 03 d2 ff e7 02 3c 00 68 00 20 a7 6a d9 16 30 af 77 7e 9d bb de 38 83 e4 Data Ascii: d10VJCBI@SB)UA\|NQQ{ww>2Nm0g;Sx3+K%e`\|-q%U4oEEh#b[R6?D:''$ZcI\7bk^ HHuaeb4W/$ZwL<h j0w~8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50190	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	420	OUT	GET /creator/wepresent/2404-p9/wp1-sq/1_rkETnh/img.4449fe4a1cd58186ffec.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:08 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 397252 Connection: close Date: Wed, 24 Apr 2024 02:17:07 GMT Last-Modified: Fri, 12 Apr 2024 10:34:37 GMT ETag: "59120d257f397069247bcc0ec2464b45" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: MlXY5DSgeaF6rWxFdXUdemNnou8nBX7E1Zabdy5fuXbNATmmspDHjg== Age: 2
2024-04-24 02:17:08 UTC	15889	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky2http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 15 8d 19 ae bb ca fe 37 ad 71 f0 d9 98 f0 05 91 2c ce 06 2e 0d ae 4f 97 95 16 52 a7 40 54 e4 ed aa fc 15 f6 24 96 27 06 ea 48 1f 3f c6 b4 02 a8 c1 c7 fc d5 a3 0f 16 65 62 a0 1b 0b ed d4 11 61 f0 a4 6d a9 d0 eb 7a 91 a2 b5 c9 b9 03 50 71 70 73 6a 89 8a 99 18 a0 da 0b 5d 10 5c 81 d4 28 62 6e 6d 54 3c e0 16 fe a0 2c 3c 7e da 8d 86 e0 a4 5c ae 8d 61 72 7e ca 59 39 24 fd 9e 34 ae 7a 8b 7f 2f 0a 05 84 46 0a dc 5c 5f a5 c6 a2 89 1b bd 2d a5 f0 16 c0 51 be 41 61 8f 0c d8 d2 bd c1 00 9c 68 7c 3e 54 33 b9 04 e5 f6 fa 31 8e 99 37 1d 73 55 7d e9 7d bb 7e 7f 0f 3a be 6d 60 2e 18 91 91 50 ef 8b 7e dc 5f 4f 95 0b 1b 9d 8d fc f4 d4 eb 8a cb ef ab bf 85 7f e9 c8 23 e3 5a 64 13 fc 6b 0b bd 77 18 a2 8e 6e 3c 9c 59 a6 93 d3 ec 49 17 d2 b9 f5 ef 5b 1b de b9 db 43 ae 0e 7c 00 Data Ascii: 7q,.OR@T$'H?ebamzPqpsj]\(bnmT<,<~\ar~Y9$4z/F\_-QAah\|>T317sU}}~:m`.P~_O#Zdkwn<YI[C\|
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 0a 47 b6 91 53 f1 a9 2d 6a 5b 7a 7d f4 29 1e d3 a5 2d b6 fe 74 fb 51 db e3 a9 d6 84 81 96 a5 6f 1c 53 ed e3 46 da 54 29 19 5a 56 c5 48 16 f4 36 fd 94 21 1d af 4c b5 ef d7 ce a6 20 50 23 ed b6 b4 10 54 78 c9 b9 a0 2f 6d b6 f2 ab 0c 30 41 aa e4 fa af 6f f8 55 23 00 53 72 0d 60 7e e7 ed 63 9f c0 96 20 a3 7f d4 87 c1 86 45 74 7e 76 cf 8e 95 07 22 21 22 1b 8b 83 d0 9c 55 22 79 39 4f fe 3c ee c6 3f 77 b3 72 09 04 12 d1 86 be a3 0c bf c6 bd 00 0b 1b 1e 9a d7 92 f7 44 93 b0 77 f8 bb 87 1c 6d 47 6d f6 e9 70 6c cb f3 af 55 e1 72 e3 e6 f1 62 e5 44 6e 92 28 3f 68 a3 f2 6a b8 6d 6c f2 bf a8 a6 52 0d c1 c7 5a 8f a1 ab 6e 37 29 15 5f 69 07 4c 8a cb 45 68 43 f1 a7 64 51 55 ea 47 f0 a7 5a e3 02 85 81 05 b8 bd 2f f0 69 e0 36 2d a5 11 1f 5a 19 82 31 7f 95 12 bb 96 c7 17 d4 Data Ascii: GS-j[z})-tQoSFT)ZVH6!L P#Tx/m0AoU#Sr`~c Et~v"!"U"y9O<?wrDwmGmplUrbDn(?hjmlRZn7)_iLEhCdQUGZ/i6-Z1
2024-04-24 02:17:08 UTC	2260	IN	Data Raw: db ec a7 83 71 4f 95 7f 30 e9 51 ad ea 11 ea 38 5c 51 03 c6 90 a7 63 e7 42 00 8f b6 9a 69 c7 34 d3 42 83 e1 4a 89 a5 42 02 c6 96 29 d6 a5 6f f8 d0 0d b5 e9 66 f4 6c 2f fc 28 85 20 50 b0 37 5a 56 a9 36 d1 da 28 20 8f 6e 7c 68 ed 37 a7 e3 fc a8 d0 b0 30 2d a8 85 f1 a7 50 d2 85 81 58 5b 4a 3e 43 15 0c dc ae 3f 1d 4b 4d 2a c6 a0 5c 96 20 0a c1 e6 fe f8 ec 3c 42 55 27 fd 4b 8f c9 00 2e 7e d1 8a a6 5d ea b5 7f d5 9d 25 a8 62 b8 89 ff 00 79 f7 5e 41 d9 db bb 78 8e e6 c1 f9 0d 91 e7 b5 2f f8 d6 7c a7 f7 2f 73 50 39 3d c0 c6 a4 66 38 47 b6 33 d2 e3 d5 48 64 7d 98 94 a4 ef 39 7d d3 81 c2 05 b9 5c 88 e2 1a fa d8 0a e7 39 df be fb 52 93 0f 01 65 e6 4d 9b 08 90 84 b8 ff 00 53 5a b0 e1 fd b5 02 9f 76 72 65 72 72 64 bb 64 66 fe a2 4d 5f 83 b7 45 11 27 68 b0 00 db a8 3e Data Ascii: qO0Q8\QcBi4BJB)ofl/( P7ZV6( n\|h70-PX[J>C?KM*\ <BU'K.~]%by^Ax/\|/sP9=f8G3Hd}9}\9ReMSZvrerrddfM_E'h>
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 22 c6 a0 ad a1 ce db fb 1e 4b d9 d9 24 59 38 8f 86 b6 f8 cf 98 f8 d4 8e 36 8b db 43 66 f3 e9 a5 47 dc fb 7c 9d 9b bb bf 14 64 2b 6f 89 b4 ba 13 8a bf c8 8e 36 58 e6 8d 83 87 50 5c 2f 42 75 5f 95 4d cd b5 0e 08 61 26 e0 1f 57 cb 39 d0 d5 3e 5f fe cb 97 1f 2d 47 a1 b1 28 f1 07 ad 58 8d 88 20 1d 01 c8 fe 15 27 22 25 9e 16 0d 90 46 9f 1a a8 91 b1 17 28 98 dd 39 90 db 7a 10 ea 47 5f 11 f6 57 a6 76 4e e2 bd d3 b6 45 c8 b8 2e a0 2b db c3 a1 af 2e e0 ca d2 40 fc 39 33 24 17 b7 81 5e 95 bf fb 3b b8 8e dd cf 6e 24 e7 fb 32 fd 02 fa 83 a8 b7 91 a3 58 31 77 c6 2f b2 c5 bd bc fc 0e 87 f7 4f 07 dd e3 fe ad 17 d7 1f d4 06 09 1d 74 ae 47 81 c5 6e 6b 95 96 fe ca e3 72 e2 e6 d8 af 4d 9a 10 f1 bc 2f 95 61 af 97 88 ae 6b 8d da 39 50 3c f1 c5 61 08 25 8d c6 81 bf a4 de 95 66 Data Ascii: "K$Y86CfG\|d+o6XP\/Bu_Ma&W9>_-G(X '"%F(9zG_WvNE.+.@93$^;n$2X1w/OtGnkrM/ak9P<a%f
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 64 60 12 31 76 2a 48 6b 6e 3f ea 27 20 50 92 33 03 7b 6d e9 71 62 a4 dc 81 d7 c7 15 22 bb 6c 6d 8d 67 3e 83 b7 0b ea 1a 69 a7 8d 48 aa 22 32 c1 20 49 2e db 57 91 b8 b0 1b 49 04 a3 68 6f f0 f8 50 c7 92 33 2b ee 20 9f 4b 1b 5f 06 e0 67 c6 a0 bb 29 4f 6e 42 d2 23 09 e1 72 4e 14 12 42 1f 33 6e 95 6a 50 b3 2a aa 26 40 16 b5 80 b9 3a af 91 19 35 13 4c 9c 76 2a a0 82 f6 47 5e 80 5c d8 f9 5a f6 b5 e8 1a 6c f4 4e d5 ce 5e e3 db a2 e4 0f ac 0f 5a f5 1e 20 fc 0d 33 ba 70 d3 9f c1 97 8e e2 e1 94 d8 79 d7 29 fb 43 ba fe 9f b8 4b c2 97 fd a9 ae d1 03 a7 98 ae e1 d7 63 11 7f 81 f1 ae 36 47 ab aa ce 23 7a fe 87 85 f2 c7 2b 8f 3c bc 69 c9 df 1b 6c 6f 96 07 c0 53 38 10 41 c9 e5 0e 27 2e 45 8a 37 bf f7 1a e7 2a 31 6d a0 9c da d5 da 7e fa ed 11 41 3a 77 3b 6d 8a 4f 44 db 7e Data Ascii: d`1vHkn?' P3{mqb"lmg>iH"2 I.WIhoP3+ K_g)OnB#rNB3njP&@:5LvG^\ZlN^Z 3py)CKc6G#z+<iloS8A'.E71m~A:w;mOD~
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: cd 65 d9 2d 4a b2 ce 8b 63 6c 51 0a 5c 5c a0 78 8e e6 62 00 3f 49 b9 14 87 36 47 e1 0f 6d 4b 24 8e d1 a4 ae 8a 3d cd a4 13 85 1f 95 ba 93 a5 73 bc 2e 67 70 ee 53 e2 76 58 13 32 32 12 bb 89 37 c3 2d ad bb f0 ad ef d5 18 a4 85 38 e8 36 c2 0a c1 f5 00 75 3f 94 7f 51 ac f2 9d 02 9d fc 10 8e 67 39 16 55 f7 01 32 23 6f b8 d3 16 da 03 1c 69 d2 ad 76 19 da 61 28 91 83 31 b1 25 40 00 81 8d 2e 73 51 73 7b 6f 28 48 fe d2 99 e3 24 00 4e d2 4f 89 00 10 6d 7d 2f 57 3b 4f 12 5e 32 bc 93 0b 33 1b 05 20 03 61 e3 6a 92 cd d6 b8 c9 a2 0e 4f ce 9a ea ca 4b af fd 4b e3 e7 4a 3d 3e 34 f2 45 ac 0e b8 bd 0a d1 5d 55 81 69 a3 f5 ac 87 73 47 e3 80 a0 a9 f1 b0 d0 d4 aa 43 8d ca 6e 34 ff 00 2a 6a 16 47 73 6f ed 93 e9 b7 4f 95 39 a3 37 12 44 40 6e a0 fd 2c 3c ff 00 9d 02 d0 9e 13 b1 Data Ascii: e-JclQ\\xb?I6GmK$=s.gpSvX227-86u?Qg9U2#oiva(1%@.sQs{o(H$NOm}/W;O^23 ajOKKJ=>4E]UisGCn4*jGsoO97D@n,<
2024-04-24 02:17:08 UTC	5805	IN	Data Raw: 31 5d f9 60 ee f3 b1 a9 da 26 5e d9 dc a3 9e 19 55 b8 dc 93 ed ee 52 4a ef 07 0c a7 20 e6 bb a7 b1 b3 a7 d2 fe a1 fc 45 79 e7 60 e4 a7 73 ec 12 f6 de 51 09 cb ed d7 58 4a 8d 53 55 6b 79 57 61 fb 7f 9f fa fe de 23 90 5a 78 ef 75 eb b9 70 c3 e6 33 59 b1 be 97 8f 7d 7d c9 79 d1 d8 89 d7 af a5 fe 07 43 55 b0 40 e9 6a d3 74 12 a3 23 e5 58 58 d6 66 55 8a 36 59 3d 27 a5 fc 2b 28 ea c3 a1 ea 28 f5 b9 a1 7f 11 44 7e 35 4c 87 53 9d 7c e8 9b 64 d2 03 a5 0f f1 8a 08 12 e3 39 a3 71 e3 e7 48 6b fc 68 1f 1e 9f c2 80 75 cf 4a 70 3e 59 a6 69 f0 eb 44 1c 50 83 ef 72 2f 9a 18 e9 6a 07 43 44 5f e0 3c 68 51 11 7c 5e 91 1e 59 e9 48 d2 b1 be 4e b4 02 1e 5d 29 7c 69 78 66 88 18 a1 41 a6 0d 23 e7 f6 51 37 f9 d0 ff 00 16 a1 00 2f 7f c6 9d f0 34 d1 7e b4 e1 9a 01 1f 1f b6 8d 2a 1e Data Ascii: 1]`&^URJ Ey`sQXJSUkyWa#Zxup3Y}}yCU@jt#XXfU6Y='+((D~5LS\|d9qHkhuJp>YiDPr/jCD_<hQ\|^YHN])\|ixfA#Q7/4~*
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: bd 74 f9 52 53 8f e1 4b ce 80 89 c7 ac 28 fc c3 1f 65 58 53 b9 41 f1 c8 aa dc 83 b5 91 87 8d bf 95 4f 19 19 1d 17 4f 81 c8 fb 8d 00 f2 3a 8a 56 14 81 d6 97 5a a5 10 3a 6b 55 a6 70 b1 b0 3a 1d d1 dc ff 00 ac 5d 7e f1 6a b4 05 55 e5 25 e2 97 a8 2b 7f b3 fc a8 66 d3 0e 07 f0 10 0e 1c 20 5c 59 47 52 3a 75 15 33 2c 97 b2 b0 37 c8 04 75 1f 0a 8b 81 27 bf c5 49 6d 6d d9 b5 58 6d 01 ea 34 a1 6b fb 57 b2 00 69 30 4a 8f 31 7f f2 ad 2e df 33 1b c4 eb 6e a3 35 9c 0e 71 a3 64 54 d1 39 8d d5 87 4a 1a 46 bc 9b 80 d2 e0 10 7e ca 8d 9d 64 3b 8f a5 81 c1 e8 7e 35 32 48 19 41 1d 45 40 f0 b8 6d e9 91 7b ed a8 6a 01 1d 88 20 5c 1e bf f0 a2 c5 54 de e4 79 53 6e a7 26 e3 a1 fe 54 f0 1b 60 38 00 e4 35 0c 8a 39 6c 4e 72 7c 69 ee d1 aa de da e0 91 50 15 2a 6e 0d c9 c5 e9 aa ac c5 Data Ascii: tRSK(eXSAOO:VZ:kUp:]~jU%+f \YGR:u3,7u'ImmXm4kWi0J1.3n5qdT9JF~d;~52HAE@m{j \TySn&T`859lNr\|iP*n
2024-04-24 02:17:08 UTC	16384	IN	Data Raw: 80 2f e0 28 52 61 6f f3 a7 df e7 50 a8 b8 00 e4 ae 35 f0 a9 40 1e 26 80 49 ea 55 f1 b5 cf c7 ad 36 fb 59 ad d2 92 fa 1b 70 fa 58 e7 c8 df 5f e7 44 ad a6 f2 23 fc aa 90 93 e0 31 41 7e a6 07 c4 7d e0 52 5d 00 ea 31 f6 50 06 cc df 2b 50 24 4e c5 36 c6 b1 a0 4d a2 cd 62 4e e3 7b ee ce 94 d0 45 31 49 5c 3e 0f 8f 43 4f 20 1f 8f 8d 0d 0f 14 f8 e4 f6 9d 58 e9 d4 d4 63 cf 4f 11 4f 04 50 16 21 6f 6e 6d 70 4d 4b c9 95 76 bc 00 e5 80 bf c2 ab 30 04 2b 03 63 d4 7f 95 44 e1 e4 67 21 ac e4 0d ad fe a1 e3 e5 41 30 1e 39 bc 29 e4 2d f6 1b 51 8b 05 93 c0 df f8 7f 0a 8b 86 db a3 6c 6d 21 cd d4 f4 f2 fb 6a 43 e9 9a fd 1b f8 e3 f1 b5 08 3d 7e a6 1f 03 f7 54 83 ca a3 b9 12 7c 45 3f 4a a5 0d 11 40 1f 23 44 11 42 88 80 70 7c 6a b7 3b 8a 39 7c 59 78 f2 1f f7 54 a8 93 c0 f4 dc 3e Data Ascii: /(RaoP5@&IU6YpX_D#1A~}R]1P+P$N6MbN{E1I\>CO XcOOP!onmpMKv0+cDg!A09)-Qlm!jC=~T\|E?J@#DBp\|j;9\|YxT>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50188	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:08 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:08 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 97JYMF1G05KKG6TRFCSW Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:08 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50191	34.49.212.111	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	478	OUT	GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=r/9Eptz95iamfgGS+Zz9RRjKBtbdbzndIT+xphCO3zo=
2024-04-24 02:17:09 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:17:09 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50182	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	2515	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; _dd_s=rum=0&expire=1713925927877&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; wt_trk=NAV_pricing
2024-04-24 02:17:08 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:17:09 UTC	1519	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:17:09 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:17:09 GMT; secure Set-Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-s86zx-205030 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 9791499ce9e8737ee738da6d0ca29037 X-Runtime: 0.005607 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wMhHWGt4Z2thseqIhBwSwJ0SBkOmNG8MoHEILpPvZY_w0Nz3eRupkQ==
2024-04-24 02:17:09 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50194	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	1399	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:09 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13585508715516799649"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13585508715516799649","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13585508715516799649","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13585508715516799649","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13585508715516799649","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50195	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:08 UTC	1317	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:09 UTC	1171	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50193	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:09 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:17:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50202	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	3208	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A06.888%2B02%3A00&epn.hit_timestamp_unix=1713925026888&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925026772-1-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=8&tfd=1453&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969
2024-04-24 02:17:09 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:09 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775943; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6d4b136088d445592377cfca2dcb8944.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: lAEJiR9d1sGKJVzPROi13akxtyDsB_DnFd4DVVrxjwrNvtcdHqMQVg==
2024-04-24 02:17:09 UTC	700	IN	Data Raw: 32 62 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 34 39 31 36 38 36 38 37 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 Data Ascii: 2b5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1491686877;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924
2024-04-24 02:17:09 UTC	632	IN	Data Raw: 32 37 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 34 39 31 36 38 36 38 37 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 Data Ascii: 271event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1491686877;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2
2024-04-24 02:17:09 UTC	697	IN	Data Raw: 32 62 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 33 31 34 37 37 39 37 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 Data Ascii: 2b2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=331477971;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969
2024-04-24 02:17:09 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 33 33 31 34 37 37 39 37 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=331477971;gtm=45h91e44m0h1v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2
2024-04-24 02:17:09 UTC	1350	IN	Data Raw: 35 33 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 35 38 33 32 36 38 39 31 31 26 66 73 74 3d 31 37 31 33 39 32 35 30 32 39 35 30 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 Data Ascii: 53fevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=583268911&fst=1713925029500&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0h1v893550495z8890364660z989
2024-04-24 02:17:09 UTC	691	IN	Data Raw: 32 61 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 39 34 32 33 32 36 31 34 39 26 66 73 74 3d 31 37 31 33 39 32 35 30 32 39 35 33 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 68 31 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 Data Ascii: 2acevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1942326149&fst=1713925029532&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0h1v893550495z8890364660z9890153243za200
2024-04-24 02:17:09 UTC	300	IN	Data Raw: 31 32 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 52 63 6a 6c 67 45 45 4c 44 58 79 6c 36 38 67 6d 36 59 33 6b 64 6b 70 56 63 6d 43 5a 4b 4d 51 71 41 41 5a 54 7a 38 68 4f 76 53 35 74 63 30 51 6b 47 4f 72 5a 45 6f 4c 4e 39 49 50 51 6b 6d 37 30 72 54 51 6b 32 38 25 32 46 68 43 55 33 78 62 79 34 71 76 6a 34 64 6c 25 32 42 64 56 33 70 61 6d 79 46 52 68 72 6d 66 70 37 25 32 42 25 32 46 49 63 43 35 4b 71 46 33 7a 43 70 59 58 65 5a 31 54 25 32 46 52 6a 41 77 6d 52 25 32 42 69 77 56 51 44 73 25 32 46 61 72 25 32 46 59 33 44 34 6c 61 57 47 6d 45 58 68 64 4d 44 47 58 55 59 7a 61 6f 4e 46 49 31 Data Ascii: 125event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=RcjlgEELDXyl68gm6Y3kdkpVcmCZKMQqAAZTz8hOvS5tc0QkGOrZEoLN9IPQkm70rTQk28%2FhCU3xby4qvj4dl%2BdV3pamyFRhrmfp7%2B%2FIcC5KqF3zCpYXeZ1T%2FRjAwmR%2BiwVQDs%2Far%2FY3D4laWGmEXhdMDGXUYzaoNFI1
2024-04-24 02:17:09 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50198	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	714	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:09 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:09 GMT x-amzn-RequestId: a809c4a0-4c79-47a9-b2c2-9cf743eb6857 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 d01073c33bb49ec25107380fe49206ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: bZett_XXwdh1E9KJ9KXaxQE5WbiM5nb3B7N3juq-rJZKzL55ddg6Lw==
2024-04-24 02:17:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50200	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	1415	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:09 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5852048478337786123"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5852048478337786123","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5852048478337786123","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5852048478337786123","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5852048478337786123","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50199	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	1315	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:09 UTC	1169	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50201	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:09 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:09 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: JFKNZ7E70N7EZSZBN6FB Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:09 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50206	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	1110	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=2030361296;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:10 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13585508715516799649"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13585508715516799649","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13585508715516799649","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13585508715516799649","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13585508715516799649","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50209	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	2140	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; _dd_s=rum=0&expire=1713925927877&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:10 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:17:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-n58rw-204458 X-Request-Id: de2756ffae9409c62d77cedd2216472d X-Runtime: 0.000983 X-Cache: Error from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VlQLDDNfeTLIjE6gXkO_JpfTTlAqNJdKPPZwPTqhncIvhJBOqnfrFQ==
2024-04-24 02:17:10 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50208	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	1376	OUT	GET /pagead/viewthroughconversion/778938880/?random=1225659931&fst=1713925028471&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:10 UTC	1302	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1225659931&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqs_G4b1yARSvx5cYkpT-z8HqQrmsPS3xQeiZz0MqgV2soflD4&random=51828794 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50210	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	2432	OUT	GET /_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3TjfjOl9b3LzC2YfIhOVwPQtdc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:10 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:17:10 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 dfcab4e7aac7e17a0524fce2d56dd444.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: fCFxztyB04VRzvX9BfcBZSuCbYehd4XjBfu7gKqyl-T0Wd-Zb5cDLA==
2024-04-24 02:17:10 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50204	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	2972	OUT	GET /i.gif?e=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&s=Y8O8fIaVpd5khvyqurhWmq2atC0 HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing
2024-04-24 02:17:10 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50212	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925026967 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:10 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:10 GMT x-amzn-RequestId: bcdfaf00-793c-4b0a-877b-c9cd1dd2a258 X-Cache: Miss from cloudfront Via: 1.1 8f6437da2884298d30857e4dfe32e228.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: b-GDXJJmiVLQoXxQAONJkaYuqifwqeRQuMIPgYERae2icnPTq5-RIQ==
2024-04-24 02:17:10 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50205	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	2281	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925029.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.16
2024-04-24 02:17:09 UTC	2636	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 64 61 66 30 63 64 37 33 2d 66 36 37 37 2d 34 33 64 64 2d 39 65 38 64 2d 38 36 32 61 65 39 36 36 37 63 38 61 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"daf0cd73-f677-43dd-9e8d-862ae9667c8a","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:17:10 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:10 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:10 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:10 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50211	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:09 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:17:10 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:17:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50213	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:09 UTC	1108	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1821189243;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:10 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5852048478337786123"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5852048478337786123","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5852048478337786123","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5852048478337786123","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5852048478337786123","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50216	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:10 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:17:10 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:17:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50218	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	2398	OUT	GET /pagead/viewthroughconversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTC8SAJTMn2BBXH6JYAygB5UsFaJsf5tBQA&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:10 UTC	2254	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50214	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 1e8b1d43-88b3-4fae-a0f5-7661173f364b sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:17:10 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:10 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 47 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50217	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	2241	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:10 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 32 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":2,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:17:11 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:10 GMT ETag: W/"4461-UMlRboYc2N9y4pz8J1ajgraXR18" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17505 Connection: Close
2024-04-24 02:17:11 UTC	16001	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 30 31 33 39 35 37 31 33 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 32 35 34 33 35 31 31 38 2c 22 66 6c 69 67 68 74 49 64 22 3a 34 39 30 34 30 38 34 34 38 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 38 38 32 34 38 39 38 30 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 34 31 34 30 30 36 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 45 30 4d 44 41 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 30 Data Ascii: {"creatives":[{"adId":501395713,"creativeId":325435118,"flightId":490408448,"campaignId":288248980,"advertiserId":2414006,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyNDE0MDA2LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODI0
2024-04-24 02:17:11 UTC	1504	IN	Data Raw: 65 49 64 3d 35 30 31 33 39 35 37 31 33 26 63 74 3d 55 53 26 61 3d 31 39 39 30 37 31 26 63 75 73 74 6f 6d 4d 6f 64 65 6c 3d 77 65 74 72 61 6e 73 66 65 72 26 6c 70 5f 66 6f 72 6d 61 74 3d 70 72 65 6d 69 75 6d 26 63 70 5f 63 72 65 61 74 69 76 65 54 79 70 65 3d 42 61 73 65 5f 5f 56 69 64 65 6f 5f 5f 49 6e 74 72 6f 5f 76 69 64 65 6f 27 3e 3c 2f 73 63 72 69 70 74 3e 22 5d 2c 22 69 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 69 2e 67 69 66 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 45 30 4d 44 41 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 34 4f 44 49 30 4f 44 6b Data Ascii: eId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video'></script>"],"impressionTrackers":["https://donny.wetransfer.com/i.gif?e=eyJ2IjoiMS4xMSIsImF2IjoyNDE0MDA2LCJhdCI6OTU5LCJidCI6MCwiY20iOjI4ODI0ODk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50220	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	1354	OUT	GET /pagead/1p-user-list/778938880/?random=1225659931&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqs_G4b1yARSvx5cYkpT-z8HqQrmsPS3xQeiZz0MqgV2soflD4&random=51828794 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50221	13.33.21.47	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	2199	OUT	GET /_set_cookie?val=yU9JtL5SXagyGrutiZ56VEDyakmKSpv8eqaS4x62ecShAuaEtB%2BoCaOnwUMaN%2B7iuOl4a3R0rO%2BlfYIoteCFtsPJIBlAesinwKMiD6q8ZQUROM7FJI6%2BI77Vt9VI34RUz1K1n41smWkbWtyWD4Axaed%2BKJxo1x55SMFnakD6p3TjfjOl9b3LzC2YfIhOVwPQtdc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:10 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 02:17:10 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5d8fb728e55016a1777141c94edc027e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: Cyd5L1kGpCBQL_gbvsRn01wqVBAGR8G7v0SXG-PfA5rxie7bs63c3Q==
2024-04-24 02:17:10 UTC	54	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=
2024-04-24 02:17:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50223	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	2379	OUT	GET /pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50226	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	955	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=3, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50227	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:10 UTC	1065	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:11 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:11 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:11 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:11 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50225	99.80.201.152	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	2739	OUT	GET /i.gif?e=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&s=Y8O8fIaVpd5khvyqurhWmq2atC0 HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:11 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50229	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	1120	OUT	GET /pagead/1p-user-list/778938880/?random=1225659931&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqs_G4b1yARSvx5cYkpT-z8HqQrmsPS3xQeiZz0MqgV2soflD4&random=51828794 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50230	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	2584	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n
2024-04-24 02:17:11 UTC	131	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 37 35 34 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":2754.1999999999825,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:11 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Wed, 24 Apr 2024 02:17:11 GMT ETag: "38-5brvQW8QTDbpw1emDQifX1HMxag" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7cBbwsxcgpADuZDFDW0QXf3NTRzpNIV_ZkFjpVbcnyPP3bTTQrz7GA==
2024-04-24 02:17:11 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 32 37 35 34 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 7d Data Ascii: {"status":"ok","metric":"FCP","time":2754.1999999999825}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50231	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	523	OUT	OPTIONS / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cross-origin-resource-policy Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	500	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Wed, 24 Apr 2024 02:17:11 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Access-Control-Allow-Headers: cross-origin-resource-policy Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 d440a00f2a23058d6ebb4241e0a5ff0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: b5as2TihRjbXwjfr0TFGV1Dw0sYzlhZoj3SfS3COzKl-VTv32PkW0w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50232	18.65.3.33	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	542	OUT	OPTIONS /sdk/v2/vardata?v=0 HTTP/1.1 Host: experiments.wetransfer.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-amp-exp-user Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	916	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: GET,POST,HEAD X-Amzn-Trace-Id: Root=1-66286b71-7040c1ae6872b29f14d87ce4 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:11 GMT X-Served-By: cache-bur-kbur8200081-BUR X-Cache-Hits: 1 X-Timer: S1713925032.626608,VS0,VE1 Vary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method cache-control: no-store Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Headers: authorization,x-amp-exp-user Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 f8ca3888706855f7bdf5771d2184e67e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P1 X-Amz-Cf-Id: I0N6nCPnYfpbSr0qtWye5eEjAsoAoGgEpWxw2wkx9dqO9y0Pql_ZHQ== Age: 54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50224	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	2010	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u8dr4.k.2.m; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925027.0.0.1838502804; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15
2024-04-24 02:17:12 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:11 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50233	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	3513	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A09.977%2B02%3A00&epn.hit_timestamp_unix=1713925029977&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925026772-40-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-40-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2925&tfd=4925&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n
2024-04-24 02:17:12 UTC	804	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:11 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8d437d95baacc8055df7d491783d25e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: -VDC8fnPvbFkG_o_zFQEb0Qx79eu3Q1qoJlSJN8vLiJUrw8XdgztwA==
2024-04-24 02:17:12 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50228	34.248.204.163	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:17:12 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 02:17:11 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1498 RateLimit-Reset: 46 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50235	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	721	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50234	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	2072	OUT	GET /pagead/1p-conversion/614409984/?random=389543804&fst=1713925028448&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A06.888%2B02%3A00%3Bhit_timestamp_unix%3D1713925026888%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925026772-1-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-1-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIGs75-7rZeKjgEiEwifo7yk5NmFAxXDVwgEHSMhBwEyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqw-iuLyYocLGWnv3AmkSUznZ3VBqpMD3hW4YV5ezyi2HHcTxA&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMsszQ0Qg84-TieNzYs2QF_4bLI49IzqgQ&random=2395256749 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:11 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50237	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	2584	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n
2024-04-24 02:17:11 UTC	132	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 30 31 36 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":1016.3999999999942,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:12 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:17:11 GMT ETag: "39-5Vpbicjk6xswGOg9oJD5hO/KPyI" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5sRHAEevIwTexia9VeUe9ukmy40zcMOuccx3Iz9tYPW3mz-tfnjUiQ==
2024-04-24 02:17:12 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 31 30 31 36 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 7d Data Ascii: {"status":"ok","metric":"TTFB","time":1016.3999999999942}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50239	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	758	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030005&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-40-7661173f364b&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:12 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:12 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:12 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50238	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925929909
2024-04-24 02:17:12 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e8e40876c34ba0a595da68411cedd210.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 8bvyt6tmf-b7s0OkD3F8t36C8jMdqmX4ZiWCMRWoS15vJQxJjHhMgg== Age: 71199
2024-04-24 02:17:12 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50236	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	1088	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCOjjzOzqg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:17:12 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:12 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:17:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCP6v2Z3sg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:17:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:17:12 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50240	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:11 UTC	1986	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; _gat_UA-11792855-4=1; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n
2024-04-24 02:17:12 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:12 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:17:12 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50241	18.154.132.120	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	2122	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:12 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:12 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EYPgR_UmnVUo8WujrboLJab3WrU_aMP1p45Ix36pINZGzoi4KoDHIg==
2024-04-24 02:17:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50242	18.65.3.33	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	946	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: experiments.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiRThzQzJIVWtNVmxVYlZxT011X1Y1TiIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:12 UTC	769	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 5880 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286ba8-2131b4972a1d258f6eb9a653 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:12 GMT X-Served-By: cache-bfi-krnt7300087-BFI X-Cache-Hits: 0 X-Timer: S1713925032.314792,VS0,VE27 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin,Origin X-Cache: Miss from cloudfront Via: 1.1 ad0709bedfde2db64fca0e2b4d741932.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P1 X-Amz-Cf-Id: e0WL3yTnxYOskAJmE7iEHBwcC1LJK61IFqBIf_xTwGV8HQf80WsT6Q== Age: 0
2024-04-24 02:17:12 UTC	3198	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:17:12 UTC	2682	IN	Data Raw: 63 6f 75 6e 74 2d 6f 6e 62 6f 61 72 64 69 6e 67 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 72 6f 2d 70 72 69 63 69 6e 67 2d 63 61 72 64 2d 70 6f 72 74 61 6c 73 2d 75 70 64 61 74 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 72 6f 78 79 2d 61 64 73 2d 70 72 6f 76 69 64 65 72 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 75 62 6c 69 73 68 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 72 65 63 6f 72 64 2d 72 75 6d 2d 74 72 61 63 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a Data Ascii: count-onboarding":{"key":"on","value":"on"},"pro-pricing-card-portals-update":{"key":"on","value":"on"},"proxy-ads-provider":{"key":"on","value":"on"},"publish-social-links":{"key":"on","value":"on"},"record-rum-traces":{"key":"off","metadata":{"default":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50243	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	681	OUT	POST / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:12 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 38 63 36 32 61 37 30 31 39 63 32 66 65 64 36 61 35 65 34 31 62 33 61 37 30 65 33 33 32 35 64 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 33 30 32 37 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 32 Data Ascii: checksum=58c62a7019c2fed6a5e41b3a70e3325d&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925030271%2C%22event_id%22%3A3%2C%22session_id%22%3A1713924976188%2C%22
2024-04-24 02:17:12 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Date: Wed, 24 Apr 2024 02:17:12 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286ba8-28beb83d4dcdcc61093c8547 Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 be66acbcc5d85e825abf1047b034d722.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: nQjJ_N_M210vUmPQQsKr3itpdbI8Kt5CRqSuOzT4cZ9TqzH6MBATDQ==
2024-04-24 02:17:12 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50244	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:12 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50245	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	1033	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:12 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:12 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:12 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:12 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:12 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50247	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714916834891 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925929909
2024-04-24 02:17:12 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:17:12 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 5d30c0fb621781d1b876b873574bb1d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: qcr7ORra0Ax4WUpCx7lafXsvNCWZ178YlHHxO_gdMAbyPsJVXCZgNQ== Age: 62229

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50248	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	909	OUT	GET /rp.gif?ts=1713925031604&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:17:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50249	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	3236	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A09.977%2B02%3A00&epn.hit_timestamp_unix=1713925029977&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925026772-40-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-40-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2925&tfd=4925&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
2024-04-24 02:17:13 UTC	711	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:13 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 2913ef2aeccc37cb49b1f04b91e04d26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 1G7MrtOh9i97nNRj839XjP1uHTExfAiVMNjPD46f0Vx8xkbZmhDrcg==
2024-04-24 02:17:13 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50251	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	2173	OUT	GET /_next/static/css/3471d3babf255274.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u91u2.p.3.s
2024-04-24 02:17:13 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31554 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:20 GMT ETag: "a5e9e0bd25747c28af2c8919506692ff" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MRT8Rk6Gph7xiSvE4jNS1vC6QafQ_b4eftmKTzH_Pz5UyEJy2FRpng== Age: 154662
2024-04-24 02:17:13 UTC	15784	IN	Data Raw: 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 34 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 Data Ascii: .panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48
2024-04-24 02:17:13 UTC	12998	IN	Data Raw: 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 20 2e 74 61 62 6c 65 2d 64 61 74 61 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 72 65 6d 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 3e 64 69 76 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 39 32 70 78 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 Data Ascii: ion table tbody tr:last-child td .table-data:before{border-bottom:0!important}.PricingFeatureTable__section table tbody tr td{border:0;padding:0;line-height:1.4rem}.PricingFeatureTable__section table tbody tr td>div{min-width:192px}.PricingFeatureTable__s
2024-04-24 02:17:13 UTC	2772	IN	Data Raw: 28 31 39 32 70 78 2c 31 66 72 29 29 3b 2d 6d 6f 7a 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 2e 36 72 65 6d 3b 63 6f 6c 75 6d 6e 2d 67 61 70 3a 2e 36 72 65 6d 3b 72 6f 77 2d 67 61 70 3a 2e 36 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 72 65 6d 29 7b 2e 41 6c 6c 54 69 65 72 43 61 72 64 73 5f 41 6c 6c 54 69 65 72 43 61 72 64 73 5f 5f 50 4c 45 76 4e 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 33 2c 6d 69 6e 6d 61 78 28 31 39 32 70 78 2c 31 66 72 29 29 7d 7d 2e 41 6c 6c 54 69 65 72 43 61 72 64 73 5f 41 6c 6c 54 69 65 72 43 61 72 64 73 5f 5f 70 72 65 6d 69 75 6d 2d 73 75 62 74 69 74 6c 65 5f 5f 5a 72 69 55 30 7b 66 6f 6e 74 2d 66 61 Data Ascii: (192px,1fr));-moz-column-gap:.6rem;column-gap:.6rem;row-gap:.6rem;padding-bottom:40px}}@media(min-width:64rem){.AllTierCards_AllTierCards__PLEvN{grid-template-columns:repeat(3,minmax(192px,1fr))}}.AllTierCards_AllTierCards__premium-subtitle__ZriU0{font-fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50250	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	870	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1333520890.1713925027&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	863	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1333520890.1713925027&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50246	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925031710 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:17:13 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50254	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	2122	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925022.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925029.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u90bv.k.3.n; _dd_s=rum=0&expire=1713925930250&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b
2024-04-24 02:17:13 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:13 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kXT-jWUYi3W9OFzHudj81RlMFAd6xGnaMUC9HxksCkP1T1jYpJuUaQ==
2024-04-24 02:17:13 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50256	13.226.210.58	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	348	OUT	GET / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	542	IN	HTTP/1.1 400 Bad Request Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Date: Wed, 24 Apr 2024 02:17:13 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286ba9-1569905c267ab9b525781de4 Strict-Transport-Security: max-age=15768000 X-Cache: Error from cloudfront Via: 1.1 e0b4c2be9c748aa43f3011ef33d65f4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: eZXatovwQu_tA3L5HzCkX5hicgvQvVHxK19xEkD5yZB_fLA_fgiB4g==
2024-04-24 02:17:13 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50255	18.65.3.83	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:12 UTC	368	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: experiments.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	624	IN	HTTP/1.1 401 Unauthorized Content-Length: 16 Connection: close X-Amzn-Trace-Id: Root=1-66286ba9-5a8fe91178925b064f139f45 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:13 GMT X-Served-By: cache-bfi-kbfi7400102-BFI X-Cache-Hits: 0 X-Timer: S1713925033.245161,VS0,VE11 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin X-Cache: Error from cloudfront Via: 1.1 b384a23a06129a0d0cfb21b9dbc25bd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P1 X-Amz-Cf-Id: xFl6c98vVvpTFF5v1ONHQV9ifX_76wl8M27UbO-hWLIH-VQptNHLSw==
2024-04-24 02:17:13 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50259	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	3535	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.060%2B02%3A00&epn.hit_timestamp_unix=1713925032060&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925026772-81-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2088&tfd=6518&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u920g.t.3.10; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.15; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804
2024-04-24 02:17:13 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:13 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775939; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 2e99c50ac852ccefe05bd3b68d4909c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 8Br1RMN2wgTpqI1wF4tCsPZtTVYIdbqzg-fFjHPT6hlDg78GUY2MnQ==
2024-04-24 02:17:13 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 33 32 37 32 38 34 35 34 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.171392496
2024-04-24 02:17:13 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 33 32 37 32 38 34 35 34 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%
2024-04-24 02:17:13 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 35 34 32 33 37 33 31 32 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;
2024-04-24 02:17:13 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 35 34 32 33 37 33 31 32 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2F
2024-04-24 02:17:13 UTC	1362	IN	Data Raw: 35 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 33 38 33 32 32 37 34 35 39 26 66 73 74 3d 31 37 31 33 39 32 35 30 33 33 33 33 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 54bevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=383227459&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:17:13 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 33 31 36 38 38 35 32 35 34 26 66 73 74 3d 31 37 31 33 39 32 35 30 33 33 33 35 39 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1316885254&fst=1713925033359&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:17:13 UTC	296	IN	Data Raw: 31 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 55 75 78 62 69 79 59 47 64 4a 6c 68 44 48 61 42 68 62 75 59 35 6c 44 52 55 46 55 5a 32 56 4f 34 64 6b 49 78 38 75 79 34 34 73 69 62 54 58 58 31 6a 46 47 34 43 66 38 76 45 68 53 57 58 57 75 4d 37 6f 31 64 6f 48 77 75 25 32 42 73 35 4e 69 7a 4a 5a 4a 39 6c 6a 59 53 78 57 57 72 53 47 30 65 65 37 46 45 42 6b 25 32 46 34 25 32 46 49 4c 70 53 77 25 32 46 62 63 39 4d 44 79 4d 58 30 5a 48 42 38 30 35 66 42 4f 67 61 31 6d 4a 76 4c 31 44 63 25 32 42 78 72 65 36 78 31 6a 71 45 78 57 48 25 32 46 78 6e 55 47 49 25 32 42 67 4e 6c 45 39 46 75 68 48 Data Ascii: 121event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhH
2024-04-24 02:17:13 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50262	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	682	OUT	POST / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 39 61 33 34 37 64 34 30 36 30 39 30 30 64 38 61 61 66 62 37 66 61 38 66 34 61 63 63 39 61 38 66 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 33 31 38 36 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 Data Ascii: checksum=9a347d4060900d8aafb7fa8f4acc9a8f&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925031863%2C%22event_id%22%3A21%2C%22session_id%22%3A1713924976188%2C%2
2024-04-24 02:17:13 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Date: Wed, 24 Apr 2024 02:17:13 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286ba9-27cafbea4feface77d17bf6f Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 ecceab4d19fbcb3c610e6bd7359fd0d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: t3AOACG5V8_6PhIpxG-iScs3auEY0LJ6FXdFyVmNAFgxYPjR0NOOxg==
2024-04-24 02:17:13 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50264	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925032172&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:13 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9236065642354090 Date: Wed, 24 Apr 2024 02:17:13 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:17:13 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50258	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:13 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:13 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: VZQPJHBFXWP6WK8YHG6Z Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:13 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50263	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032173&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:13 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1255634199593714 Date: Wed, 24 Apr 2024 02:17:13 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:13 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50265	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032174&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:13 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1623673428590218 Date: Wed, 24 Apr 2024 02:17:13 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:13 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50266	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	1618	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925032175 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:13 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:13 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1579133686201095 Date: Wed, 24 Apr 2024 02:17:13 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:13 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50261	52.46.151.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:13 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TGJ2Z6NHDQW6HQS2R25M Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50268	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50257	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925032066 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:17:13 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50260	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	2282	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1990 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u920g.t.3.10; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.16
2024-04-24 02:17:13 UTC	1990	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-24 02:17:13 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:13 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:13 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:13 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50269	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925030752&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-58-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:13 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:13 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50270	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	816	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	509	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2874 Connection: close Date: Wed, 24 Apr 2024 02:07:47 GMT Last-Modified: Thu, 15 Feb 2024 11:01:51 GMT ETag: "6dc803641e593e617e0ea42c5820f6c8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ergLC6pW_kpORgXKZtsng6ta3igLKLjWxgMffdIdybk-myr0Nefo4A== Age: 567
2024-04-24 02:17:13 UTC	2874	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50271	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	675	OUT	GET /rp.gif?ts=1713925031604&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:13 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:13 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:17:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50272	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	921	OUT	GET /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1333520890.1713925027&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=1607869942.1713924996 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:13 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50274	13.226.210.58	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	348	OUT	GET / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:14 UTC	542	IN	HTTP/1.1 400 Bad Request Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Date: Wed, 24 Apr 2024 02:17:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286baa-5c4bb82d5a0c14847463a44b Strict-Transport-Security: max-age=15768000 X-Cache: Error from cloudfront Via: 1.1 ecceab4d19fbcb3c610e6bd7359fd0d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: iuDHwwEMfaOMVjF3DI6XRn1dngOa7YK7wcXtFvFiVcdpjPzU7Z_5jw==
2024-04-24 02:17:14 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50273	3.218.116.188	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:14 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50276	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032915&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZIK1V5TWdHRHVOMEdaUmxsc1R1eDBZQ2JzUUpoL1FhWm5TS0cwWksycjZyWnRPekltc0h3VSttZVRXZlAwK1BJS05MRnNMU0FIVnZqNmllYnJlUW1MSWcwY0hlWDhjQkVzMWxYTjB6dWFNVT0mQ3A0c3FXY2RUR1ZXamRoaktoeG5YcUZYdnBjPQ=="; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1039287799736765 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50277	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032917&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZLNkU2KzhWZVZGek9GdFdrNUFESnJJYm5zRDVBTUR6K2R0OHRaSlVkQzVqTkx4dGY4RHdPRVh4NDFxZlZqOEhnUEU2dUFtRjFwNVY2M1JsN2FnS1crZmh5VUZtWk9UVGRIK2hKR1hSOS9xbz0mU0p2b3NjMXNwYjRRRUhFTm9jNkJYdnd0enhBPQ=="; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1209829054311177 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50278	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&cb=1713925032172&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1431372993161397 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:17:14 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50279	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032173&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3234883174652554 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:14 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50281	54.230.21.11	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	696	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:14 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:14 GMT x-amzn-RequestId: bbbbfe5d-51e9-4582-b0ed-81273e26f67c Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 bc94feff0b12b8415f267a7b71eacc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: RSjWWR0KEVQ-Bmlc8kQelLZX8vkGvCSAIbQWnGh7VuSbVyJoF9dfeg==
2024-04-24 02:17:14 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50280	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925032174&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6636200671109661 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:14 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50282	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	1416	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925032175 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzQnpUYnJQT0NDbUpNK09WQlFjUWljWCtVZHZwYVFjZVJCM3RwOGhXVTJhbjcrNkR6V1hSWU1aaWIxNzNpVEU2akNSMTk1a3NmYngzZ05saHh3Z2o5MHlYL3ZSNHRqMmN2REtRSml2ZDl6TT0mZ0x1QzBKS0dCdXZPd2ZJTnpsNC93RVdXdHpJPQ=="
2024-04-24 02:17:14 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3461317809664572 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:17:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50284	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:13 UTC	3257	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713924969&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.060%2B02%3A00&epn.hit_timestamp_unix=1713925032060&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925026772-81-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=2088&tfd=6518&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.18; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804
2024-04-24 02:17:14 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:14 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1163326897.1713924972; Max-Age=7775938; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 fe624e5ec67fb7582d7a2f57fd2d7078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: tgKDPA0Nmu___WwJunsBuT6dz_jhpiH0a5LcQKtAH_DOCpK-OS1F9Q==
2024-04-24 02:17:14 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 32 39 34 37 38 35 32 31 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.171392496
2024-04-24 02:17:14 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 32 39 34 37 38 35 32 31 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1294785213;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%
2024-04-24 02:17:14 UTC	695	IN	Data Raw: 32 62 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 37 30 31 36 37 34 39 36 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 Data Ascii: 2b0event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=701674961;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u
2024-04-24 02:17:14 UTC	627	IN	Data Raw: 32 36 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 37 30 31 36 37 34 39 36 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 38 30 34 34 35 31 36 30 35 2e 31 37 31 33 39 32 34 39 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 Data Ascii: 26cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=701674961;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fw
2024-04-24 02:17:14 UTC	1362	IN	Data Raw: 35 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 32 30 33 37 37 36 37 30 32 26 66 73 74 3d 31 37 31 33 39 32 35 30 33 34 33 30 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 54bevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=203776702&fst=1713925034300&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:17:14 UTC	689	IN	Data Raw: 32 61 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 35 31 32 39 30 35 32 31 35 26 66 73 74 3d 31 37 31 33 39 32 35 30 33 34 33 32 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2aaevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1512905215&fst=1713925034322&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:17:14 UTC	369	IN	Data Raw: 31 36 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 58 4b 45 52 68 49 69 51 64 4c 69 64 63 65 30 55 73 57 32 49 35 42 6c 34 6f 73 74 47 72 45 34 56 34 32 77 37 6e 25 32 42 4b 25 32 42 43 39 4d 35 5a 25 32 46 6e 34 6f 67 48 69 6b 38 68 65 25 32 42 56 4c 25 32 42 48 36 76 4f 79 59 67 74 39 70 4f 42 48 52 53 30 79 71 79 41 7a 44 71 64 57 54 4e 59 25 32 42 6e 44 37 4f 69 74 25 32 42 77 53 54 31 4e 78 6b 4d 71 64 79 57 74 25 32 42 6d 50 59 57 4b 6d 57 50 34 50 53 54 54 4b 25 32 42 54 37 36 4c 50 48 42 63 6e 34 32 49 6d 78 6a 54 4b 34 56 49 36 63 56 73 4c 54 6b 4d 70 25 32 46 72 50 77 35 38 Data Ascii: 16aevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=XKERhIiQdLidce0UsW2I5Bl4ostGrE4V42w7n%2BK%2BC9M5Z%2Fn4ogHik8he%2BVL%2BH6vOyYgt9pOBHRS0yqyAzDqdWTNY%2BnD7Oit%2BwST1NxkMqdyWt%2BmPYWKmWP4PSTTK%2BT76LPHBcn42ImxjTK4VI6cVsLTkMp%2FrPw58
2024-04-24 02:17:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50287	142.250.101.156	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	956	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&gjid=1575304580&_gid=365053505.1713924969&_u=SACAAUABAAAAACgFKgC~&z=1600751533 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://wetransfer.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:14 UTC	592	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:17:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:14 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50283	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:14 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: WEN6BY3KDQX2HEAD4DE1 Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:14 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50288	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	736	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/2/bundle.4507bb975b4fb0667dff.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:14 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 217740 Connection: close Date: Wed, 24 Apr 2024 02:17:15 GMT Last-Modified: Thu, 15 Feb 2024 11:01:51 GMT ETag: "ef2d82dd3b036301486a6404bb563eea" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 27f8684163b0b232d220b4ced517da20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: btmySn4q4KIF52cVrG6J9-Xmuzd7VS7kZh8MeCxPuM2s1d0gJC8aZQ==
2024-04-24 02:17:14 UTC	15507	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 34 35 30 37 62 62 39 37 35 62 34 66 62 30 36 36 37 64 66 66 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 37 32 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 63 69 72 63 6c 65 46 69 6c 6c 65 64 2f 69 6e 64 65 78 2e 6a 73 22 3a 38 36 39 36 2c 22 2e 2f 63 69 72 63 6c 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 36 35 39 36 2c 22 2e 2f 64 65 66 61 75 6c 74 2f 69 6e 64 65 78 2e 6a 73 22 3a 37 34 32 38 2c 22 2e 2f 73 71 75 61 72 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 33 31 32 7d 3b Data Ascii: /! For license information please see bundle.4507bb975b4fb0667dff.js.LICENSE.txt /!function(){var t,e,n={7296:function(t,e,n){var r={"./circleFilled/index.js":8696,"./circleStroke/index.js":6596,"./default/index.js":7428,"./squareStroke/index.js":312};
2024-04-24 02:17:14 UTC	1498	IN	Data Raw: 33 20 39 2e 34 31 37 34 34 20 31 38 2e 39 37 32 39 20 39 2e 36 39 35 38 34 20 31 39 2e 31 31 36 39 20 31 30 2e 30 32 32 32 43 31 39 2e 32 36 30 39 20 31 30 2e 33 33 39 20 31 39 2e 33 35 36 39 20 31 30 2e 36 38 39 34 20 31 39 2e 34 30 34 39 20 31 31 2e 30 37 33 34 4c 31 37 2e 33 37 34 35 20 31 31 2e 33 34 37 43 31 37 2e 33 32 36 35 20 31 30 2e 39 36 33 20 31 37 2e 32 31 36 31 20 31 30 2e 36 35 35 38 20 31 37 2e 30 34 33 33 20 31 30 2e 34 32 35 34 43 31 36 2e 38 37 30 35 20 31 30 2e 31 38 35 34 20 31 36 2e 35 37 32 39 20 31 30 2e 30 36 35 34 20 31 36 2e 31 35 30 35 20 31 30 2e 30 36 35 34 43 31 35 2e 38 34 33 33 20 31 30 2e 30 36 35 34 20 31 35 2e 35 38 38 39 20 31 30 2e 31 33 32 36 20 31 35 2e 33 38 37 33 20 31 30 2e 32 36 37 43 31 35 2e 31 38 35 37 20 31 Data Ascii: 3 9.41744 18.9729 9.69584 19.1169 10.0222C19.2609 10.339 19.3569 10.6894 19.4049 11.0734L17.3745 11.347C17.3265 10.963 17.2161 10.6558 17.0433 10.4254C16.8705 10.1854 16.5729 10.0654 16.1505 10.0654C15.8433 10.0654 15.5889 10.1326 15.3873 10.267C15.1857 1
2024-04-24 02:17:15 UTC	16384	IN	Data Raw: 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 5c 6e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 32 22 20 63 79 3d 22 31 32 22 20 72 3d 22 31 31 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 46 39 46 39 46 39 22 2f 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 2e 30 38 36 34 33 20 31 34 2e 31 31 36 33 43 36 2e 30 38 36 34 33 20 31 34 2e 34 31 35 35 20 36 2e 33 32 38 39 38 20 31 34 2e 36 35 38 20 36 2e 36 32 38 31 38 20 31 34 2e 36 35 38 48 31 30 2e 37 38 31 33 4c 31 33 2e 38 38 32 38 20 31 37 2e 34 30 34 38 43 31 34 2e 30 Data Ascii: 0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">\n<circle cx="12" cy="12" r="11.5" stroke="#F9F9F9"/>\n <path fill-rule="evenodd" clip-rule="evenodd" d="M6.08643 14.1163C6.08643 14.4155 6.32898 14.658 6.62818 14.658H10.7813L13.8828 17.4048C14.0
2024-04-24 02:17:15 UTC	1024	IN	Data Raw: 32 35 20 30 2e 34 35 32 36 33 37 43 31 32 2e 37 33 31 33 20 30 2e 34 35 32 36 33 37 20 31 33 2e 31 37 32 39 20 30 2e 35 31 39 38 33 37 20 31 33 2e 35 34 37 33 20 30 2e 36 35 34 32 33 37 43 31 33 2e 39 33 31 33 20 30 2e 37 37 39 30 33 37 20 31 34 2e 32 35 32 39 20 30 2e 39 35 36 36 33 37 20 31 34 2e 35 31 32 31 20 31 2e 31 38 37 30 34 43 31 34 2e 37 37 31 33 20 31 2e 34 31 37 34 34 20 31 34 2e 39 37 32 39 20 31 2e 36 39 35 38 34 20 31 35 2e 31 31 36 39 20 32 2e 30 32 32 32 34 43 31 35 2e 32 36 30 39 20 32 2e 33 33 39 30 34 20 31 35 2e 33 35 36 39 20 32 2e 36 38 39 34 34 20 31 35 2e 34 30 34 39 20 33 2e 30 37 33 34 34 4c 31 33 2e 33 37 34 35 20 33 2e 33 34 37 30 34 43 31 33 2e 33 32 36 35 20 32 2e 39 36 33 30 34 20 31 33 2e 32 31 36 31 20 32 2e 36 35 35 38 Data Ascii: 25 0.452637C12.7313 0.452637 13.1729 0.519837 13.5473 0.654237C13.9313 0.779037 14.2529 0.956637 14.5121 1.18704C14.7713 1.41744 14.9729 1.69584 15.1169 2.02224C15.2609 2.33904 15.3569 2.68944 15.4049 3.07344L13.3745 3.34704C13.3265 2.96304 13.2161 2.6558
2024-04-24 02:17:15 UTC	15841	IN	Data Raw: 33 30 32 30 37 20 30 2e 32 32 36 35 36 33 4c 31 30 2e 37 31 36 33 20 31 2e 36 34 30 37 38 4c 37 2e 32 34 36 35 32 20 35 2e 31 31 30 35 34 4c 31 30 2e 39 31 38 35 20 38 2e 37 38 32 35 34 4c 39 2e 35 30 34 33 31 20 31 30 2e 31 39 36 38 4c 35 2e 38 33 32 33 31 20 36 2e 35 32 34 37 36 4c 32 2e 31 36 30 33 31 20 31 30 2e 31 39 36 38 4c 30 2e 37 34 36 30 39 34 20 38 2e 37 38 32 35 34 4c 34 2e 34 31 38 30 39 20 35 2e 31 31 30 35 34 4c 30 2e 39 34 38 33 32 37 20 31 2e 36 34 30 37 38 4c 32 2e 33 36 32 35 34 20 30 2e 32 32 36 35 36 32 5a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 5c 6e 3c 2f 73 76 67 3e 5c 6e 5c 6e 27 2c 73 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 Data Ascii: 30207 0.226563L10.7163 1.64078L7.24652 5.11054L10.9185 8.78254L9.50431 10.1968L5.83231 6.52476L2.16031 10.1968L0.746094 8.78254L4.41809 5.11054L0.948327 1.64078L2.36254 0.226562Z" fill="white"/>\n</svg>\n\n',s='<svg width="14" height="12" viewBox="0 0 14
2024-04-24 02:17:15 UTC	16384	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 73 2c 61 3b 69 28 74 29 3b 74 72 79 7b 69 66 28 21 28 73 3d 6f 28 74 2c 22 72 65 74 75 72 6e 22 29 29 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 3b 72 65 74 75 72 6e 20 6e 7d 73 3d 72 28 73 2c 74 29 7d 63 61 74 63 68 28 74 29 7b 61 3d 21 30 2c 73 3d 74 7d 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 3b 69 66 28 61 29 74 68 72 6f 77 20 73 3b 72 65 74 75 72 6e 20 69 28 73 29 2c 6e 7d 7d 2c 38 36 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 33 38 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 Data Ascii: exports=function(t,e,n){var s,a;i(t);try{if(!(s=o(t,"return"))){if("throw"===e)throw n;return n}s=r(s,t)}catch(t){a=!0,s=t}if("throw"===e)throw n;if(a)throw s;return i(s),n}},8672:function(t){"use strict";t.exports={}},3816:function(t,e,n){"use strict";va
2024-04-24 02:17:15 UTC	16384	IN	Data Raw: 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 36 35 32 29 2c 69 3d 6e 28 39 35 32 30 29 2c 6f 3d 6e 28 33 35 34 38 29 2c 73 3d 6e 28 35 39 33 32 29 3b 72 28 7b 74 61 72 67 65 74 3a 22 53 65 74 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 21 30 7d 2c 7b 69 73 44 69 73 6a 6f 69 6e 74 46 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 73 2c 74 68 69 73 2c 6f 28 74 29 29 7d 7d 29 7d 2c 38 37 39 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 36 35 32 29 2c 69 3d 6e 28 39 35 32 30 29 2c 6f 3d 6e 28 33 35 34 38 29 2c 73 3d 6e 28 32 30 38 29 3b 72 28 7b 74 61 72 67 65 74 3a 22 53 65 74 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 Data Ascii: ct";var r=n(3652),i=n(9520),o=n(3548),s=n(5932);r({target:"Set",proto:!0,real:!0,forced:!0},{isDisjointFrom:function(t){return i(s,this,o(t))}})},8795:function(t,e,n){"use strict";var r=n(3652),i=n(9520),o=n(3548),s=n(208);r({target:"Set",proto:!0,real:!0
2024-04-24 02:17:15 UTC	16384	IN	Data Raw: 73 69 6e 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 31 21 3d 3d 74 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 Data Ascii: sin,Q=function(t){return"string"==typeof t},Y=function(t){return"function"==typeof t},P=function(t){return"number"==typeof t},B=function(t){return void 0===t},U=function(t){return"object"==typeof t},R=function(t){return!1!==t},V=function(){return"undefine
2024-04-24 02:17:15 UTC	1514	IN	Data Raw: 74 28 74 29 7b 74 68 69 73 2e 76 61 72 73 3d 74 2c 74 68 69 73 2e 5f 64 65 6c 61 79 3d 2b 74 2e 64 65 6c 61 79 7c 7c 30 2c 28 74 68 69 73 2e 5f 72 65 70 65 61 74 3d 74 2e 72 65 70 65 61 74 3d 3d 3d 31 2f 30 3f 2d 32 3a 74 2e 72 65 70 65 61 74 7c 7c 30 29 26 26 28 74 68 69 73 2e 5f 72 44 65 6c 61 79 3d 74 2e 72 65 70 65 61 74 44 65 6c 61 79 7c 7c 30 2c 74 68 69 73 2e 5f 79 6f 79 6f 3d 21 21 74 2e 79 6f 79 6f 7c 7c 21 21 74 2e 79 6f 79 6f 45 61 73 65 29 2c 74 68 69 73 2e 5f 74 73 3d 31 2c 71 74 28 74 68 69 73 2c 2b 74 2e 64 75 72 61 74 69 6f 6e 2c 31 2c 31 29 2c 74 68 69 73 2e 64 61 74 61 3d 74 2e 64 61 74 61 2c 67 26 26 28 74 68 69 73 2e 5f 63 74 78 3d 67 2c 67 2e 64 61 74 61 2e 70 75 73 68 28 74 68 69 73 29 29 2c 62 7c 7c 53 65 2e 77 61 6b 65 28 29 7d 76 Data Ascii: t(t){this.vars=t,this._delay=+t.delay\|\|0,(this._repeat=t.repeat===1/0?-2:t.repeat\|\|0)&&(this._rDelay=t.repeatDelay\|\|0,this._yoyo=!!t.yoyo\|\|!!t.yoyoEase),this._ts=1,qt(this,+t.duration,1,1),this.data=t.data,g&&(this._ctx=g,g.data.push(this)),b\|\|Se.wake()}v
2024-04-24 02:17:15 UTC	16384	IN	Data Raw: 74 68 69 73 2e 5f 74 69 6d 65 7d 2c 65 2e 74 6f 74 61 6c 50 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2a 74 2c 65 29 3a 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 3f 4d 61 74 68 2e 6d 69 6e 28 31 2c 74 68 69 73 2e 5f 74 54 69 6d 65 2f 74 68 69 73 2e 5f 74 44 75 72 29 3a 74 68 69 73 2e 72 61 77 54 69 6d 65 28 29 3e 30 3f 31 3a 30 7d 2c 65 2e 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 64 Data Ascii: this._time},e.totalProgress=function(t,e){return arguments.length?this.totalTime(this.totalDuration()*t,e):this.totalDuration()?Math.min(1,this._tTime/this._tDur):this.rawTime()>0?1:0},e.progress=function(t,e){return arguments.length?this.totalTime(this.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50285	52.46.143.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; ad-privacy=0
2024-04-24 02:17:14 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 5FTCCQKE00XKX8AR5B1S Set-Cookie: ad-id=AxazYYKWDklptZLKhKSwzgY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:17:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:17:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50275	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925031710 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:17:14 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 35 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"15","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-24 02:17:14 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:17:14 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:14 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50286	35.71.131.137	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	1088	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCP6v2Z3sg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:17:14 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=6d82518a-0475-4dd1-bfd6-a190e79459eb; expires=Thu, 24 Apr 2025 02:17:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIyKDcyNOD8jwQBRIWCgdydWJpY29uEgsIpoWir9OD8jwQBRIVCgZjYXNhbGUSCwiEo6Kv04PyPBAFEhgKCWJpZHN3aXRjaBILCL62vp3Ug_I8EAUSFwoIcHVibWF0aWMSCwiU3b6d1IPyPBAFGAUoAzILCNDb67Psg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:17:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:17:14 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50293	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	2585	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.18; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _dd_s=rum=0&expire=1713925933369&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:14 UTC	131	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 37 35 35 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":2755.2999999999884,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:14 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Wed, 24 Apr 2024 02:17:14 GMT ETag: "38-QDxLSw7RfQWGDpNri1KUGg10KTo" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hbDCEWewvX2lO9O2KDnCJguwljMDRAGzAfzNVNJyg2fNL26YNvuB2g==
2024-04-24 02:17:14 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 32 37 35 35 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"LCP","time":2755.2999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50290	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925032066 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:17:14 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 35 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 66 39 33 66 63 63 64 38 2d 33 62 62 31 2d 34 38 36 64 2d 39 38 37 37 2d 33 62 62 66 65 38 66 36 37 32 33 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"15","td_version":"3.0.0","td_client_id":"f93fccd8-3bb1-486d-9877-3bbfe8f6723b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-24 02:17:15 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130; Path=/; Expires=Fri, 24 Apr 2026 02:17:14 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:15 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50295	18.154.206.35	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	701	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6c07a28ff53ed915f74a27fe90616d61" If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
2024-04-24 02:17:14 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:17:14 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 17bb6e07471ff75cf9b6580236b364a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: kUXZoUUM5GDJ6fN2r0swMgTq2Y69auAdX7qiNoPbpU_pe-8rLdBBLw== Age: 82951

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50296	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032915&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZLNkU2KzhWZVZGek9GdFdrNUFESnJJYm5zRDVBTUR6K2R0OHRaSlVkQzVqTkx4dGY4RHdPRVh4NDFxZlZqOEhnUEU2dUFtRjFwNVY2M1JsN2FnS1crZmh5VUZtWk9UVGRIK2hKR1hSOS9xbz0mU0p2b3NjMXNwYjRRRUhFTm9jNkJYdnd0enhBPQ=="
2024-04-24 02:17:14 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZaT0UwM1EzNnBmZTc4bXZpUWVVdjVhbVZTdis0aG1xTGpGU0ZHbUs3Mk80YzFsa2wxS2dic2VHV1BtWEtyRCt2WnhHbU5pVnVhTytxOWttQzcrVzgxM3luRmdZUWJjVTJrQVo0VnRJZTFCbz0mNDBhSGVhTmhFZFNSWUlLMUlsRzZOd1ZpTFdnPQ=="; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1038937312104736 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:17:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50297	151.101.0.84	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925032917&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZLNkU2KzhWZVZGek9GdFdrNUFESnJJYm5zRDVBTUR6K2R0OHRaSlVkQzVqTkx4dGY4RHdPRVh4NDFxZlZqOEhnUEU2dUFtRjFwNVY2M1JsN2FnS1crZmh5VUZtWk9UVGRIK2hKR1hSOS9xbz0mU0p2b3NjMXNwYjRRRUhFTm9jNkJYdnd0enhBPQ=="
2024-04-24 02:17:14 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYzSFl5eFBJSVRZTHBWRlpWLzFHSDRoQVc3cG5nRUd3VVFuTFZ1TitMUis3bnc1Undhcm9vM3cwYU04RStwT20rK0o5VmxyZ3lBNzJueTB5b1Vrb00rbkQvOXZHUGljV2R5SWw3bWJvTFNPTT0mVEhCa3BiQkhSNXlSalFSRUs4SForWkdPWHpJPQ=="; Expires=Thu, 24 Apr 2025 02:17:14 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1549594951275361 Date: Wed, 24 Apr 2024 02:17:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:17:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50298	54.230.21.79	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925032068 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:14 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:14 GMT x-amzn-RequestId: d5a605b8-46ed-44e2-8448-f519112009db X-Cache: Miss from cloudfront Via: 1.1 cfd5acc340687606c6a8d56bb1560902.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: eIA3nmFEF_l3StNaItT0vjuwSyIGvDV7r0PZIYZMDuoGjBfYVncBsg==
2024-04-24 02:17:14 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50294	44.195.207.107	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:15 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:17:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-089a54c37e6cd2197 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:17:15 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50299	142.250.101.156	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	708	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&gjid=1575304580&_gid=365053505.1713924969&_u=SACAAUABAAAAACgFKgC~&z=1600751533 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:15 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:17:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:15 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50291	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	2282	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.18; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804
2024-04-24 02:17:14 UTC	3458	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 30 62 36 34 30 65 61 38 2d 64 31 30 37 2d 34 62 37 66 2d 62 35 31 37 2d 34 35 61 61 65 32 62 62 30 62 35 30 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/?trk=NAV_pricing","eid":"0b640ea8-d107-4b7f-b517-45aae2bb0b50","tv":"js-3.23.0","tna":"co","aid
2024-04-24 02:17:15 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:15 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:15 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:15 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50292	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	2011	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925032.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.18; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804
2024-04-24 02:17:15 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:15 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50301	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	2585	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _dd_s=rum=0&expire=1713925933369&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:14 UTC	102	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 33 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":32,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:15 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Wed, 24 Apr 2024 02:17:15 GMT ETag: "28-ZVFQrT0rF8gdqRMOOwAK2A35zoQ" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zEnn7gwC8V1cjSH9Y_EnHclfPRT8p5OMRO3sdpw3E4qVgsvfQsyeGg==
2024-04-24 02:17:15 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 33 32 7d Data Ascii: {"status":"ok","metric":"INP","time":32}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50302	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:14 UTC	2585	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _dd_s=rum=0&expire=1713925933369&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:14 UTC	120	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 34 34 38 30 30 30 37 30 34 39 36 36 31 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.008644800070496615,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:15 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Wed, 24 Apr 2024 02:17:15 GMT ETag: "3a-B3C2yJMxmuKsTpXZ97zwurRTrc8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1V7U6dxMYbI4H5iodMr80PLsv9KhWFwbrlytjXBQRXBxHPRyN8dcJA==
2024-04-24 02:17:15 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 34 34 38 30 30 30 37 30 34 39 36 36 31 35 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.008644800070496615}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50304	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	2145	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:15 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:15 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C32X4qO7kM-FsGrJkh4tVcJF0QyZK7GBzErzl6_ODQ3d3QSGe56TXA==
2024-04-24 02:17:15 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50300	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	2281	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:15 UTC	980	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 22 2c 22 70 61 67 65 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84","page":"/downloads/04c739eb07109cb2a1e7a9e50e8b62bd2024042308505
2024-04-24 02:17:15 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:15 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:15 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:15 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50305	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:17:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50307	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	2192	OUT	GET /_next/static/chunks/pricing.7575d8b9ff1b3b50.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:15 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 46090 Connection: close Date: Mon, 22 Apr 2024 19:07:22 GMT Last-Modified: Mon, 22 Apr 2024 17:44:43 GMT ETag: "6d2b1124d8d986d756b08f0472fafe16" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kfP8jK3LTipkjc-LYxsT4fzQJ4WhfOBi5wsV5Gb367kHVe2ISoepFQ== Age: 112194
2024-04-24 02:17:15 UTC	15777	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 31 37 5d 2c 7b 35 36 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 72 2c 7b 45 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 65 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 78 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google
2024-04-24 02:17:15 UTC	213	IN	Data Raw: 75 6d 6e 22 7d 2c 61 65 2e 66 72 65 65 2c 61 65 2e 70 72 6f 2c 6c 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 66 65 61 74 75 72 65 5f 74 61 62 6c 65 2e 70 6f 72 74 61 6c 73 2e 66 65 61 74 75 72 65 73 2e 66 65 61 74 75 72 65 5f 32 22 29 2c 74 6f 6f 6c 74 69 70 3a 6d 2e 5a 2e 74 28 22 22 2e 63 6f 6e 63 61 74 28 70 65 2c 22 2e 74 6f 6f 6c 74 69 70 5f 35 22 29 29 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c 75 6d 6e 22 7d 2c 74 65 2e 66 72 65 65 2c 6c 2c 6c 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 66 65 61 Data Ascii: umn"},ae.free,ae.pro,l],[{label:m.Z.t("page.pricing_panel.feature_table.portals.features.feature_2"),tooltip:m.Z.t("".concat(pe,".tooltip_5")),type:"FirstColumn"},te.free,l,l],[{label:m.Z.t("page.pricing_panel.fea
2024-04-24 02:17:15 UTC	14700	IN	Data Raw: 74 75 72 65 5f 74 61 62 6c 65 2e 70 6f 72 74 61 6c 73 2e 66 65 61 74 75 72 65 73 2e 66 65 61 74 75 72 65 5f 33 22 29 2c 74 6f 6f 6c 74 69 70 3a 6d 2e 5a 2e 74 28 22 22 2e 63 6f 6e 63 61 74 28 70 65 2c 22 2e 74 6f 6f 6c 74 69 70 5f 36 22 29 29 2c 6e 6f 42 6f 72 64 65 72 3a 21 30 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c 75 6d 6e 22 7d 2c 4b 2e 69 73 4f 6e 28 29 3f 22 43 68 65 63 6b 6d 61 72 6b 49 63 6f 6e 22 3a 22 43 6c 6f 73 65 49 63 6f 6e 22 2c 22 43 68 65 63 6b 6d 61 72 6b 49 63 6f 6e 22 2c 22 43 68 65 63 6b 6d 61 72 6b 49 63 6f 6e 22 5d 2c 5b 7b 6e 6f 42 6f 72 64 65 72 3a 21 30 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c 75 6d 6e 22 7d 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 Data Ascii: ture_table.portals.features.feature_3"),tooltip:m.Z.t("".concat(pe,".tooltip_6")),noBorder:!0,type:"FirstColumn"},K.isOn()?"CheckmarkIcon":"CloseIcon","CheckmarkIcon","CheckmarkIcon"],[{noBorder:!0,type:"FirstColumn"},"","",""],[{label:m.Z.t("page.pricing
2024-04-24 02:17:16 UTC	12792	IN	Data Raw: 29 2e 53 6b 69 70 4c 69 6e 6b 5f 5f 62 75 74 74 6f 6e 2c 6f 6e 43 6c 69 63 6b 3a 72 2c 63 68 69 6c 64 72 65 6e 3a 5b 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 73 6b 69 70 5f 6c 69 6e 6b 22 29 2c 28 30 2c 61 2e 6a 73 78 29 28 75 2e 67 36 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 41 65 28 29 2e 53 6b 69 70 4c 69 6e 6b 5f 5f 61 72 72 6f 77 7d 29 5d 7d 29 7d 29 7d 2c 71 65 3d 69 28 38 30 34 39 30 29 2c 55 65 3d 69 2e 6e 28 71 65 29 2c 42 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 68 2e 76 39 29 28 43 2e 57 38 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 55 65 28 29 2e 50 72 69 63 69 6e 67 48 65 72 6f 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 Data Ascii: ).SkipLink__button,onClick:r,children:[m.Z.t("page.pricing_panel.skip_link"),(0,a.jsx)(u.g6,{className:Ae().SkipLink__arrow})]})})},qe=i(80490),Ue=i.n(qe),Be=function(){var e=(0,h.v9)(C.W8);return(0,a.jsxs)("div",{className:Ue().PricingHero,children:[(0,a
2024-04-24 02:17:16 UTC	2608	IN	Data Raw: 72 43 61 72 64 5f 54 69 65 72 43 61 72 64 5f 5f 6d 6f 6e 74 68 50 72 69 63 65 5f 5f 4d 35 69 45 50 22 2c 54 69 65 72 43 61 72 64 5f 5f 6d 6f 6e 74 68 50 72 69 63 65 5f 5f 6b 72 6f 6e 61 3a 22 54 69 65 72 43 61 72 64 5f 54 69 65 72 43 61 72 64 5f 5f 6d 6f 6e 74 68 50 72 69 63 65 5f 5f 6b 72 6f 6e 61 5f 5f 30 71 61 37 53 22 2c 54 69 65 72 43 61 72 64 5f 5f 6d 6f 6e 74 68 50 72 69 63 65 5f 5f 64 6f 6c 6c 61 72 73 3a 22 54 69 65 72 43 61 72 64 5f 54 69 65 72 43 61 72 64 5f 5f 6d 6f 6e 74 68 50 72 69 63 65 5f 5f 64 6f 6c 6c 61 72 73 5f 5f 34 79 4d 7a 54 22 2c 54 69 65 72 43 61 72 64 5f 5f 68 65 61 64 65 72 3a 22 54 69 65 72 43 61 72 64 5f 54 69 65 72 43 61 72 64 5f 5f 68 65 61 64 65 72 5f 5f 4a 6d 49 6d 74 22 2c 54 69 65 72 43 61 72 64 5f 5f 73 75 62 74 69 74 Data Ascii: rCard_TierCard__monthPrice__M5iEP",TierCard__monthPrice__krona:"TierCard_TierCard__monthPrice__krona__0qa7S",TierCard__monthPrice__dollars:"TierCard_TierCard__monthPrice__dollars__4yMzT",TierCard__header:"TierCard_TierCard__header__JmImt",TierCard__subtit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50308	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:15 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50303	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925031710 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:17:15 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:15 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:15 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50310	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	909	OUT	GET /rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:15 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:17:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50309	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	1033	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:16 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:16 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:16 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:16 UTC	4	IN	Data Raw: 60 82 0d 0a Data Ascii: `
2024-04-24 02:17:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50311	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	956	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50313	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	753	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-24 02:17:16 UTC	573	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 1112240 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:13:48 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding Content-Range: bytes 0-1112239/1112240 X-Cache: Hit from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: VMJ_DL34cmVaE8jBw-iO6IEk_uqtY1_4hKFMFyxPgMVb9GQk_dEL5Q== Age: 569
2024-04-24 02:17:16 UTC	15811	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 10 e8 15 6d 64 61 74 21 00 03 40 68 1c 21 00 03 40 68 1c 21 00 03 40 68 1c 00 00 02 72 06 05 ff ff 6e dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 31 30 30 20 65 64 30 66 37 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 Data Ascii: ftypmp42mp42iso2avc1mp41freemdat!@h!@h!@hrnEH, #x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3
2024-04-24 02:17:16 UTC	16384	IN	Data Raw: bf ab d1 1b 8f 0a fb d2 86 cd 0f bf da 54 67 95 55 a5 b5 7e d0 b8 26 aa 8c 6f 85 f6 c1 7d 23 a6 b8 c7 bc a5 62 cf b7 8b 74 bc 2a 5e 9c 27 d8 e2 60 2d ae 52 c0 5e 3f bc c6 cc 8a be 24 c2 2b f2 20 67 fc f5 f9 c2 f5 02 19 04 9b 18 ac 48 f0 0d 52 25 39 d4 10 ed f4 75 2b 59 94 18 10 28 8e 39 19 74 06 cc 36 40 2b 35 5a b6 8b 4b 9e 3a 04 87 12 e9 5d 6c 6a 5c 3c 01 04 19 5a 55 de e1 41 05 c8 d0 dd b7 2d 2a 48 5b f5 6f 60 d3 9f 85 ce 05 e5 c1 d6 0b a3 d8 85 8b d8 c6 93 96 ec b5 60 21 8d a9 2a 52 31 74 b0 9a 70 0d 9b c3 1a 42 67 fc 6e df e8 02 78 74 11 52 63 b7 b4 9c 31 69 cb 5b 53 f4 ab ce 84 e7 e2 c1 8a 4a 70 64 dc 56 2c 84 2b 04 98 a4 c5 d8 db 78 ba 89 97 53 1d d1 5f 9b f2 6f ce 87 a8 06 f0 63 35 dd 1f f6 61 00 0f db 34 dd a1 c6 cf ee 6d a9 4f a7 13 d3 2d 6a 9a Data Ascii: TgU~&o}#bt^'`-R^?$+ gHR%9u+Y(9t6@+5ZK:]lj\<ZUA-H[o``!*R1tpBgnxtRc1i[SJpdV,+xS_oc5a4mO-j
2024-04-24 02:17:16 UTC	16384	IN	Data Raw: 3c a3 3c 3b 29 e6 9b 17 62 f6 f7 4b c4 34 ab 8d 64 66 60 b7 87 08 57 14 4b 07 5f 4f 8f d1 bd 14 a5 6e be 60 c2 11 d5 44 49 e5 85 f2 01 eb 3b 5f d7 15 de 70 cb ed da 97 82 f0 9c 88 bd 50 54 67 62 e3 60 17 f5 bf 3c 47 de 3a e5 2b 69 f3 3b 23 91 f0 2d 1e 61 fd fe 71 28 9e ac 04 36 c5 d2 18 8a 51 0a 24 b4 6c 3a b6 bf 6d 2a 0b 6c 1a 60 21 79 c9 03 b0 13 c1 21 58 48 1c 74 e8 e1 56 7b 35 64 32 da b7 54 53 a4 ec bc 91 5d 91 2c 07 a3 16 35 cb 5e 20 00 63 b1 c7 55 2c 63 68 1e 3f 59 60 d2 b0 1c 05 20 3b 9e 1a e4 b9 24 20 1f cd 6f a3 34 b5 3e 5a 8f 93 44 7f cd af 0e 57 23 20 4c a5 55 82 17 61 14 38 80 bb f0 44 3e 1d 12 bb 75 d8 cf 00 ac 68 59 71 8f c9 1a 1c 2f d5 e7 d6 6c 31 01 26 c2 e2 75 2e 6b cb 0d 0f a1 74 b1 fc 7c a7 eb 3c 78 b0 66 1a d5 a8 2c 85 d4 8c 4c cc 3f Data Ascii: <<;)bK4df`WK_On`DI;_pPTgb`<G:+i;#-aq(6Q$l:m*l`!y!XHtV{5d2TS],5^ cU,ch?Y` ;$ o4>ZDW# LUa8D>uhYq/l1&u.kt\|<xf,L?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50315	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	1008	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:16 UTC	951	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50316	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	2145	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:16 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:16 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JEZlWdtnFM3O8F2rVpWfM1qJXrve_dFaEvBLgEXs4EfZccYTVzs3xA==
2024-04-24 02:17:16 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50306	3.126.72.131	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925032066 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=b3ca891b-9a06-402e-b7b8-61086500d130
2024-04-24 02:17:16 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:16 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:16 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50312	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:15 UTC	2011	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:16 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:16 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50318	18.65.25.15	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	805	OUT	GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Video__Intro_video HTTP/1.1 Host: cdn.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51078 Connection: close Last-Modified: Thu, 18 Apr 2024 10:51:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:17 GMT Cache-Control: max-age=900 ETag: "cfc33ecafe0a3d20ed59ba16c0be3987" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 40dcbda4bd91e45eab647af7e1631a5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: _4O47OS4G2coSerzwMjBFF8OA7ryCH0xFSbcwbPtq1yzh0RzZ2d_Jg== Vary: Origin
2024-04-24 02:17:16 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 7d 2c 65 28 74 2c 69 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: (()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"
2024-04-24 02:17:16 UTC	16384	IN	Data Raw: 2e 5f 65 72 72 6f 72 2c 61 2e 5f 63 6f 6d 70 6c 65 74 65 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 65 72 72 6f 72 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 3a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 74 65 2c 61 7d 72 65 74 75 72 6e 20 74 28 69 2c 65 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 69 66 28 21 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 7c 7c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 73 65 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e Data Ascii: ._error,a._complete=r?function(){try{r()}catch(e){t.error(e)}finally{this.unsubscribe()}}:e.prototype._complete,a}return t(i,e),i.prototype.unsubscribe=function(){var t;if(!this.shouldUnsubscribe\|\|this.shouldUnsubscribe()){var i=this.closed;e.prototype.un
2024-04-24 02:17:17 UTC	16384	IN	Data Raw: 7b 63 6f 6e 73 74 20 65 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 66 72 61 6d 65 28 29 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 6f 70 2e 70 61 67 65 59 4f 66 66 73 65 74 3f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 3f 28 65 2e 79 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 2c 65 2e 78 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 Data Ascii: {const e={x:0,y:0};return this.isIframe()\|\|"number"!=typeof top.pageYOffset?document.body&&(document.body.scrollLeft\|\|document.body.scrollTop)?(e.y=document.body.scrollTop,e.x=document.body.scrollLeft):document.documentElement&&(document.documentElement.s
2024-04-24 02:17:17 UTC	1926	IN	Data Raw: 65 69 67 68 74 28 29 7d 67 65 74 41 64 45 78 70 61 6e 64 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 45 78 70 61 6e 64 65 64 28 29 7d 67 65 74 41 64 53 6b 69 70 70 61 62 6c 65 53 74 61 74 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 53 6b 69 70 70 61 62 6c 65 53 74 61 74 65 28 29 7d 67 65 74 41 64 52 65 6d 61 69 6e 69 6e 67 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 52 65 6d 61 69 6e 69 6e 67 54 69 6d 65 28 29 7d 67 65 74 41 64 44 75 72 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 69 76 65 2e 67 65 74 41 64 44 75 72 61 74 69 6f 6e 28 29 7d 67 65 74 41 64 56 6f 6c 75 6d 65 28 29 Data Ascii: eight()}getAdExpanded(){return this.creative.getAdExpanded()}getAdSkippableState(){return this.creative.getAdSkippableState()}getAdRemainingTime(){return this.creative.getAdRemainingTime()}getAdDuration(){return this.creative.getAdDuration()}getAdVolume()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50314	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	2988	OUT	GET /i.gif?e=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&s=ihrg_q318A252p_eCKgL3KiImBk HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19
2024-04-24 02:17:16 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50319	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	1066	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:16 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:16 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:16 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:16 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50321	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50323	151.101.193.140	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	675	OUT	GET /rp.gif?ts=1713925032060&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=c75ccba7-50c1-4800-9ca3-7928f039b486&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:16 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:17:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50325	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	722	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50327	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032058&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713924979213.1486414664&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-81-7661173f364b&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:16 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:16 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50328	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	681	OUT	POST / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Content-Length: 1169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:16 UTC	1169	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 63 62 31 62 61 39 39 32 35 38 61 36 32 32 35 62 63 63 61 34 37 33 31 38 38 37 39 65 63 35 31 65 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 33 35 35 32 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 Data Ascii: checksum=cb1ba99258a6225bcca47318879ec51e&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925035522%2C%22event_id%22%3A31%2C%22session_id%22%3A1713924976188%2C%2
2024-04-24 02:17:16 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Date: Wed, 24 Apr 2024 02:17:16 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bac-194cb02e5192cf6b1ae92ae8 Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 37e37f3d71c99a5a71f8e766a6f4b9ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: vfb3DUtzkA6hjhlBabhpNlXOSkGpx8VB6z7SZ5j7EO3EJbUG7pjz1Q==
2024-04-24 02:17:16 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50326	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	1399	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:16 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13759616061387198336"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13759616061387198336","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13759616061387198336","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13759616061387198336","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13759616061387198336","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50330	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	2530	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u95g4.10.3.13
2024-04-24 02:17:16 UTC	785	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:17:16 GMT ETag: W/"4380e7dc2835765ffb8a685c7adfdb47" Set-Cookie: amp_874b77=E8sC2HUkMVlUbVqOMu_V5N..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-xqs6z-207171 X-Request-Id: 3076ade1788dac8b0c4e5132de880cef X-Runtime: 0.012403 X-Cache: Miss from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6CskuwzPEF6onj_LFSzBqXpSaAS85efbVI8RxvavVgXpnIuofQxCGg==
2024-04-24 02:17:16 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50329	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	1317	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:16 UTC	1171	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50332	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	1042	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:16 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA; expires=Mon, 21-Oct-2024 02:17:16 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50333	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	812	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=1081344-1112239 If-Range: "c15169e9b85a213995deb6b3112712cb"
2024-04-24 02:17:17 UTC	555	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 30896 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Wed, 24 Apr 2024 02:13:48 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: RLQX_24YVYv_rmbBi9qs6FnS794-JskftdtY3SAiI72YStbTvge0qw== Age: 569 Content-Range: bytes 1081344-1112239/1112240
2024-04-24 02:17:17 UTC	15829	IN	Data Raw: 39 33 d9 c0 0a 57 a9 78 59 96 16 e1 ca 50 cc ed 14 2a e9 13 8a b0 2d 00 94 e1 d0 a2 71 3e bd fb 58 42 52 77 ae 23 24 8a 97 b1 78 23 25 3c 71 b4 61 92 ba f6 3f bc 14 61 35 a7 7e 91 47 d7 91 82 48 b6 56 f9 aa 02 a2 d0 f7 42 3b 5d 9c 8d 9c af 11 7a 97 b5 11 6d f0 b4 e9 e2 c8 4b 25 e0 20 29 63 ab bc 2c 48 c4 0c f1 1a d5 93 bb 02 8c 06 d1 06 3e 98 5e da 19 d6 22 99 9b 33 88 e3 98 73 2f 9e b0 73 c9 53 f1 b3 31 c1 11 89 99 d5 1d fa e9 0b e1 92 7e c1 ec 97 9b 47 07 75 7f 2a ce 50 f8 e1 52 ab 3d 2c ff ed 04 52 16 f4 5f d5 cc 7e 77 8d a7 c4 f4 9e f8 1b f9 35 c3 7a 99 9c 96 e9 9e 14 57 a0 69 d2 52 88 51 24 c6 7b 36 30 e4 78 64 43 2c 51 c8 f8 ba 3e b9 de 2d 29 e7 6c 0c 0f 7d 5e 31 4d e1 37 fb cc 4f 18 3c 4d 0e d0 8c 8d 2f d8 5e de 0f 14 f8 aa af 8a e2 4f e6 06 0e d1 Data Ascii: 93WxYP-q>XBRw#$x#%<qa?a5~GHVB;]zmK% )c,H>^"3s/sS1~GuPR=,R_~w5zWiRQ${60xdC,Q>-)l}^1M7O<M/^O
2024-04-24 02:17:17 UTC	15067	IN	Data Raw: 65 77 5a d9 2a fb 44 b0 29 17 ce 7b 6b 38 29 12 30 94 50 25 4c cb 2e 91 c1 6a 12 45 a8 cb 13 dd 3b 2d ed f9 ef 74 d8 6f 96 61 0d 90 53 36 e0 2e cd 6f 9e 8a 4b f5 d5 13 38 02 82 52 d1 2d 07 2a ed e2 a7 c4 53 9e 81 a7 3c 30 fe 38 e5 87 14 63 3b 71 eb 3a 01 6a fe a5 c4 39 ae d1 03 1a 0e bb 76 43 e9 b0 05 01 31 50 db 9b a5 91 48 c5 6a f2 81 a2 6b 2e 29 57 c3 70 68 61 49 65 49 50 9b ed ba eb 94 ef 08 f0 3b 64 da 54 f1 b7 4a 2e ba 0c 0f 8c 3a ec 6a b1 84 74 19 09 06 49 bc 68 74 12 bb bd 34 4e 85 b1 41 46 90 e6 f6 f5 91 bb 5d d6 79 32 e3 28 64 5c ad a9 0c 8e 76 71 35 bc ea da f8 b3 08 f8 32 f8 cc 5f 4b f4 97 32 ea a0 12 0e c4 43 51 e8 88 dd 5b 98 c1 96 b9 e3 00 af 48 c5 e6 06 4f 93 97 9a 17 8d f7 84 c4 c0 cd 18 0e 2d b9 e5 bf 9b 22 40 65 a2 39 83 5c 02 70 78 c3 Data Ascii: ewZD){k8)0P%L.jE;-toaS6.oK8R-S<08c;q:j9vC1PHjk.)WphaIeIP;dTJ.:jtIht4NAF]y2(d\vq52_K2CQ[HO-"@e9\px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50334	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	2145	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925034.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.19; _dd_s=rum=0&expire=1713925933878&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:17 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:17 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kB2SX_CRG5pPYNCNW5FmeVw_0DdM1TeK-V_J69VV07vheSvW2i456g==
2024-04-24 02:17:17 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50331	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	2243	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u95g4.10.3.13
2024-04-24 02:17:16 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:17:17 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:17 GMT ETag: W/"3e77-A59Ts/SU/8bLifo3DpJQGuP72uw" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15991 Connection: Close
2024-04-24 02:17:17 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 38 32 36 31 39 37 36 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 32 39 38 32 37 31 30 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 37 30 34 33 30 31 36 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 34 37 37 37 36 31 36 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 30 4e 7a 63 33 4e Data Ascii: {"creatives":[{"adId":518261976,"creativeId":342982710,"flightId":507043016,"campaignId":304777616,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA0Nzc3N
2024-04-24 02:17:18 UTC	12242	IN	Data Raw: 69 5a 47 6b 69 4f 69 4a 6c 4f 54 42 68 5a 6a 52 6c 59 7a 41 32 5a 47 55 30 5a 57 49 78 59 57 5a 6a 4f 54 51 78 4d 57 45 79 4e 54 52 68 4f 54 67 34 4e 43 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 51 32 4d 6d 59 31 4d 6a 55 32 4e 32 51 35 4f 44 51 31 4d 6a 4d 34 4e 47 4d 30 5a 57 59 30 4d 32 59 32 4e 47 55 33 59 32 59 33 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 54 67 79 4e 6a 45 35 4e 7a 59 73 49 6d 5a 73 49 6a 6f 31 4d 44 63 77 4e 44 4d 77 4d 54 59 73 49 6d 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 49 6a 6f 78 4d 44 49 79 4d 43 77 69 63 47 4d 69 4f 6a 41 73 49 6d 39 77 49 6a 6f 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 Data Ascii: iZGkiOiJlOTBhZjRlYzA2ZGU0ZWIxYWZjOTQxMWEyNTRhOTg4NCIsImRqIjowLCJpaSI6IjQ2MmY1MjU2N2Q5ODQ1MjM4NGM0ZWY0M2Y2NGU3Y2Y3IiwiZG0iOjMsImZjIjo1MTgyNjE5NzYsImZsIjo1MDcwNDMwMTYsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50320	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	2282	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2639 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20
2024-04-24 02:17:16 UTC	2639	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 62 31 37 36 39 39 39 38 2d 61 64 64 31 2d 34 37 33 61 2d 61 37 62 34 2d 34 65 36 31 61 62 63 32 34 32 34 64 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"b1769998-add1-473a-a7b4-4e61abc2424d","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:17:17 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:17 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:17 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:17 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50337	31.13.70.36	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:16 UTC	759	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925032136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713924979213.1486414664&ler=empty&cdl=API_unavailable&it=1713925029995&coo=false&eid=1713925026772-110-7661173f364b&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:17 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:17 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50339	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	681	OUT	POST / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Content-Length: 1168 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	1168	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 35 39 35 30 34 62 39 35 39 38 35 33 64 36 66 31 32 33 36 66 34 65 61 62 32 62 32 63 34 66 35 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 33 35 35 32 34 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 Data Ascii: checksum=559504b959853d6f1236f4eab2b2c4f5&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925035524%2C%22event_id%22%3A32%2C%22session_id%22%3A1713924976188%2C%2
2024-04-24 02:17:17 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Date: Wed, 24 Apr 2024 02:17:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bad-552e43863421979440e7122a Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 29d55562cdb80771afbb951b9f12a386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: GFEk6el7T4ZqSkKZtVNu36TH_a9l55VywqQYk24uPgzyelUWoSAXyA==
2024-04-24 02:17:17 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50341	13.226.210.58	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	348	OUT	GET / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	542	IN	HTTP/1.1 400 Bad Request Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Date: Wed, 24 Apr 2024 02:17:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bad-24e8bf0665dc466269fe51f6 Strict-Transport-Security: max-age=15768000 X-Cache: Error from cloudfront Via: 1.1 1e94f8bfedca9b1ad3b9259538f9432a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: SIEL0vwHNBwcbC1IqVZcNtGEBKOunGft7tkm512wh4MjVlKhSF77Yw==
2024-04-24 02:17:17 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50343	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	1110	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1327284545;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:17 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13759616061387198336"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13759616061387198336","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13759616061387198336","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13759616061387198336","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13759616061387198336","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50345	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:17:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:17:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50347	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	2221	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=E8sC2HUkMVlUbVqOMu_V5N..........; amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; _dd_s=rum=0&expire=1713925935893&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96bs.13.3.16
2024-04-24 02:17:17 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:17:17 GMT ETag: W/"4380e7dc2835765ffb8a685c7adfdb47" Set-Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-6jl2p-208546 X-Request-Id: 71b96e4eabfc9c959260b25881d16a63 X-Runtime: 0.012128 X-Cache: Miss from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xJn7eQu-uhjBut5FHIIAAIFLNhIWBbGsjZfiyx0VHOv0888LZF8ZtQ==
2024-04-24 02:17:17 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50346	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	1415	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:17 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"18279242594970665702"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"18279242594970665702","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"18279242594970665702","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"18279242594970665702","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"18279242594970665702","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50349	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	810	OUT	GET /creator/tommy-hilfiger/2402/intro/2_bRVieF/intro2.ee36afe07e2636a08c22.mp4 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://backgrounds.wetransfer.net/creator/tommy-hilfiger/2402/intro/2_bRVieF/2/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Language: en-US,en;q=0.9 Range: bytes=48579-1081343 If-Range: "c15169e9b85a213995deb6b3112712cb"
2024-04-24 02:17:17 UTC	555	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 1032765 Connection: close Last-Modified: Thu, 15 Feb 2024 11:01:54 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Wed, 24 Apr 2024 02:13:48 GMT ETag: "c15169e9b85a213995deb6b3112712cb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: XCROEO1jg0iOLsECsUOjoq9z9Wf5fCDa8fdTX7ZSAlkgAsSEHywRlw== Age: 570 Content-Range: bytes 48579-1081343/1112240
2024-04-24 02:17:17 UTC	15829	IN	Data Raw: 58 f4 68 f3 61 5f a9 c2 76 e6 4c 1b 4f c6 bf 89 14 3f a8 25 a3 89 6e 26 06 fb 8d eb ca 7e 14 f6 96 f2 4f 8b c1 e6 f3 65 4b f9 21 b7 a2 c9 03 31 3f 2c 9a bb 14 c5 86 0d 94 65 2d e4 bc 56 5b 9d bd 36 6b d7 3d 4f ea 0e c9 2a 69 6b fc cf e9 9c ae 6d ae 32 a7 2c 37 da 17 ae 08 6f 27 12 86 21 f5 0b 5b cf b3 ce ba 2f bc 4c c3 6f d4 73 23 b3 fb 5f d6 68 e6 62 50 ed 11 ed d6 6c a5 43 60 75 d7 8d c8 42 cd 62 ff 81 0a 18 83 11 5e 28 86 ba fe 5a 1d 5d 41 1f bf 74 c6 c2 be 20 ea 7f b5 15 6c 42 3c 98 48 f8 63 b4 9a 7c 3b 38 1d ba ef 3f b6 fd 48 63 b2 04 e9 06 5f ff db c3 7e 4f c9 06 61 71 af ab 00 87 11 25 32 ac f4 91 94 0a 25 dd 82 90 10 a1 1b 3f db aa 0a 34 f8 c8 e5 a9 f0 0b 2b 92 d8 85 36 32 61 62 7d 6e 3d c3 f8 de 5f b5 46 4e 05 64 7e b7 50 56 14 b7 40 09 2f 30 48 Data Ascii: Xha_vLO?%n&~OeK!1?,e-V[6k=O*ikm2,7o'![/Los#_hbPlC`uBb^(Z]At lB<Hc\|;8?Hc_~Oaq%2%?4+62ab}n=_FNd~PV@/0H
2024-04-24 02:17:17 UTC	16384	IN	Data Raw: fa bd 16 01 46 41 44 b0 33 ee 7a 56 17 5c 10 14 82 cf 70 39 b3 61 bc ab 95 a1 8f b8 2b c3 e1 b6 66 02 25 6d f1 73 1c 0f 79 20 6e 29 00 f8 23 64 e9 5b 16 2a 3a 41 ce af 09 61 18 9f b3 c7 1c ff 4f a5 ba d7 d1 ba 5e 7c 7e 85 3c 1c d4 80 07 0e b6 f6 ec 3e d4 4e d1 a5 2c b0 1e ad ec 84 d7 fb 19 eb 62 6a 4e 59 42 fb d2 a4 72 2a 21 99 19 68 21 77 91 ae 5a 1f 6a b5 af 2a 82 6f d4 75 8b 41 f3 db cc d9 1b d3 ca 48 ac 8b ab 78 52 73 f4 f3 79 4d 6a b0 f8 33 da ea 2c 1a 59 58 cf 1d 67 e8 59 22 d9 bb 1d cb 65 4e 5c f3 99 fe 93 d9 6e fc 21 e9 09 76 66 40 ee ac 0f c1 17 87 d0 49 bd cb 33 88 6e 7b 8d ba 53 26 e1 7d 1d ab ef 6e 0c 2a 3a f8 82 e4 ce 09 40 01 a3 42 a8 a9 33 89 a0 9f a4 65 e9 18 5a 4a 6a 70 7a ce 9f 44 cc 29 d3 0c 5d d2 cd 36 69 a1 2f d8 ec 79 2d b1 f1 cf f0 Data Ascii: FAD3zV\p9a+f%msy n)#d[:AaO^\|~<>N,bjNYBr!h!wZjouAHxRsyMj3,YXgY"eN\n!vf@I3n{S&}n:@B3eZJjpzD)]6i/y-
2024-04-24 02:17:17 UTC	16384	IN	Data Raw: a2 37 8f d8 12 25 a0 38 36 3c aa ab b9 c2 34 db ac c3 93 0a 06 ef 3f 14 64 25 bf ff c6 36 49 18 b8 d4 f2 f3 62 44 f5 40 47 02 b7 0b 81 84 0d 39 2f 3d 66 84 f8 9f bd 7a ce 76 07 2e 8b d6 d7 8d e6 8b 85 53 40 8b 90 0e 5d 36 51 61 78 e9 7e 5c f8 1c ab af d2 ae 78 f7 84 87 7a 5c ea d9 88 bf 36 13 78 8f 88 bd 1f 98 61 b9 3d 48 e8 5c ed 5f 4a 53 bd ce 86 10 47 d2 e3 f0 61 22 a8 42 10 35 a6 a9 78 81 74 b0 b5 27 5c a9 76 e5 f0 31 97 6f e6 0d 0a a9 30 82 c3 07 f4 ee 94 7c 44 e9 3c 9a 3c 19 91 ce f6 51 f6 72 95 29 9b 79 4e e3 ad 9b 67 b9 0e 72 21 89 86 16 f4 e3 e4 0e 78 b4 87 04 4e dc 35 ee 7c 84 26 4e 0e 6b e3 88 26 e8 8a 22 9c b3 7a 0d 73 d5 db 49 a5 a3 e4 cb 58 e3 55 af 1a 65 72 4e d6 90 8f bd 01 96 1d 65 d4 ce be 44 50 ba 92 84 92 c3 dd 1f 5b f5 5b f5 24 1c de Data Ascii: 7%86<4?d%6IbD@G9/=fzv.S@]6Qax~\xz\6xa=H\_JSGa"B5xt'\v1o0\|D<<Qr)yNgr!xN5\|&Nk&"zsIXUerNeDP[[$
2024-04-24 02:17:17 UTC	16384	IN	Data Raw: 15 4a 14 c3 32 22 3b 04 ee a7 75 86 ed f9 3c 0b 8e 13 f8 d1 2a 1e 0f b4 dc 48 8f 87 22 19 7d e5 2f 6f 08 a2 5a 75 0c 9b 54 9d c4 7e 70 35 a2 ff 64 ed c4 96 8f fe 68 ad 91 f6 23 73 cd 22 1b 75 d5 fb e3 e0 c4 b7 a0 cc 9d f4 33 9f 3d 51 db 8a 1e b7 0d 62 b9 1d ee 30 b0 16 35 b9 d3 7f 66 bc 05 62 9f e4 da dd aa 42 b9 dd d6 fd 76 d1 48 8a ec e2 d8 99 b0 80 ad 37 56 26 db b8 80 c6 7b 23 2e 7d d6 52 d3 1f 77 8d 98 2c c8 ce fe 8e be 2b 97 af 83 54 6a fe 83 23 06 21 59 55 11 99 1d 90 8b 0d f3 56 65 ba d6 4d 82 01 1f c1 fc 2c 10 f6 17 fb a7 50 61 15 26 ca cf 54 a5 1b 83 e1 20 8b ba a0 7d 07 48 1b 3a b8 00 69 6f 43 13 c5 5c e9 33 98 2c e8 68 84 b0 83 05 94 14 03 af c5 46 22 42 46 2f 65 f9 3e 39 ed ad 23 99 47 1a 53 19 9c e5 11 a3 eb 42 31 a3 7b 1b b0 d2 5d cf 24 90 Data Ascii: J2";u<*H"}/oZuT~p5dh#s"u3=Qb05fbBvH7V&{#.}Rw,+Tj#!YUVeM,Pa&T }H:ioC\3,hF"BF/e>9#GSB1{]$
2024-04-24 02:17:17 UTC	16384	IN	Data Raw: b1 5b 63 be dd 7f 07 0b 0f ce 7e 1c 92 68 a8 fd f2 7b 3b 2b 88 48 a9 cf ff 07 e9 80 5a 08 c2 f6 c3 22 5a 84 17 96 7a d7 03 d6 18 0f 47 86 1c cb dc d2 fb 07 71 22 3f ff 10 e2 6a cb 6e af b7 8b 86 78 aa af 84 cb 8f 3d f6 44 f5 a1 64 07 8d e9 21 fb 3d 24 8f dd 00 1d f4 6e 5c 34 2d 8e d7 52 f6 61 a3 fb e0 92 49 fb ba f5 46 73 d3 ce 44 a2 50 73 c5 cb cc cd fe 6d fd a6 12 42 f1 ff ed 91 d2 ff 02 4e 7e cf 9b 59 f4 0c 3c 0c 42 dd b6 01 f7 ef 75 8f 63 e5 35 32 04 37 3d 32 e1 ca 5b 1f ae b9 7e 90 a8 83 80 7a 1a f1 0d 45 19 3a 92 03 42 d1 0d 5b 7a 6c 5e 8f cd 84 e3 09 1b f5 c8 b8 ed 9f d9 56 a9 cb c7 b9 a7 3f 8a a2 28 ca e0 d1 10 78 40 27 a8 b8 23 5f 5b 46 b8 5c 6d 7d 50 f6 65 3b 24 96 12 69 5a 4f d4 35 66 fb 30 1a 91 31 56 40 1b 84 6e 2b c3 89 9b 83 d5 97 b5 20 11 Data Ascii: [c~h{;+HZ"ZzGq"?jnx=Dd!=$n\4-RaIFsDPsmBN~Y<Buc527=2[~zE:B[zl^V?(x@'#_[F\m}Pe;$iZO5f01V@n+
2024-04-24 02:17:18 UTC	16384	IN	Data Raw: e7 bd 48 92 df fc b1 d4 58 a8 0c 81 33 d2 d1 ce 6e dc 78 e4 25 71 65 59 0d 09 5b 52 47 89 d8 92 40 93 62 7c 95 82 68 ce 9e cd 7d 33 2a 99 40 48 9e 5f c8 3c df 68 c5 8b 1e 0b e3 82 86 61 ec 53 20 03 cd e6 07 4f bc b3 14 e7 97 7b 04 07 8a 5b af d1 7a a2 7d 05 ef 13 9a 1a f0 3c 10 a4 4c ba 7b d8 ef 80 4c 44 e4 ef 32 e7 87 3d f2 05 41 84 fe 75 00 ff 10 a6 fe ca 41 e5 51 5a 23 20 d8 aa 20 1f e8 1f 77 69 38 ee cd bd 82 ea bd bd 19 08 7c 66 97 b5 fd 34 a6 a4 4c 66 48 df d8 df 1b 92 fd 92 34 48 24 cc a8 8f 02 37 38 b5 9d 1e 0c 52 cd 06 29 c1 e6 91 29 c8 92 6b 3f aa ed 81 85 a9 b2 f0 fb 13 09 28 ce 56 7c c1 90 64 67 d9 4d ab 9d 55 03 a4 d1 96 d1 9b 8d 16 9d f7 48 6d 07 72 54 ab 0b 97 4d 54 71 36 46 9d b2 90 15 b0 58 6e 74 12 9d 17 a2 98 a2 5c ec 00 89 5c a1 c3 06 Data Ascii: HX3nx%qeY[RG@b\|h}3*@H_<haS O{[z}<L{LD2=AuAQZ# wi8\|f4LfH4H$78R))k?(V\|dgMUHmrTMTq6FXnt\\
2024-04-24 02:17:18 UTC	16384	IN	Data Raw: b9 e6 fb 3f 51 2f b4 3c dc 40 07 7a a3 c3 92 46 81 23 71 92 74 d9 bd 00 ba 93 a9 1a 2d b1 9d c9 07 03 e0 42 6e 6f 15 fb 74 bf c6 80 fe e6 9a 3a 61 49 73 bd ce ee 18 98 c1 09 7f e9 f8 47 4e 49 00 f3 59 21 39 8a 91 de 3e 1a 8c 53 04 e7 ee 4a 7a 39 e0 c4 43 38 88 2d 5a 70 3c fb e2 43 54 2c 7a db 69 5c ce 84 06 f9 ae 94 5d d2 65 1f e6 ed 48 84 85 e3 54 30 93 fc 03 36 c5 81 92 a0 34 2d 57 91 15 0c 75 14 ff f0 31 a9 cc db d9 fa 37 59 da c0 84 65 a4 98 47 79 73 b8 ab 68 19 a2 2f 9c a1 41 e7 5e 4a b9 11 bc 5d dd 95 ba 96 5a f7 59 02 02 c5 ff 99 f8 a5 32 a9 c2 de 2a 0b d2 2f d6 8c bb 2e d4 30 67 3a 26 46 26 80 13 16 49 eb d0 00 0f d0 e5 3b 75 24 7b 82 e2 ac 4a 41 dd 20 60 46 f6 72 7a 8d 87 ce 72 39 ba c4 78 85 88 6f 01 64 10 71 5d 71 48 bb 24 7d c7 4d 34 6a c9 33 Data Ascii: ?Q/<@zF#qt-Bnot:aIsGNIY!9>SJz9C8-Zp<CT,zi\]eHT064-Wu17YeGysh/A^J]ZY2*/.0g:&F&I;u${JA `Frzr9xodq]qH$}M4j3
2024-04-24 02:17:18 UTC	16384	IN	Data Raw: 3b a3 f6 35 c9 fe 09 42 a1 e3 df db f2 5e b7 54 6b 16 7c 13 9a 76 3a 8a 2a 59 41 34 ce 94 1b 2c bc 56 67 2e 99 0c 61 b5 00 35 a3 6a e6 75 90 40 c7 58 12 46 92 2b 99 34 93 ff 79 03 80 96 f9 94 34 52 16 98 46 08 88 95 be ac 5e cc 5f eb 40 0f 61 a2 7e a5 7e 91 6f e7 3b 25 cd 66 fd dd 8b 05 cd b7 e7 c6 4e b3 98 75 93 0c 93 18 56 4d 91 80 90 69 b5 1c 39 ce 3f 53 a3 d2 cd 0d 9b d6 3f 51 a5 a0 9b 02 76 16 a5 96 ae 46 04 46 99 b7 1e 46 e9 08 9a de da 58 f7 06 65 d7 54 8e f1 24 55 97 ed 3c da 91 5e 3d a1 02 4f e5 86 9f 0b 95 f6 db 41 8c 22 46 26 51 7a ec 84 98 49 ef 40 3a 28 d2 24 f1 50 02 56 d8 a2 74 c5 7b 60 30 b1 8e 12 96 f6 92 42 87 10 ce c9 33 f9 2e ab aa 3b ad 88 15 b8 a4 d8 15 d6 8d 2f 1b a4 bc 74 3d ed 73 94 ba 71 f1 8d c8 a6 ec bf 7c dc 8c 2e dc 7e 25 c7 Data Ascii: ;5B^Tk\|v:*YA4,Vg.a5ju@XF+4y4RF^_@a~~o;%fNuVMi9?S?QvFFFXeT$U<^=OA"F&QzI@:($PVt{`0B3.;/t=sq\|.~%
2024-04-24 02:17:18 UTC	16384	IN	Data Raw: 84 37 1e 8c d8 67 52 53 17 d9 80 c4 ac f9 af dc 5f 15 14 0f e8 2b 8b fe c5 35 97 2f 8e 14 56 73 8b 8a f0 17 ac ed 92 90 4f 2a 67 09 51 c8 d5 43 24 5d 36 24 01 2b e2 3e e5 5f 89 5d e3 48 5e c0 7d 89 a8 6a 20 57 c6 9e ea 8b dd f0 53 6e 09 2b 54 ba bb dc 40 0b a3 19 0e a9 4a 63 dd 6d 22 d7 3e e7 74 39 3c 81 2e 6d a6 51 21 4e cb 45 90 b9 08 5b a3 c7 ec 73 70 24 b6 27 83 37 57 f1 58 cd d5 a6 0c 6a 57 bb 28 91 a9 8d 44 7c fb b6 2f 4a 88 bf 0f f9 2c a1 4d 1f 51 5e 34 fe 12 de f1 a0 f8 ef c0 78 a3 35 c6 f0 7f 03 83 58 64 f1 69 ac 51 ca 68 60 e4 56 8e ec 67 39 37 00 f6 6d 31 4e 86 b2 68 ee fd 46 b5 09 b5 7b da 8e c5 08 5a 98 b2 a5 d2 79 e5 d1 a1 a4 dc 83 9a c2 05 38 28 28 2d af 5d ae ea c4 4a ac e5 82 6d 22 78 8d a4 bb a8 92 dd 92 c5 be 9b 4d 11 8e cf c5 52 b2 33 Data Ascii: 7gRS_+5/VsO*gQC$]6$+>_]H^}j WSn+T@Jcm">t9<.mQ!NE[sp$'7WXjW(D\|/J,MQ^4x5XdiQh`Vg97m1NhF{Zy8((-]Jm"xMR3
2024-04-24 02:17:18 UTC	16384	IN	Data Raw: a1 a5 07 e4 95 40 a5 87 0d 3b 71 51 34 51 d4 33 a6 4e 83 80 9a 39 37 52 12 71 cf 69 6d ce ce 97 31 66 65 83 b2 28 5c 19 3d 7c 82 05 f2 3d a3 25 16 35 6d 7b 29 3d 11 b8 3b db 54 90 36 44 16 e3 4e cd 6c 79 b6 9a c0 cb cf 60 de 62 fe a6 76 8f d6 77 76 52 88 7f 8c 09 35 ea df 9b a2 b4 01 b8 48 c4 24 ba ce 8f 92 6a 04 a4 40 61 18 da 66 b7 b6 4e b8 71 47 bf c5 f6 e0 91 bf 1a 9d 3f 77 f9 54 29 56 af 17 46 3d 82 54 59 00 40 d9 1f f4 0a 03 a2 5a ac c2 07 55 eb 6d 5c 9a 92 7b ff f5 49 1d 3b 8f 35 61 d3 3f 8a 2e 80 56 51 a0 41 99 ac d4 07 c9 46 7b 7a 19 d6 c3 fc 81 1d 46 0b f1 6a c8 50 01 bd 02 5a c1 a7 6f 2a b8 96 28 ea bb b2 3f 5c 0e 5a d6 11 c7 33 49 99 42 b6 cc e7 4a 0a 9f ad 8b b0 47 e5 ce d6 0f 4e 66 3e 1c e7 c7 e8 b2 2f d1 44 9b 40 c1 70 de 4e 40 bd 2c 94 cb Data Ascii: @;qQ4Q3N97Rqim1fe(\=\|=%5m{)=;T6DNly`bvwvR5H$j@afNqG?wT)VF=TY@ZUm\{I;5a?.VQAF{zFjPZo*(?\Z3IBJGNf>/D@pN@,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50348	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	808	OUT	GET /ddm/trackimp/N1033118.3554910WETRANSFER/B31124398.389315199;dc_pre=CKLezafk2YUDFUpHCAQd7J8BcQ;dc_trk_aid=580551606;dc_trk_cid=211115748;ord=1713925030836;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:17 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6sR8l9oVNudtq2knN_2Q7Xw_DGO6Bx72fhPxRX3_Kb0wQM6Q; expires=Mon, 21-Oct-2024 02:17:17 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50350	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	2296	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96bs.13.3.16
2024-04-24 02:17:17 UTC	604	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 22 Apr 2024 10:44:08 GMT Last-Modified: Mon, 22 Apr 2024 10:11:24 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4Y5IhfZshDI8uwLzlOcUygyg_0UBKUX3ekP0agHp_Q-sMixWWZgKFA== Age: 142390
2024-04-24 02:17:17 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50342	99.80.201.152	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	2756	OUT	GET /i.gif?e=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&s=ihrg_q318A252p_eCKgL3KiImBk HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u95g4.10.3.13
2024-04-24 02:17:18 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50351	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	637	OUT	GET /_next/static/media/ActiefGrotesque-Bold.10832e10.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27440 Connection: close Date: Thu, 02 Nov 2023 10:27:52 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 02 Nov 2023 09:51:45 GMT ETag: "a618eb8ddd7af554656002bcfdecfe86" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DpOutDQ4elewf-plqdNDK8XPlEaszQUP2GUjzm8f8xy7NZJyMnmOjw== Age: 15004166
2024-04-24 02:17:17 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b 30 00 12 00 00 00 01 15 64 00 00 6a c4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 1c 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9d 34 81 f5 52 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 85 33 1b 23 fc 57 d0 db f6 48 d0 9d 00 95 68 6d eb 77 87 91 08 dd 0e 50 42 ba 1f 1c 19 c8 e3 00 a2 fb 3d 65 ff ff ff 9f 99 54 64 cc 34 9b 69 cb 00 1c c2 40 bd b7 82 e4 10 53 08 99 93 22 85 a9 cd 88 14 16 ac 6e db 06 37 93 c2 ac 0e a7 f1 34 2e bb 96 37 aa 8a 9d b7 69 87 4c 0b bc 8e 73 98 0d 0b 11 2e 67 5e ef e4 cb 75 74 33 ee 29 e9 2d 36 89 ea 2d b7 ba 77 0f c8 34 c8 25 e9 86 36 21 d0 d1 73 97 fd a8 6e 43 18 1f 32 17 99 d9 40 94 65 85 03 7a 90 2f 2e 31 Data Ascii: wOF2k0dj?FFTM4p`nrW4R&6$H \~3#WHhmwPB=eTd4i@S"n74.7iLs.g^ut3)-6-w4%6!snC2@ez/.1
2024-04-24 02:17:17 UTC	11809	IN	Data Raw: 39 f2 3f 55 f0 42 c0 44 2e fd 7f 99 63 37 ea 27 0f fe 24 35 c0 a4 7e 49 23 4d 02 a4 25 76 1b b9 48 bb 0f 30 5c 8c e5 b8 05 ae 82 3d c4 72 64 c3 db db da 88 d9 36 93 db 67 31 aa 08 c3 07 df da c5 d2 f8 0b fd 11 8f 29 0f 90 99 6a b3 34 2a 39 76 8e 4a 7b 1d 94 94 10 31 00 0a 21 e3 0e 93 05 a3 4d 35 ab 6f 65 b0 22 38 ed 69 b2 d9 68 d3 d0 82 b3 4f 72 e5 ff 6a e0 56 c0 44 2c 7e f9 43 65 a7 bd c0 b5 a7 b9 b8 7f 7d 27 19 a4 5e 26 f5 6b 01 59 a5 d0 1a e0 31 ed 3a 6e b1 ce 50 c4 d5 b4 34 d4 c0 aa 07 31 c7 de d0 90 29 cd c7 0e c2 63 fb b4 3b 11 b1 c1 a3 39 fa 4c 25 2b 3c 0e 6a eb 5e db ad 0e 33 de e4 44 37 d8 bd a2 dd 66 94 75 4d a0 38 95 f7 ef 2b d4 fb 95 9b 0b be 3b 94 b1 9a b8 2e a6 3c ba fa 87 d5 a5 e0 8e 42 76 c7 ef cd d1 5b 37 c9 69 c1 93 5a cd 16 05 2d 78 46 Data Ascii: 9?UBD.c7'$5~I#M%vH0\=rd6g1)j4*9vJ{1!M5oe"8ihOrjVD,~Ce}'^&kY1:nP41)c;9L%+<j^3D7fuM8+;.<Bv[7iZ-xF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50336	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	2011	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u9255.u.3.11; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925035.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.20
2024-04-24 02:17:18 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:17 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50357	13.226.210.53	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	681	OUT	POST / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive Content-Length: 4392 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:17 UTC	4392	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 38 63 65 61 36 38 37 37 39 66 62 64 33 36 66 32 39 36 64 34 30 34 37 33 39 62 32 65 38 39 62 32 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 45 38 73 43 32 48 55 6b 4d 56 6c 55 62 56 71 4f 4d 75 5f 56 35 4e 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 33 36 34 30 32 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 34 39 37 36 31 38 38 25 32 43 25 32 Data Ascii: checksum=8cea68779fbd36f296d404739b2e89b2&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22E8sC2HUkMVlUbVqOMu_V5N%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925036402%2C%22event_id%22%3A33%2C%22session_id%22%3A1713924976188%2C%2
2024-04-24 02:17:18 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Date: Wed, 24 Apr 2024 02:17:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bae-41e575e80253e7fc7cca12ff Strict-Transport-Security: max-age=15768000 X-Cache: Miss from cloudfront Via: 1.1 be66acbcc5d85e825abf1047b034d722.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: tLsCxYChXgLWMkHLJMGqWFmER_uRQks936-NoFkzaMRMGZkNKPRwKg==
2024-04-24 02:17:18 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50358	13.226.210.58	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	348	OUT	GET / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:18 UTC	542	IN	HTTP/1.1 400 Bad Request Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Date: Wed, 24 Apr 2024 02:17:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bae-06984b2e0adf11185f35abdc Strict-Transport-Security: max-age=15768000 X-Cache: Error from cloudfront Via: 1.1 db4ef757de4ce45a85608dca59f8151c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: PHePxGgB9faUgO_NzeIjTcmSGwVlWiCupaiu2Wzl6A89RM8Y2XPFKw==
2024-04-24 02:17:18 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50354	34.240.239.1	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:17 UTC	1080	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=bd4cf124-2d0f-427d-ba66-3f079581db26&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A17%3A16.502Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:18 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:17:18 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50360	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	3521	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.127%2B02%3A00&epn.hit_timestamp_unix=1713925032127&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925026772-110-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-110-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=56&tfd=11578&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:18 UTC	804	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:18 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 2e99c50ac852ccefe05bd3b68d4909c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: -UVey37tIVIzCA5r6XXVXsRGQcvSV6z4SA3XrH9Ka0ckR1uEGmrZlw==
2024-04-24 02:17:18 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50361	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	1108	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G
2024-04-24 02:17:18 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"18279242594970665702"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"11131550709181572712","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"18279242594970665702","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"18279242594970665702","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"18279242594970665702","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"18279242594970665702","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:17:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50356	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	2283	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:18 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 63 65 38 64 63 35 37 39 2d 30 34 61 64 2d 34 64 39 31 2d 62 64 65 35 2d 31 31 32 31 38 35 30 35 61 61 31 32 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"ce8dc579-04ad-4d91-bde5-11218505aa12","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:17:19 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:18 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:18 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:19 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50362	142.251.2.149	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:18 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 31 33 31 35 35 30 37 30 39 31 38 31 35 37 32 37 31 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"11131550709181572712"},"type":"trigger-no-matching-source"}]
2024-04-24 02:17:18 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:17:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50367	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	2440	OUT	GET /_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhHdtoe0L8B0Wr88916BUxn%2BQNkeL7N8%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:19 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:17:18 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 4852bd34ee0cb10ece7fb6301e5074c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: GDiduAdZkXTwCFMphGZTIuTr0wokiFwSI9lUFSDq2IjBVdFGEezX_A==
2024-04-24 02:17:19 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50366	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	1436	OUT	GET /pagead/viewthroughconversion/778938880/?random=1316885254&fst=1713925033359&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
2024-04-24 02:17:19 UTC	1303	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50364	142.251.2.148	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:18 UTC	1375	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1163326897.1713924972;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
2024-04-24 02:17:19 UTC	1169	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1542373124;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=804451605.1713924969;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50363	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:19 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:19 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50368	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&_u=SACAAUABAAAAACgFKgC~&z=1880655332 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:19 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50372	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	856	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925935919
2024-04-24 02:17:19 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7f24d577a96cdbcccb1a008b671937f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: jV2yFmuqoQQ53l6F2BRd8V2uf9-1NUOKw09nplJv755FXZ1-yGN2OQ== Age: 71207
2024-04-24 02:17:19 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50370	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	636	OUT	GET /_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:19 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 30776 Connection: close Date: Wed, 13 Dec 2023 09:02:08 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 13 Dec 2023 08:46:33 GMT ETag: "3e43992e4e2c4420a860c2dced8cc368" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: L-s-PhCakb0xm9qcJ-jUOi4PggjNzGj5oILGnBoBT1cN-i-PNa8B7A== Age: 11466912
2024-04-24 02:17:19 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 78 38 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 67 f0 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 68 0c 00 00 0b 72 00 00 33 76 05 d1 ac b7 47 53 55 42 00 00 73 80 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 59 00 00 00 60 87 fb 63 ae 63 6d 61 70 00 00 05 ec 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 90 00 00 01 74 00 00 0b f2 4f c3 2d 95 66 70 67 6d 00 00 07 c4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 67 e4 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 20 00 00 53 85 00 00 90 94 30 39 ec 9c 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 8c 43 9a 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFx8<GDEFgo]GPOShr3vGSUBs8-jQOS/2Y`ccmap;<cvt tO-fpgm06gaspgglyf S09head66Chhea
2024-04-24 02:17:19 UTC	15144	IN	Data Raw: 30 ce 67 e9 45 55 56 82 c8 44 3f 52 98 cf 92 a6 86 85 4f df af ed 01 95 5b 8f 55 55 ce b6 9b 5c b3 44 6e 6f 8d b5 e2 53 e8 4d da 4c 91 12 87 66 18 b4 05 eb ca d5 1a 0e 15 32 2d 70 8b 02 f7 d3 06 2e dd 09 b8 ee 0b e0 96 af 86 79 97 28 b0 9f 02 25 22 77 f0 79 c7 68 1b ba 9b c8 64 18 d4 ef 2e 33 66 59 35 ab dd a6 98 88 4d a1 65 d8 cb 10 54 80 92 d0 46 3d e8 0f 1e da 7d e4 c8 ee 87 e0 47 7c c5 51 f6 d3 d1 23 ec 47 84 24 fa e4 af d0 27 9b 10 8b ad 95 a9 05 0c 67 33 e5 98 29 9f 98 89 46 14 27 0a 9b 6c 01 39 3f e3 b0 db e8 a9 ff 4e ff 59 16 1b a4 3f 79 d9 23 c4 25 b1 11 b1 70 11 1e ac d0 6c 41 b1 a8 1d fe d0 db 7b fa 98 a8 f8 aa 6d 03 9b 06 87 46 a9 ae 78 d7 d0 95 85 d1 4d 5f 29 4f 5d bd 3f bf be a3 ff ea fd f1 4b fb 8e ce b3 13 9d df d1 79 59 df 3b ae 65 bf 0c Data Ascii: 0gEUVD?RO[UU\DnoSMLf2-p.y(%"wyhd.3fY5MeTF=}G\|Q#G$'g3)F'l9?NY?y#%plA{mFxM_)O]?KyY;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50371	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	635	OUT	GET /_next/static/media/GT-Super-WT-Regular.20d77fe0.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:19 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43796 Connection: close Date: Mon, 12 Feb 2024 09:00:00 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Feb 2024 08:28:20 GMT ETag: "5321545e6fd1cec2eb1ee4b745f450a1" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WvhO6PyuUIWmhbOOIoEWrT6VJTTzUrLsrD7v8Wn6KDB2O6NfOpAeKQ== Age: 6196640
2024-04-24 02:17:19 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 ab 14 00 12 00 00 00 01 74 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 ab 0c 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8a 00 00 00 b8 18 df 1f 89 47 50 4f 53 00 00 02 20 00 00 16 21 00 00 36 ac ea 09 31 e8 47 53 55 42 00 00 18 44 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1e 00 00 00 00 4e 00 00 00 60 68 79 81 ab 63 6d 61 70 00 00 1e 50 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a3 8c 00 00 00 29 00 00 00 34 0b ae 02 e0 66 70 67 6d 00 00 a3 b8 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a3 84 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 68 00 00 73 d1 00 01 00 2a fd a7 0a f0 68 65 61 64 00 00 95 3c 00 00 00 Data Ascii: wOFFtDSIGGDEFGPOS !61GSUBD^_OS/2N`hycmapPh=jccvt )4fpgm6gaspglyf!hs*head<
2024-04-24 02:17:19 UTC	16384	IN	Data Raw: d5 67 14 e1 2d 8b 61 4a 75 56 56 15 7f e7 c0 a8 f1 38 8f e9 60 6d 48 e5 72 00 b9 e5 dc f2 fc 5c a3 ae a4 69 01 5f 69 da 58 e0 8b 3a e5 c9 46 5c ba 34 f4 64 0f 17 5e 45 da a6 0f 2f c2 97 d3 7c 0e 7e 41 fa 72 54 cd c1 df 8b df ed b3 2c 2a 87 ae c0 73 d5 1e 1e 00 c2 70 b3 9d b6 1b 86 dc 90 b4 37 6f c9 06 53 9a 71 a7 50 c1 d7 70 94 4d 44 db a8 3e 48 22 99 a4 34 59 49 f2 22 97 26 68 bc 1d ad 58 9c c7 b8 2c 0f 7c ce c4 7c 8f 97 0a 57 8d 38 16 23 4b 06 36 ee 6c 8c 07 f7 f3 95 34 c1 c6 cd 90 1b 8f 25 bf d5 44 5e 69 82 bf e5 48 a3 88 36 52 d0 73 02 3a 80 06 3f 65 87 9a c0 40 a8 e1 47 00 3a c5 a3 ce 75 23 18 90 a1 67 1c 05 0a bf aa 53 6a f0 2a 95 01 d8 34 34 ec 2d 40 53 15 24 94 aa f6 85 38 06 6d 6c 58 c8 6e ed 28 0d 9e 84 b8 87 e9 68 ab 88 c3 2a 23 b7 72 f3 69 29 Data Ascii: g-aJuVV8`mHr\i_iX:F\4d^E/\|~ArT,sp7oSqPpMD>H"4YI"&hX,\|\|W8#K6l4%D^iH6Rs:?e@G:u#gSj44-@S$8mlXn(h*#ri)
2024-04-24 02:17:19 UTC	11779	IN	Data Raw: 5e 40 9e 81 8d cc 52 d8 5b 21 28 05 91 ad 6d a0 05 09 b5 d2 71 35 2e 4d 00 22 b2 fd 02 d7 ab 02 97 fc 4c a7 9a 2e 24 e3 89 64 92 f6 33 dc 28 ec 55 e1 a5 5a 9e 95 cd 6d b3 80 34 29 ae 82 d2 79 49 6e e7 d2 dd 07 29 1c d4 9e 2d 03 57 f5 57 da f2 95 de 8c c7 e1 18 8a 97 07 bb f7 0e 2c 5e 3d 38 7e f7 cc e6 f1 db b6 6c 7c 7d fb 94 68 99 39 5a c9 77 b4 f7 dc 87 1f bb 7d db 8e 97 cc 76 ef 1b 9a 58 2c 6e 2e b6 55 2a b9 54 b7 d6 17 1c a9 94 17 da 16 47 8b b3 b1 e9 e4 b5 63 a3 47 7a e3 81 cf 0d 1d ee 4f b4 06 3b 5a e6 e5 b5 9d e3 73 fc 13 14 e0 89 07 d2 c8 33 a5 2b a9 09 44 ad a0 15 4f 83 56 ab 64 40 27 08 20 ec 97 90 c5 96 ea b0 1e 6f 6a 6a 52 d7 d5 bc ae 92 6e 80 d7 15 ce 5e ba e1 2b a9 c7 76 be cc 01 da ed 8e b9 62 54 3d 9f e4 21 81 dc 83 2d 1e 57 41 40 14 13 1d Data Ascii: ^@R[!(mq5.M"L.$d3(UZm4)yIn)-WW,^=8~l\|}h9Zw}vX,n.U*TGcGzO;Zs3+DOVd@' ojjRn^+vbT=!-WA@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50375	142.250.101.155	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	2485	OUT	GET /pagead/viewthroughconversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTMVIg41TstCTofgIXfrIsZuuiDd0pR-aaw&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUk2nyi-k3E9611GEXQMHf_kumai1rteKEeokw4QqVuUplJZ94iKAoeRLj-G; APC=AfxxVi7GbwdDM9sQHWOs7p1NeHPTkrVYxWiOOF5Dchxt6RGcTyeSOA
2024-04-24 02:17:20 UTC	2275	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqlnB28PbwTXjv70xwAkyZctVPz1wYwNNIL9CJfALp_JLpkbBq&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTL1IuBP9CE-htnG20CS6tWy0hPnOQzEFTQ&random=159649123 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50374	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:19 UTC	1355	OUT	GET /pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50377	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950343284 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925935919
2024-04-24 02:17:20 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:17:20 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 c9b46ce9954a1c765386d2d9d877f24e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: qTNdVLzrYAid-Rl1wmNoGgSqwqAArzp6ajI_F36tD2od6pvH8lYO7w== Age: 62237

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50381	13.226.210.58	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	348	OUT	GET / HTTP/1.1 Host: analytics.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:20 UTC	542	IN	HTTP/1.1 400 Bad Request Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Date: Wed, 24 Apr 2024 02:17:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bb0-5bad79d074453bc64d6dafe4 Strict-Transport-Security: max-age=15768000 X-Cache: Error from cloudfront Via: 1.1 cb7d4a3c5329f4f381e8cdfcd4a3e1e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: V07Me9XouZw3PrSa4ZX0IfKGdjV6lkmt2Hg5797zL73WaQz8A1Yx2Q==
2024-04-24 02:17:20 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50382	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	3261	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925026772&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=804451605.1713924969&ecid=1838502804&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1333520890.1713925027&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925026772&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713924969&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A17%3A12.127%2B02%3A00&epn.hit_timestamp_unix=1713925032127&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925026772-110-7661173f364b&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-110-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&_et=56&tfd=11578&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:20 UTC	711	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:20 GMT set-cookie: FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 1a6e1efe30d70fc3718c47f07ff0b6f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: KHtWwpT2xrIuoOOkv0HsbX1dTZBuXcupg6Lkq_RLjEM_KiZT7HlwQg==
2024-04-24 02:17:20 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50384	13.33.21.100	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	2207	OUT	GET /_set_cookie?val=UuxbiyYGdJlhDHaBhbuY5lDRUFUZ2VO4dkIx8uy44sibTXX1jFG4Cf8vEhSWXWuM7o1doHwu%2Bs5NizJZJ9ljYSxWWrSG0ee7FEBk%2F4%2FILpSw%2Fbc9MDyMX0ZHB805fBOga1mJvL1Dc%2Bxre6x1jqExWH%2FxnUGI%2BgNlE9FuhHdtoe0L8B0Wr88916BUxn%2BQNkeL7N8%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:20 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:17:20 GMT Set-Cookie: _fbp=fb.1.1713924979213.1486414664; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 61ef32a4a99ff5a643cb4feaafaac43a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: W-2HxlJ7L-T7kYgDEm-9bjpxdq5cPB-K9gJSP12GDvnOix73G1rcoA==
2024-04-24 02:17:20 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50369	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	813	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:21 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:21 GMT ETag: "16057a2d3b51238bbd5f3eef09bf2908" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: PH-Mvjw8Ys0ObVOVdmkLP7QlRYeda4JPu8xKwHsEeGEsXdpuD5KnJw==
2024-04-24 02:17:21 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50385	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	583	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=804451605.1713924969&jid=1435952059&_u=SACAAUABAAAAACgFKgC~&z=1880655332 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:20 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50386	142.250.101.103	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	2405	OUT	GET /pagead/1p-conversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqlnB28PbwTXjv70xwAkyZctVPz1wYwNNIL9CJfALp_JLpkbBq&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTL1IuBP9CE-htnG20CS6tWy0hPnOQzEFTQ&random=159649123 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50387	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	1121	OUT	GET /pagead/1p-user-list/778938880/?random=1316885254&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=1163326897.1713924972&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqrJVYxh4o4Q8X1An5l5ErXNb7JlIijUqFMmwprSWG8aetSuFq&random=950021696 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50390	18.154.132.38	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	2022	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:20 UTC	604	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 22 Apr 2024 10:44:08 GMT Last-Modified: Mon, 22 Apr 2024 10:11:24 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: O9-VQ7vuOUi136YF2IfVsZFPPXfY4a-KIw_94dFN9IjtLO0_zsrWPw== Age: 142393
2024-04-24 02:17:20 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50393	18.154.132.32	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	2586	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: E8sC2HUkMVlUbVqOMu_V5N X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21; _dd_s=rum=0&expire=1713925939681&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:20 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 35 38 31 33 31 32 30 31 37 36 34 30 35 37 33 33 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.05813120176405733,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:17:21 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:17:20 GMT ETag: "39-yuR37zlVtZdQxwVukIsMP4XRC0A" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 27f8684163b0b232d220b4ced517da20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9JkmCBYiwsCxm1KSFpRM4uZyzEuUm39P_E-t2MO9FqGCf2VDEEqrEA==
2024-04-24 02:17:21 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 35 38 31 33 31 32 30 31 37 36 34 30 35 37 33 33 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.05813120176405733}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50380	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	1988	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:21 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:21 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:17:21 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50392	34.240.239.1	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	895	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=bd4cf124-2d0f-427d-ba66-3f079581db26&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A17%3A16.502Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2414006&cp_campaignId=288248980&cp_placementId=490408448&cp_creativeId=501395713&cp_creativeType=Base__Video__Intro_video&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:21 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:17:21 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50383	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:20 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925014650\|3\|1\|bat.bing.com/p/insights/c/d; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21
2024-04-24 02:17:21 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:21 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50394	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:21 UTC	730	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:22 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 290377 Connection: close Date: Wed, 24 Apr 2024 02:17:23 GMT Last-Modified: Thu, 28 Mar 2024 15:00:15 GMT ETag: "18dc1214c0129d05f9be4606a6a39660" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: skq1LiSFH1P9j1ImL4CMdSydCuLU-wBXxnTuRP8ab363JTwUxw3fbA==
2024-04-24 02:17:22 UTC	3582	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 63 66 33 38 31 33 65 30 30 34 65 30 62 65 35 34 38 32 38 31 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 38 31 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3b 72 2e 72 28 74 29 2c Data Ascii: /! For license information please see bundle.cf3813e004e0be548281.js.LICENSE.txt /!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 31 5d 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 45 72 72 6f 72 2c 74 3d 28 65 2e 73 74 61 63 6b 7c 7c 65 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 72 3d 2f 61 74 20 52 45 47 4c 43 6f 6d 6d 61 6e 64 2e 2a 5c 6e 5c 73 2b 61 74 2e 2a 5c 28 28 2e 2a 29 5c 29 2f 2e 65 78 65 63 28 74 29 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 5b 31 5d 3b 76 61 72 20 6e 3d 2f 61 74 20 52 45 47 4c 43 6f 6d 6d 61 6e 64 2e 2a 5c 6e 5c 73 2b 61 74 5c 73 2b 28 2e 2a 29 5c 6e 2f 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 31 5d 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 3d 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c Data Ascii: );return n?n[1]:"unknown"}function h(){var e=new Error,t=(e.stack\|\|e).toString(),r=/at REGLCommand.\n\s+at.$(.)$/.exec(t);if(r)return r[1];var n=/at REGLCommand.\n\s+at\s+(.*)\n/.exec(t);return n?n[1]:"unknown"}function m(e,t){var r,n=e.split("\n"),
2024-04-24 02:17:22 UTC	1024	IN	Data Raw: 20 6e 65 61 72 65 73 74 22 3a 78 74 2c 22 6c 69 6e 65 61 72 20 6d 69 70 6d 61 70 20 6e 65 61 72 65 73 74 22 3a 6a 74 2c 22 6e 65 61 72 65 73 74 20 6d 69 70 6d 61 70 20 6c 69 6e 65 61 72 22 3a 6b 74 2c 22 6c 69 6e 65 61 72 20 6d 69 70 6d 61 70 20 6c 69 6e 65 61 72 22 3a 54 74 7d 2c 66 29 2c 64 3d 7b 6e 6f 6e 65 3a 30 2c 62 72 6f 77 73 65 72 3a 4d 74 7d 2c 68 3d 7b 75 69 6e 74 38 3a 63 74 2c 72 67 62 61 34 3a 56 65 2c 72 67 62 35 36 35 3a 71 65 2c 22 72 67 62 35 20 61 31 22 3a 59 65 7d 2c 6d 3d 7b 61 6c 70 68 61 3a 4d 65 2c 6c 75 6d 69 6e 61 6e 63 65 3a 52 65 2c 22 6c 75 6d 69 6e 61 6e 63 65 20 61 6c 70 68 61 22 3a 42 65 2c 72 67 62 3a 24 65 2c 72 67 62 61 3a 50 65 2c 72 67 62 61 34 3a 49 65 2c 22 72 67 62 35 20 61 31 22 3a 4e 65 2c 72 67 62 35 36 35 3a 4c Data Ascii: nearest":xt,"linear mipmap nearest":jt,"nearest mipmap linear":kt,"linear mipmap linear":Tt},f),d={none:0,browser:Mt},h={uint8:ct,rgba4:Ve,rgb565:qe,"rgb5 a1":Ye},m={alpha:Me,luminance:Re,"luminance alpha":Be,rgb:$e,rgba:Pe,rgba4:Ie,"rgb5 a1":Ne,rgb565:L
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 6e 64 65 78 4f 66 28 74 29 3e 3d 30 26 26 28 6d 5b 65 5d 3d 74 29 7d 29 29 3b 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6d 29 3b 69 2e 74 65 78 74 75 72 65 46 6f 72 6d 61 74 73 3d 79 3b 76 61 72 20 62 3d 5b 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 5b 65 5d 3b 62 5b 74 5d 3d 65 7d 29 29 3b 76 61 72 20 5f 3d 5b 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 68 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 68 5b 65 5d 3b 5f 5b 74 5d 3d 65 7d 29 29 3b 76 61 72 20 77 3d 5b 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 66 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 5b 65 5d 3b 77 Data Ascii: ndexOf(t)>=0&&(m[e]=t)}));var y=Object.keys(m);i.textureFormats=y;var b=[];Object.keys(m).forEach((function(e){var t=m[e];b[t]=e}));var _=[];Object.keys(h).forEach((function(e){var t=h[e];_[t]=e}));var w=[];Object.keys(f).forEach((function(e){var t=f[e];w
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 3d 33 35 37 31 38 2c 52 72 3d 33 35 37 32 31 3b 76 61 72 20 42 72 3d 36 34 30 38 2c 49 72 3d 35 31 32 31 2c 4e 72 3d 33 33 33 33 2c 4c 72 3d 35 31 32 36 3b 66 75 6e 63 74 69 6f 6e 20 56 72 28 74 2c 72 2c 6e 2c 69 2c 61 2c 6f 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 75 29 7b 76 61 72 20 63 3b 6e 75 6c 6c 3d 3d 3d 72 2e 6e 65 78 74 3f 28 43 28 61 2e 70 72 65 73 65 72 76 65 44 72 61 77 69 6e 67 42 75 66 66 65 72 2c 27 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 77 65 62 67 6c 20 63 6f 6e 74 65 78 74 20 77 69 74 68 20 22 70 72 65 73 65 72 76 65 44 72 61 77 69 6e 67 42 75 66 66 65 72 22 3a 74 72 75 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 72 65 61 64 20 70 69 78 65 6c 73 20 66 72 6f 6d 20 74 68 65 20 64 72 61 77 69 6e 67 20 62 75 66 66 65 72 27 Data Ascii: =35718,Rr=35721;var Br=6408,Ir=5121,Nr=3333,Lr=5126;function Vr(t,r,n,i,a,o,s){function u(u){var c;null===r.next?(C(a.preserveDrawingBuffer,'you must create a webgl context with "preserveDrawingBuffer":true in order to read pixels from the drawing buffer'
2024-04-24 02:17:22 UTC	2048	IN	Data Raw: 20 6a 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 41 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 69 29 7b 69 66 28 65 20 69 6e 20 72 29 7b 76 61 72 20 73 3d 74 28 72 5b 65 5d 29 3b 61 5b 6f 5d 3d 4b 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 7d 65 6c 73 65 20 69 66 28 65 20 69 6e 20 6e 29 7b 76 61 72 20 75 3d 6e 5b 65 5d 3b 61 5b 6f 5d 3d 5a 69 28 75 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 28 65 2c 74 2c 65 2e 69 6e 76 6f 6b 65 28 74 2c 75 29 29 7d 29 29 7d 7d 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 64 6e 3a 63 61 73 65 20 6e 6e 3a 63 61 73 65 20 72 6e 3a 63 61 73 65 20 78 6e 3a 63 61 73 65 20 75 6e 3a 63 61 73 65 20 43 6e 3a 63 61 73 65 20 Data Ascii: j.forEach((function(e){var o=A(e);function s(t,i){if(e in r){var s=t(r[e]);a[o]=Ki((function(){return s}))}else if(e in n){var u=n[e];a[o]=Zi(u,(function(e,t){return i(e,t,e.invoke(t,u))}))}}switch(e){case dn:case nn:case rn:case xn:case un:case Cn:case
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 63 74 22 27 2c 22 69 6e 76 61 6c 69 64 20 62 6c 65 6e 64 20 66 75 6e 63 2c 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 29 29 3b 76 61 72 20 6f 3d 61 28 22 73 72 63 22 2c 22 52 47 42 22 29 2c 73 3d 61 28 22 64 73 74 22 2c 22 52 47 42 22 29 3b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 63 6f 6e 73 74 61 6e 74 73 2e 69 6e 76 61 6c 69 64 42 6c 65 6e 64 43 6f 6d 62 69 6e 61 74 69 6f 6e 73 3b 74 2e 61 73 73 65 72 74 28 72 2c 65 2b 22 2e 69 6e 64 65 78 4f 66 28 22 2b 6f 2b 27 2b 22 2c 20 22 2b 27 2b 73 2b 22 29 20 3d 3d 3d 20 2d 31 20 22 2c 22 75 6e 61 6c 6c 6f 77 65 64 20 62 6c 65 6e 64 69 6e 67 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 66 6f 72 20 28 73 72 63 52 47 42 2c 20 64 73 74 52 47 42 29 Data Ascii: ct"',"invalid blend func, must be an object")}));var o=a("src","RGB"),s=a("dst","RGB");C.optional((function(){var e=t.constants.invalidBlendCombinations;t.assert(r,e+".indexOf("+o+'+", "+'+s+") === -1 ","unallowed blending combination for (srcRGB, dstRGB)
2024-04-24 02:17:22 UTC	1024	IN	Data Raw: 74 65 78 74 75 72 65 7c 7c 5f 2e 63 6f 6c 6f 72 5b 30 5d 2e 5f 74 65 78 74 75 72 65 29 3b 74 28 63 2c 22 2e 75 6e 69 66 6f 72 6d 31 69 28 22 2c 62 2c 22 2c 22 2c 77 2b 22 2e 62 69 6e 64 28 29 29 3b 22 29 2c 74 2e 65 78 69 74 28 77 2c 22 2e 75 6e 62 69 6e 64 28 29 3b 22 29 7d 65 6c 73 65 20 69 66 28 68 3d 3d 3d 77 69 7c 7c 68 3d 3d 3d 78 69 7c 7c 68 3d 3d 3d 6a 69 29 7b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6f 6d 6d 61 6e 64 28 4f 65 28 5f 29 2c 22 69 6e 76 61 6c 69 64 20 6d 61 74 72 69 78 20 66 6f 72 20 75 6e 69 66 6f 72 6d 20 22 2b 64 2c 65 2e 63 6f 6d 6d 61 6e 64 53 74 72 29 2c 43 2e 63 6f 6d 6d 61 6e 64 28 68 3d 3d 3d 77 69 26 26 34 3d 3d 3d 5f 2e 6c 65 6e 67 74 68 7c 7c 68 3d 3d 3d 78 69 26 26 39 3d 3d 3d 5f 2e Data Ascii: texture\|\|_.color[0]._texture);t(c,".uniform1i(",b,",",w+".bind());"),t.exit(w,".unbind();")}else if(h===wi\|\|h===xi\|\|h===ji){C.optional((function(){C.command(Oe(_),"invalid matrix for uniform "+d,e.commandStr),C.command(h===wi&&4===_.length\|\|h===xi&&9===_.
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 3a 43 2e 63 6f 6d 6d 61 6e 64 28 4f 65 28 5f 29 26 26 5f 2e 6c 65 6e 67 74 68 3d 3d 3d 6d 2c 22 75 6e 69 66 6f 72 6d 20 22 2b 64 2c 65 2e 63 6f 6d 6d 61 6e 64 53 74 72 29 2c 73 3d 22 31 69 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 64 69 3a 31 3d 3d 3d 6d 3f 43 2e 63 6f 6d 6d 61 6e 64 54 79 70 65 28 5f 2c 22 6e 75 6d 62 65 72 22 2c 22 75 6e 69 66 6f 72 6d 20 22 2b 64 2c 65 2e 63 6f 6d 6d 61 6e 64 53 74 72 29 3a 43 2e 63 6f 6d 6d 61 6e 64 28 4f 65 28 5f 29 26 26 5f 2e 6c 65 6e 67 74 68 3d 3d 3d 6d 2c 22 75 6e 69 66 6f 72 6d 20 22 2b 64 2c 65 2e 63 6f 6d 6d 61 6e 64 53 74 72 29 2c 73 3d 22 31 69 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 79 69 3a 63 61 73 65 20 68 69 3a 43 2e 63 6f 6d 6d 61 6e 64 28 4f 65 28 5f 29 26 26 5f 2e 6c 65 6e 67 74 68 26 26 5f 2e 6c 65 6e Data Ascii: :C.command(Oe(_)&&_.length===m,"uniform "+d,e.commandStr),s="1i";break;case di:1===m?C.commandType(_,"number","uniform "+d,e.commandStr):C.command(Oe(_)&&_.length===m,"uniform "+d,e.commandStr),s="1i";break;case yi:case hi:C.command(Oe(_)&&_.length&&_.len
2024-04-24 02:17:22 UTC	16384	IN	Data Raw: 74 50 61 72 61 6d 65 74 65 72 28 33 33 38 36 29 2c 6d 61 78 43 6f 6d 62 69 6e 65 64 54 65 78 74 75 72 65 55 6e 69 74 73 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 35 36 36 31 29 2c 6d 61 78 43 75 62 65 4d 61 70 53 69 7a 65 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 34 30 37 36 29 2c 6d 61 78 52 65 6e 64 65 72 62 75 66 66 65 72 53 69 7a 65 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 34 30 32 34 29 2c 6d 61 78 54 65 78 74 75 72 65 55 6e 69 74 73 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 34 39 33 30 29 2c 6d 61 78 54 65 78 74 75 72 65 53 69 7a 65 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 33 37 39 29 2c 6d 61 78 41 74 74 72 69 62 75 74 65 73 3a 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 33 34 39 32 31 29 2c 6d 61 78 Data Ascii: tParameter(3386),maxCombinedTextureUnits:e.getParameter(35661),maxCubeMapSize:e.getParameter(34076),maxRenderbufferSize:e.getParameter(34024),maxTextureUnits:e.getParameter(34930),maxTextureSize:e.getParameter(3379),maxAttributes:e.getParameter(34921),max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50396	18.154.132.7	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:21 UTC	2146	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=69f5fccb-6b04-4ba3-a53f-d7851fcffd5a..........; _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925037.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.21; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925939746&logs=1&id=5b2f8138-46e4-439b-af25-dbe3058ea4f4&created=1713924976176
2024-04-24 02:17:22 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:21 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9_ctVT78_r1mnsAHNIZQxnnD15U9EjK_muIyfktLzrwCoMpnc5X5iQ==
2024-04-24 02:17:22 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50395	142.250.101.105	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:21 UTC	2093	OUT	GET /pagead/1p-conversion/614409984/?random=1500173605&fst=1713925033338&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A17%3A12.060%2B02%3A00%3Bhit_timestamp_unix%3D1713925032060%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925026772-81-7661173f364b%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925026772-81-7661173f364b%22%2C%22action_source%22%3A%22web%22%7D&auid=1163326897.1713924972&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CLKU4rLA9qL6twEiEwjewvuo5NmFAxVHWggEHYA3CwUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqlnB28PbwTXjv70xwAkyZctVPz1wYwNNIL9CJfALp_JLpkbBq&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTL1IuBP9CE-htnG20CS6tWy0hPnOQzEFTQ&random=159649123 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:21 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:17:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50403	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:23 UTC	780	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:24 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47828 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 15:00:13 GMT ETag: "6dbab1c1c6f168db27cbe727e3ad7fe8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: LwSG5SP2PsV_de9W4lmnFtbeU3SEiw6Sbq8I1SvNyz3p1Of19jcWFw==
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ba d4 00 12 00 00 00 02 53 f4 00 00 ba 6b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 30 1b 81 c6 5e 1c e1 12 06 60 00 88 26 08 2a 09 82 73 11 10 0a 85 da 44 85 8b 2a 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 70 07 d2 72 0c 81 1b 5b 97 22 92 0a a9 71 ed 65 de 26 3e 00 09 e8 36 04 c8 32 75 d3 aa ce d7 7b 41 1c 63 3b 08 5a 3a c7 26 e7 03 15 a4 98 95 e2 02 ee ec 89 31 6e 47 38 e2 f4 3b 7a f6 ff ff ff ff ff ff af 4a fe f3 8c f3 cf 3d e9 dc fb 5e a5 12 08 44 7d ec 6f db 06 31 b9 23 04 a5 48 39 e5 4a 75 55 a5 26 a3 5a 57 15 5a e4 2e 67 f5 15 32 02 be 09 1b 1a c8 b6 c6 6e 1f 07 54 38 e6 71 9f f2 98 57 b0 53 61 71 f1 18 72 ed 7b 73 82 90 10 38 5f d2 59 bd e9 d2 95 aa 65 bd 6f a8 8a Data Ascii: wOF2Sk?FFTM0^`&sD6$ pr["qe&>62u{Ac;Z:&1nG8;zJ=^D}o1#H9JuU&ZWZ.g2nT8qWSaqr{s8_Yeo
2024-04-24 02:17:24 UTC	453	IN	Data Raw: f0 62 9b 15 be 04 77 52 01 17 9b 71 ed 90 e0 d4 63 9f 90 3a 4b 96 bf 36 80 5e 1c 9f 2b ff 67 29 99 6c 17 eb 35 e6 a5 1a 1e 7d 32 16 68 c1 0c ab 06 84 d6 e0 2c bf 2f 84 c8 28 f7 2a 55 25 7d 9a e9 d1 ac c7 9c f8 84 fd 19 ee cf 72 4f 43 59 60 62 8f 33 26 4b ba 67 3f 0a 80 c2 f0 4c 19 16 1d 3d 82 7a 48 d6 7a 3f 9b c3 7a a4 5e ab 64 f9 0d f9 d6 66 61 20 e1 ea d5 67 5c 1d 0a 88 e6 55 69 a1 77 51 9f 04 50 85 19 74 d8 2a 29 7c 60 e7 e7 67 3e 5f fa a4 69 6b 40 7a fc 8e 37 94 29 b8 d4 60 98 4b 59 65 6d d5 50 9c d2 4c ea 09 b0 60 f9 d0 bd 27 7c 9f 07 13 c0 6c 17 96 b5 24 d5 1e ef 52 a8 92 13 95 ef 74 83 50 a8 d7 c0 f3 83 8a f0 0d ce da 8c 4c 38 88 b1 ee 7c e8 7c 0d 0c ce 22 c8 11 51 16 4b 82 38 7d ee 49 a0 72 ee 2e 52 9d 19 ba 4c 19 c6 12 d5 f6 a0 2b 32 f2 37 bd b0 Data Ascii: bwRqc:K6^+g)l5}2h,/(U%}rOCY`b3&Kg?L=zHz?z^dfa g\UiwQPt)\|`g>_ik@z7)`KYemPL`'\|l$RtPL8\|\|"QK8}Ir.RL+27
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 6e a3 1a 1b 0e 3c a6 4b 78 94 46 72 2e b0 24 26 15 cd 56 eb 4c d8 33 36 6c 8e f4 7f 4e 27 5d 99 de a0 bc 24 6d 7e f6 d1 b3 0f 96 66 37 29 94 d2 00 48 45 b0 bf a0 4a 27 5a c7 61 18 32 0c 61 be 77 a3 1a f8 83 ea af 9a e2 69 8b 18 a6 14 d6 44 0d 55 c6 4a 74 5f 48 ea 8c 36 cb bb 86 c0 dc e7 a7 62 0a 38 cc 2c 0c b0 88 e1 80 3d c8 bc d8 89 ed 09 6b 55 35 b3 47 65 b7 cd 56 65 91 64 d1 41 15 6c ee 21 eb a0 1b 21 61 6a 72 6f 4f 83 c7 83 a3 2b c1 82 ef fb 5b 17 38 d7 84 41 09 80 6c 7a 3a 11 53 db 65 31 5b 00 94 1b 9c 76 1b 6e 20 28 4f bb da 24 c7 c3 f0 c7 87 fd fc 26 93 b0 7e 3b c6 12 49 7e ca 56 65 99 cb e5 02 d0 71 09 ad 88 6a 8e 54 de 67 25 aa 77 a2 27 9c 01 43 ff 41 cf 68 81 7b f5 f9 62 95 c8 a1 4e ac 8a b1 70 06 b6 4d de ce 7c 6b 72 a9 18 7b dd 6b 63 de 7a f4 Data Ascii: n<KxFr.$&VL36lN']$m~f7)HEJ'Za2awiDUJt_H6b8,=kU5GeVedAl!!ajroO+[8Alz:Se1[vn (O$&~;I~VeqjTg%w'CAh{bNpM\|kr{kcz
2024-04-24 02:17:24 UTC	1024	IN	Data Raw: 1b 67 38 8d 6f 61 11 86 0a da 69 5c 16 63 da 8a 53 e2 ac ed c6 e5 4c f3 46 74 dc db 80 23 16 59 30 20 dc 0c b9 e2 b5 9e d0 05 82 75 51 0b 3d 9d b2 f6 3b 62 40 b8 09 72 2b 34 7a 25 69 cf 5a bd 8a 4a 2c c6 45 50 20 1a 75 a5 3e d1 b8 b1 fa 63 1c 02 8f 45 88 d7 5c 89 08 44 14 2d 2b 28 07 cb 40 1e 15 7c 89 72 22 3b 4b 35 84 f3 f2 16 38 7e c7 e3 08 f3 90 bb ec 95 76 05 ea 69 5c 7f 03 1c ff 82 23 cc 41 6e 0a 04 f1 23 8b 2b fb 7d 24 42 8f 00 8f 80 66 63 1f a6 d4 6b c5 d1 cb 11 e6 21 d7 f1 4a 81 40 7d 72 8e c3 11 e6 20 37 05 02 f5 cd 09 5f 17 c1 48 61 12 34 0e 63 46 82 46 6a 13 8f 71 3e 4f ea 11 75 5f ea 17 9d 3f aa e8 90 05 e4 21 57 f8 89 c8 e5 0b 2f 91 29 8f 95 aa 27 2e e7 de c1 0d e5 eb ff 5f a9 e0 1e a0 ec c5 ce ad ab f9 6b 90 65 5d e7 49 f8 89 c8 e5 0b 2f 91 Data Ascii: g8oai\cSLFt#Y0 uQ=;b@r+4z%iZJ,EP u>cE\D-+(@\|r";K58~vi\#An#+}$Bfck!J@}r 7_Ha4cFFjq>Ou_?!W/)'._ke]I/
2024-04-24 02:17:24 UTC	13583	IN	Data Raw: ff 5c c6 1f fb aa e6 c5 9a 0c 98 6a 32 eb 99 ff 6c a6 b4 02 2e e3 b7 7e d6 3c 4e eb 6c a4 dc b9 3e d7 cc b5 d9 32 b7 40 b9 a9 98 e0 a4 9c ec a5 c9 4c 8b 57 82 4b d0 f8 69 5c 3c d6 99 47 21 5f 84 9a 8a f0 f5 71 24 16 ad a6 15 9b 79 31 af 99 da 63 be b8 7a 3c e6 c7 1d e0 3e b8 21 96 dd 70 03 1f ed ff bf 4d 21 87 e6 da 58 58 20 25 21 da 85 3c f3 b1 90 d6 73 66 ae b7 12 99 1a 9e da 5b 0b 4d 49 2d f3 17 25 aa b6 25 65 b4 91 66 8c 7f 7a f2 90 ab 3c 53 7a 2d 38 fe 1d bf 81 bc 2f d5 73 91 57 13 53 76 63 8e d8 32 69 06 5a f6 54 9b 7a 37 15 6d e4 bc 47 0a b9 5a 75 54 f8 ad f3 82 ca 97 05 ca 96 c5 f8 2a 6d c6 39 4e c9 96 bf 19 22 4a 07 55 ea 72 69 30 fc 4e c4 a1 71 07 38 56 8f 2b 5c 11 5c b6 80 38 3e fb 11 fa 43 fc c9 9e 59 07 dc 3b 71 86 6f f6 b1 5f 05 b3 71 f0 40 Data Ascii: \j2l.~<Nl>2@LWKi\<G!_q$y1cz<>!pM!XX %!<sf[MI-%%efz<Sz-8/sWSvc2iZTz7mGZuT*m9N"JUri0Nq8V+\\8>CY;qo_q@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50404	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:23 UTC	787	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:24 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28464 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 15:00:13 GMT ETag: "ff4429feba146d5a8e608db1b13cd9b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: G4-hgZlSNKa-Izo9abDT3di1OtydlZ9TS8GjAZDlo6EKAPpc07OmUw==
2024-04-24 02:17:24 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 30 00 0f 00 00 00 01 59 1c 00 00 6e d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 6c 1b d8 48 1c 9d 3c 06 60 00 87 66 11 08 0a 83 da 38 83 8f 36 0b 87 1e 00 01 36 02 24 03 8e 36 04 20 05 a6 2f 07 99 07 5b f5 2e 71 02 bd 6d 8f 42 74 27 c0 a8 5a 6d ff 5d ce 12 36 b8 9a cd 79 0e 4a 99 79 2e 65 01 77 7e 70 1e 84 f0 3d bf aa 26 fb ff ff d3 92 8e 18 6b ec 6c 00 9c a6 69 d6 7f 5c ee 2c 3c cb db 2a 26 9c b8 4c ae f0 90 75 c8 d7 ed b9 a2 b7 dd ec c9 0e 04 e9 03 b2 af e1 c9 c5 35 ee 5d 8d c2 81 ad 5f 4f 73 56 55 e1 ea 77 77 9b ca 7b ab 32 55 85 3c ce 0d 9e c8 79 65 d9 0f 72 9e 58 b3 a9 fb 49 de c1 5c e6 24 e1 ec 74 17 09 d5 db 4c 54 c6 c0 6d 0e 08 eb 17 bb ec a4 21 3a 21 e6 10 d3 d0 Data Ascii: wOF2o0Yn?FFTMlH<`f866$6 /[.qmBt'Zm]6yJy.ew~p=&kli\,<*&Lu5]_OsVUww{2U<yerXI\$tLTm!:!
2024-04-24 02:17:24 UTC	1112	IN	Data Raw: aa 5d 0e 48 0d a3 db 4c 5c 87 5c 85 70 73 9a a3 50 a3 28 49 c4 14 1a 33 37 c4 28 bf 0f f9 e9 65 b5 d9 dd 64 67 6a 70 6f 1d 5f 37 d1 2d 69 c0 e3 2d a1 6d dc 32 84 37 b5 c7 5d 41 c3 e9 03 1c a5 e8 53 9c b0 49 ec 37 09 ee 5e ba 3f 08 b5 85 8c 57 c9 99 f9 28 d0 34 67 3a fa 41 e0 ee 12 80 eb 9a f0 46 ec 04 e6 99 de 7e 71 f9 89 be de dc ec 66 ed a7 ee 65 ba e4 48 97 eb 65 f6 bd 62 e8 f5 5c cf 4d f3 b6 24 17 3b 47 b8 69 9f 89 dc c6 8e 64 fb 10 2f b9 1b 95 43 b6 70 dd 7d 86 ec 67 7e 06 1e dc 37 4e 09 47 9f 2c 74 f3 f3 1b 0f 7a 69 1a 78 ee 26 1d 93 ca fd c1 40 cb 35 38 23 c3 af ef 45 e2 90 e9 a6 29 83 12 2e 7b f6 7f d8 6a aa 65 67 45 1b 93 8c 66 8f 25 77 f7 7a 42 69 a8 04 7d 32 14 68 ac fa a9 f8 3c c3 dd a4 6e 12 bb 7b 51 8e 51 b0 96 2c bf 88 e6 2d 9f 22 4d c7 4c Data Ascii: ]HL\\psP(I37(edgjpo_7-i-m27]ASI7^?W(4g:AF~qfeHeb\M$;Gid/Cp}g~7NG,tzix&@58#E).{jegEf%wzBi}2h<n{QQ,-"ML
2024-04-24 02:17:24 UTC	11627	IN	Data Raw: b5 be 6e d3 a5 43 7e 6a 57 c0 eb 46 9e d1 e9 d1 54 15 b7 a8 fa 32 16 84 1b 68 da eb 6a 37 cf ef 8c 52 b9 02 92 f9 35 1b 78 b7 ef 2c 82 57 8e 82 57 16 ef 7c 46 1f 1f c9 31 19 a9 9d 91 fd 83 91 fd d4 4e 93 29 31 30 1d 53 c7 46 e0 7b f1 29 25 c7 f5 8e d8 a7 40 88 2d 8a e2 c1 6a 1f 56 a5 a2 24 6d 5c c6 ea d8 3d 1a 3d f4 8c 64 6c bd 36 df 20 e5 44 a9 5c 1d ed ce 01 76 04 1c 12 41 cb 4e 30 7b d6 af f3 ac 4f 28 a6 65 23 90 84 5c c0 73 40 72 5a a9 76 65 12 07 cd 59 9c f5 63 0e 8f b4 69 67 34 bb 76 9a 0a 14 35 2c 28 a7 65 35 c1 39 ab f6 e0 76 8e ab 9c 0e d8 ff ef ba ac 42 1a 3d c1 a8 4c cb b5 37 c2 18 5f 15 d1 86 b2 79 9d b7 bf ea 87 87 ea d2 71 5c 38 94 c2 e2 d2 b0 1c 21 cf 07 11 fd 1d 77 33 61 61 2a 65 69 7b 70 8e be 3d 26 ec 08 0e cd 5d f9 31 09 1d e0 b4 14 88 Data Ascii: nC~jWFT2hj7R5x,WW\|F1N)10SF{)%@-jV$m\==dl6 D\vAN0{O(e#\s@rZveYcig4v5,(e59vB=L7_yq\8!w3aa*ei{p=&]1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50402	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:23 UTC	799	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:24 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 df11d3a08007cdd54c51137ab60a7786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: p4uUvQIIW-gkN2ljWmSU1S6sWejm8OWcVlKhPZWTj44MZa7ZyZDdTw==
2024-04-24 02:17:24 UTC	14839	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50405	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:23 UTC	788	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:24 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1002077 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:16 GMT ETag: "25ee8e8c018a2d9addc20a03b331b97a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: wGx1oxM2e4kRi9EX3l_M6wxWErgfN2m6fFINKq1YoCgbbzZmzJwkgQ==
2024-04-24 02:17:24 UTC	7685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 00 00 00 05 a0 08 03 00 00 00 a5 de ea ed 00 00 03 00 50 4c 54 45 47 70 4c 15 14 15 5e 89 77 6a 98 85 6a 98 85 6a 98 85 6a 97 84 69 98 85 6a 98 85 69 98 85 70 9f 8c 49 66 5a 31 40 39 57 7d 6d 6d 9b 88 6a 98 87 43 5c 52 0d 10 0f 11 16 14 52 72 65 09 0c 0b 38 4c 44 75 a4 90 5a 8c 77 14 14 15 6a 98 85 6c 96 85 69 97 84 69 97 85 72 77 79 67 93 82 74 8b 84 68 95 84 79 70 7a 64 91 7f 58 8c 76 04 04 04 04 04 04 01 01 01 0a 0a 0a 01 01 01 04 04 04 03 04 03 0f 0f 10 04 04 04 02 02 02 09 09 09 02 03 03 07 07 07 05 05 05 01 01 00 06 06 06 00 00 00 01 01 01 00 00 00 60 97 e2 7b a8 e6 5a 8a cb 2e 41 68 10 17 25 05 02 01 4a 72 a7 65 9a e3 65 98 de 60 97 e2 5d 92 da 3f 61 8f 25 32 52 5f 95 de 53 7e ba 6b 56 5e 1a Data Ascii: PNGIHDRPLTEGpL^wjjjjijipIfZ1@9W}mmjC\RRre8LDuZwjliirwygthypzdXv`{Z.Ah%Jree`]?a%2R_S~kV^
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 75 32 49 02 81 b4 86 aa 6f 12 6c e8 0f 18 bb 2d 22 36 98 52 53 f7 07 17 3e f3 79 ab c5 b6 be 7d 90 87 c3 f9 78 7c 78 79 7a cb 48 3e fd 36 4d 2b 77 bb bb c3 a3 b2 b5 b6 c1 75 c1 76 9d 28 b8 26 a1 ca cc 04 c8 90 48 4b b4 24 d2 2c 33 a3 25 a3 e8 2a cf cb b7 f7 5d 3c bb dd 6e af 06 c9 08 47 81 09 d4 57 32 81 42 1c d1 18 0a 0d d6 32 cb e3 e5 6f 31 06 2e 49 ab 80 04 89 04 19 51 36 9d fe d6 69 bf c3 e5 70 98 67 7d 2f d8 48 a4 65 66 59 ae 5f 66 44 f3 03 91 46 92 93 b6 d4 b1 4d a4 64 a2 84 b8 75 6f e1 75 89 6b bb 3f 24 51 da 66 e2 00 b4 4e a0 75 31 6d 9d 88 d6 c1 80 43 b2 3e af db 2c e7 b9 bf d7 e3 e5 78 fc f2 e5 74 4d 51 fe ca 85 4b bb bd 92 fe 32 eb b6 d1 de f2 e3 2e 51 28 05 a2 f7 ef 14 05 22 65 94 74 46 33 93 89 a4 65 99 45 48 21 cf c7 c3 61 0f ff 76 bb dd 0f Data Ascii: u2Iol-"6RS>y}x\|xyzH>6M+wuv(&HK$,3%*]<nGW2B2o1.IQ6ipg}/HefY_fDFMduouk?$QfNu1mC>,xtMQK2.Q("etF3eEH!av
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 35 75 82 b4 2f 11 69 e4 6a af 27 c1 f0 e8 bc 56 75 ed e7 6a 00 8f 88 88 e8 83 b4 e1 f9 ee d5 ed ee ee fd 3b 0c 41 db 16 d3 35 5a ba fa 91 b8 2d 15 05 42 7f 40 90 3e 85 83 10 34 0f 63 08 ed ef 02 24 0f 63 51 bd a5 8e e2 09 c0 f6 44 fa 48 26 d7 a5 ce 33 2d 4b ac 2b af 67 f3 cb 4e 7f 75 39 ef 5c 0d 99 0d 5e 84 10 5d 7f 38 9f 9c 84 04 ad a7 dd 83 93 d1 e8 bc f7 7f ce 2e fb 95 61 e5 d3 7f f4 7e 69 e8 66 39 d9 9e 21 94 e6 44 97 6a 68 76 9b a7 fe 20 e5 aa 00 ea 9d 0a 2b d4 d1 d7 68 0d ab 73 26 f5 83 fe e3 19 c0 ab 03 a3 be 78 18 42 e1 2e 0e b8 23 08 a3 de b6 b4 2a af 35 8a e8 7e 1e f1 af 51 a5 83 61 b3 fd b2 4d c3 a5 4b 14 c4 5a df 57 94 09 de 6f 86 fa be b6 0c c9 92 d6 4a 33 ac 25 68 8c 12 a5 9a c7 96 32 e1 a5 b9 f3 3c 6d d6 aa 36 5e 3e a5 67 60 a5 d9 ed b6 5a Data Ascii: 5u/ij'Vuj;A5Z-B@>4c$cQDH&3-K+gNu9\^]8.a~if9!Djhv +hs&xB.#*5~QaMKZWoJ3%h2<m6^>g`Z
2024-04-24 02:17:24 UTC	2048	IN	Data Raw: 84 e5 35 0a 75 f0 b4 68 1a e3 9b f8 ce 56 5e 7c 70 f1 0c 16 19 06 a2 b5 ee be e3 c6 de 19 5e 65 77 0e eb 05 23 a2 b3 76 d3 90 0a 30 0f 17 0e 5c 2e 6c 30 65 43 87 0b ec 02 3d 4b c0 cc f0 45 76 35 d6 3c 2f 6e 98 a9 d7 b4 a6 2e 9e 0c 38 aa de ae 07 f5 97 9d ab 07 4e 20 4f 3b 25 20 f4 a7 9f 68 52 9d d4 99 dd be b6 70 fd d0 75 08 01 3a 07 09 af ad 6d b1 79 ab af 1e a6 6a 74 83 10 aa 75 91 4e 12 12 49 50 da 5f 90 95 80 10 32 ab a5 45 0c 08 d4 44 ad d1 e4 96 25 c7 4c df 94 3a 10 ef 61 fb 0e 63 13 8e 68 d1 15 c7 01 c5 72 85 c3 3f 55 d9 e4 ff 9f 64 22 be 27 c7 3e 75 9c 3b c0 e0 99 80 00 b9 95 7f 13 bc 49 ca 72 52 54 00 e0 48 57 a4 19 ef 0f 55 6f e8 08 e1 e2 e2 12 76 81 37 91 06 c4 89 7f 0d 81 f8 00 ab a4 45 d0 96 eb 53 2f 3d 38 28 47 0f 6b 09 b1 02 4f ab 21 78 64 Data Ascii: 5uhV^\|p^ew#v0\.l0eC=KEv5</n.8N O;% hRpu:myjtuNIP_2ED%L:achr?Ud"'>u;IrRTHWUov7ES/=8(GkO!xd
2024-04-24 02:17:24 UTC	8949	IN	Data Raw: 50 a2 42 18 d8 c7 19 b8 2f 55 20 fc 37 82 00 2f 5c 03 68 dd 9f c5 2e bd a1 d8 13 cf bd c0 74 bb a0 d3 7f d3 d3 4c b9 8a 0d 58 90 78 e9 da 35 80 90 95 62 3f 22 c1 5c b2 21 98 2d e6 e6 6e df 78 ed e7 ff 92 24 49 92 64 6a 54 16 84 69 29 eb 4e 06 05 c6 5c 4c 2d 0c e2 7f c7 50 0b 69 5d 51 76 6d 66 13 e6 3f cf 9d 5e de 37 89 ed 30 10 dd 59 c3 c7 a4 ec 44 9e 26 4f 54 14 67 f2 bb f9 94 61 47 80 dc e1 ea 8c be 1e f3 7c bf 53 2c f3 e5 56 e1 80 d5 3e 2a d8 09 7b 5e 80 14 d9 a5 77 cc 13 24 c9 e2 2a a9 6a ed 0d d1 6c 5a 3f 05 f6 89 b2 28 e8 58 1d 68 08 3a 70 70 66 51 1f b8 62 f0 81 6e 20 35 bb 39 30 1e 66 4f 7d c6 f0 4e 1c ee eb d2 aa 39 24 34 4d 51 1f 4a be 50 b4 e1 4d eb 19 e3 26 94 80 cc 82 7d 6c 6b 65 2f dd 14 a0 85 fa f1 21 12 6e c1 ac b6 8a ae 61 b5 43 2f 1b 00 Data Ascii: PB/U 7/\h.tLXx5b?"\!-nx$IdjTi)N\L-Pi]Qvmf?^70YD&OTgaG\|S,V>{^w$jlZ?(Xh:ppfQbn 590fO}N9$4MQJPM&}lke/!naC/
2024-04-24 02:17:24 UTC	8459	IN	Data Raw: 0a 07 4b 6d aa c9 ad ee d5 e6 5d 2d d5 04 2d e2 db 83 88 cc 77 66 3c dd b6 06 90 41 86 b4 ce e7 ff 1c 0a f0 6b f3 9f 4a d5 14 84 02 bc 77 21 27 00 71 f0 b5 0f 2f 20 78 8d 1a a7 0e 5c 40 ac 14 b4 47 b0 e2 bc 10 03 5a f7 2e 13 f6 d9 4e c0 d6 06 9a 02 71 01 f9 f8 f6 8d f7 92 24 49 92 e4 6d c9 d4 ca 90 b3 77 56 de 59 29 a7 12 f0 73 6d af 5b 53 5a d8 73 21 bc a2 6c 9d 7f 4b 60 11 a9 29 3a 8b 6e 9f 25 26 c0 60 3e c6 b8 7c 4f 23 08 3d 3f 25 6c bf 92 1e a5 e7 f9 56 59 5a 13 29 5d 24 4b 72 f6 d3 84 fe ca fc d4 d4 39 83 ec fa 5a 8d d8 6a 85 0c 17 2e d8 02 3c a8 ff 70 79 9b c1 69 d2 09 c0 8c f8 26 95 03 c1 94 e5 fe d1 e6 a9 b3 7b 26 bf 2e ba 89 3a 80 15 c4 77 10 c9 37 50 dc e9 86 9d 4e 71 69 b0 d1 d5 46 5c d6 a8 4f 0d db a0 f3 62 33 b8 46 a0 03 01 49 20 1c 4c b4 9a Data Ascii: Km]--wf<AkJw!'q/ x\@GZ.Nq$ImwVY)sm[SZs!lK`):n%&`>\|O#=?%lVYZ)]$Kr9Zj.<pyi&{&.:w7PNqiF\Ob3FI L
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 66 ce 35 e0 0f 84 b3 fd a3 bd a3 a0 94 74 69 24 2c 58 b6 b7 78 37 d0 d3 6b 55 4c 27 11 f6 ae fd ec bb 32 ac 45 9e 5f da 7d 71 04 a3 89 ff b4 f3 9c 3d 02 29 50 71 a6 01 38 c6 72 74 71 58 02 99 d1 0b f8 3b 7d 58 18 2a 7c fc 2c 2f b0 31 e9 a6 73 1e 74 f1 17 88 12 bc 64 39 d5 b1 87 41 7d 35 0e 02 88 8c 8f 4f b5 98 fe 7a b6 e3 93 ff c2 2f 5b 2c 75 2a 7f a1 fe 9e dc 16 d9 30 fd 8d 01 50 1b 92 c0 5a d0 55 99 61 29 a6 d6 5d f5 34 40 27 7d 8d e0 9e ae 89 3f 38 3c 22 e6 62 8a c9 c4 bf 5e 9b 0d 6f c1 3e a3 f6 bf 82 bd c7 55 dd 07 c4 4b 47 79 60 2f d7 9a 02 1e ea ff cc 05 ff 1c 1a 79 f1 46 87 4a fd de b9 d3 2f 02 ec 37 0a de d1 ae 7f f0 f6 e7 ca a7 dc c8 68 a2 89 26 9a 94 ef f0 f4 cc d4 d4 54 56 5e 1d d9 c4 fc c4 c4 c4 cc e4 c8 d0 4d fe 23 a6 af 1f 00 ef 8d cd cc cc Data Ascii: f5ti$,Xx7kUL'2E_}q=)Pq8rtqX;}X\|,/1std9A}5Oz/[,u0PZUa)]4@'}?8<"b^o>UKGy`/yFJ/7h&TV^M#
2024-04-24 02:17:24 UTC	1024	IN	Data Raw: 5b 62 52 d6 b2 7a ab ad 7e fd 4a e7 b5 9d ca 09 af ad ea c5 af 58 01 06 67 81 7c ce f5 12 81 bd 04 1a a4 b5 7d d6 02 81 37 c4 3b 1d 3a 69 7a cd 1f 17 c7 09 37 c5 3a 0c 68 4b 60 3b 91 3d 5b a1 1f 5e 59 08 0e 1a 5d b8 5d 87 83 41 f4 74 a1 0d e4 c2 73 f4 30 bd 46 9f c8 06 a3 0b f8 33 c0 67 41 39 61 16 0f 1d 52 aa 66 d6 85 56 55 99 53 93 2a 5a f8 b7 6e b4 13 40 a9 b6 ab d5 42 60 17 e8 ba ab ef e8 8d f1 6e a2 68 9a ce d2 62 29 8e 4a 16 4b 00 3d 4d d7 ea 53 db 8f 73 86 69 3f c8 a8 99 a8 92 a6 99 8e 61 2e 70 f3 32 a8 bb f4 36 26 24 52 d4 13 c2 d3 db 05 d1 e0 50 7f 13 f9 af 3d 5d 2f bf b4 fe 45 5d 69 11 20 bf 86 4f 44 c0 dd 90 5f 95 aa 54 bb 4d 41 1b 2f af 69 b9 e3 5d 5b 02 9f bd 09 08 33 34 14 d9 17 3f 76 ca 1d 00 b0 a3 88 5f b4 3f 1f 3a e5 fd d7 42 40 0b 80 64 Data Ascii: [bRz~JXg\|}7;:iz7:hK`;=[^Y]]Ats0F3gA9aRfVUS*Zn@B`nhb)JK=MSsi?a.p26&$RP=]/E]i OD_TMA/i][34?v_?:B@d
2024-04-24 02:17:24 UTC	16384	IN	Data Raw: 27 f8 c3 d2 1d 8f 08 08 d6 53 bd 8b 1c a7 09 50 af d3 85 c9 d3 11 cf a3 5b d2 e8 4c ad e6 bd 3f eb 7c 6d 76 74 b0 ef d5 0e 01 91 0c 2c 07 6a 6b e1 24 12 a0 48 c2 70 f1 43 ec a9 9a 36 ef 07 87 0e 85 7c 64 57 ad 57 f9 89 e9 c0 37 43 9e 8c ba c3 0a 3e 06 54 da 01 6c 55 0f 88 61 11 1a 72 9f ee d3 34 e6 6a 06 a5 f7 0f 89 a8 df 14 41 8c 2e 08 40 76 34 06 30 b2 ba cd c9 50 00 1a 91 e0 09 01 a0 b7 00 a9 5b a7 d9 97 63 9d 4d d4 64 e6 3c c8 0d 27 ab ea a4 dd 19 f4 38 38 35 d6 8d eb f5 88 ef b1 bc e7 e1 60 3e a6 c6 a5 ef 45 f1 a3 9f 46 a4 7a b9 28 ba 0b ce e3 c5 7e 3d 23 fa 78 c2 25 15 16 04 19 55 9f 7a 74 99 40 32 a0 91 d1 e4 8c de 4c 06 c8 bb f5 d1 f3 d6 ff e7 53 59 be b8 0c f5 29 87 5f ca 8c 98 c2 b2 23 09 b4 bb 5c 87 d4 67 0c 97 04 68 1d 16 78 36 25 aa c2 29 cc Data Ascii: 'SP[L?\|mvt,jk$HpC6\|dWW7C>TlUar4jA.@v40P[cMd<'885`>EFz(~=#x%Uzt@2LSY)_#\ghx6%)
2024-04-24 02:17:24 UTC	1024	IN	Data Raw: fd 6f d1 16 ed 8f f1 cb f6 f2 4f f6 f2 9b 6f bf 05 f0 fd f0 2d 30 50 02 a0 20 50 24 28 6f f0 eb e7 12 01 46 1e 47 46 90 91 8d 1d 1b 7f 75 15 68 73 5a b8 6e 35 10 72 96 c5 2f de f2 36 fe 02 73 40 8c 74 f6 bc 44 0e 8e 7b cb 00 58 26 59 0c be 2b 52 a9 64 9d 91 2e 8c 45 f4 06 f1 4d 17 a4 3d a0 d4 cb 05 98 f0 10 e8 67 a3 6f 2f 02 60 01 2e 65 45 6e 8f ec c4 c9 38 78 52 d6 ca 74 a0 cc f5 42 f2 82 df 43 65 b3 9b 7c eb ea 84 c1 da 02 2d 57 1f 2d b4 bf 69 2f ab 4e 13 0e 66 ae 6b 1d c1 7a 0d 6e ef 28 31 b1 b0 73 20 64 b8 97 b5 9d 3c e2 70 5d 14 02 9c 14 04 66 f0 c0 da 35 bd 90 b4 de f5 62 34 c1 9e 33 17 df 95 ac a7 f9 da bb d7 66 8f 99 a8 0a 7f 21 ca b1 cb b3 d7 c6 f4 b2 41 cc 5c 8b ce c5 f7 94 28 7c ac 06 41 b9 bc 2a a3 65 5c d6 e9 34 32 a5 4b ce 74 b2 82 1d 70 7b Data Ascii: oOo-0P P$(oFGFuhsZn5r/6s@tD{X&Y+Rd.EM=go/`.eEn8xRtBCe\|-W-i/Nfkzn(1s d<p]f5b43f!A\(\|A*e\42Ktp{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50400	52.210.6.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:23 UTC	2283	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925042.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.22
2024-04-24 02:17:23 UTC	1776	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 32 36 35 34 33 36 30 34 2d 61 63 38 33 2d 34 34 38 30 2d 61 38 34 36 2d 61 66 34 39 62 34 33 35 62 32 66 31 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/pricing?trk=NAV_pricing","eid":"26543604-ac83-4480-a846-af49b435b2f1","tv":"js-3.23.0","tna":"c
2024-04-24 02:17:24 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:24 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:24 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:24 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50407	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:24 UTC	431	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:25 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: RShiT1xdcjVi9Isql28EU_V0ICoA6EJtzoscIhzWkmD24BRgi0z27g==
2024-04-24 02:17:25 UTC	14839	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50408	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:25 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925042.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.22
2024-04-24 02:17:25 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:25 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50411	18.154.132.13	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:25 UTC	420	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:25 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1002077 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:16 GMT ETag: "25ee8e8c018a2d9addc20a03b331b97a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: erhWAgWPaIjMsWnwAXXupHFMc0wjCc-sU3j7eOU0qVXK3oCYB4eaPg== Age: 1
2024-04-24 02:17:25 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 00 00 00 05 a0 08 03 00 00 00 a5 de ea ed 00 00 03 00 50 4c 54 45 47 70 4c 15 14 15 5e 89 77 6a 98 85 6a 98 85 6a 98 85 6a 97 84 69 98 85 6a 98 85 69 98 85 70 9f 8c 49 66 5a 31 40 39 57 7d 6d 6d 9b 88 6a 98 87 43 5c 52 0d 10 0f 11 16 14 52 72 65 09 0c 0b 38 4c 44 75 a4 90 5a 8c 77 14 14 15 6a 98 85 6c 96 85 69 97 84 69 97 85 72 77 79 67 93 82 74 8b 84 68 95 84 79 70 7a 64 91 7f 58 8c 76 04 04 04 04 04 04 01 01 01 0a 0a 0a 01 01 01 04 04 04 03 04 03 0f 0f 10 04 04 04 02 02 02 09 09 09 02 03 03 07 07 07 05 05 05 01 01 00 06 06 06 00 00 00 01 01 01 00 00 00 60 97 e2 7b a8 e6 5a 8a cb 2e 41 68 10 17 25 05 02 01 4a 72 a7 65 9a e3 65 98 de 60 97 e2 5d 92 da 3f 61 8f 25 32 52 5f 95 de 53 7e ba 6b 56 5e 1a Data Ascii: PNGIHDRPLTEGpL^wjjjjijipIfZ1@9W}mmjC\RRre8LDuZwjliirwygthypzdXv`{Z.Ah%Jree`]?a%2R_S~kV^
2024-04-24 02:17:25 UTC	16384	IN	Data Raw: 33 28 51 80 04 d3 a6 ee 1b 68 bb ce b7 fd fa 6b b7 db fd 62 9e 1e fe ff b6 46 57 58 dc 46 8d 49 5a 26 52 92 28 04 c2 7a fc 15 1e cf c4 d4 80 5b 00 67 ca 55 b2 dd ff 34 81 d2 e5 eb 5a 30 d8 6e 4d 0b 50 22 58 22 aa 7c ec 2b 6f ec 36 a4 25 fc f8 e9 d5 ba 6a 79 3c ea f2 e9 7f fd a8 76 a7 c3 cb e5 72 fa f4 e5 e1 78 79 dc b2 7e 9b 6c 44 92 b0 92 44 c2 28 15 60 70 ac 68 46 43 52 42 94 4c b4 4c 86 44 22 c9 04 93 84 3a 50 b7 4e cb fb 96 cc 1a 4a 0d 4e 6d af 5a d7 fb c7 c7 f3 a7 9f cf 5e f6 71 3a af a0 90 34 aa 73 ab 1e 72 23 14 34 99 45 09 ca 84 66 82 c1 49 6b c5 7d 63 77 f3 79 2f fb dd ed 76 bf a0 fb 67 2d a3 49 28 89 44 26 5a 14 59 99 d8 d1 60 48 b2 de 9f 7e 81 26 30 4a 5c 02 d8 35 38 b4 75 a4 e7 3f 7e 92 bc eb f1 b8 6e ae 6b 4c 4d 6d 43 6d 97 94 08 1a 43 4d 78 Data Ascii: 3(QhkbFWXFIZ&R(z[gU4Z0nMP"X"\|+o6%jy<vrxy~lDD(`phFCRBLLD":PNJNmZ^q:4sr#4EfIk}cwy/vg-I(D&ZY`H~&0J\58u?~nkLMmCmCMx
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: bc 8b 53 d9 79 1f d5 3d b2 1c 65 41 ce 90 3f 58 a1 7e 72 24 73 c9 b0 a6 dd 28 5c 50 d2 20 37 4e e3 79 82 64 3c be b9 e5 15 30 72 a3 9e a0 93 bc 03 36 3d 4f 26 1d 92 04 88 fd 96 37 23 0c fe 03 3b 44 c1 37 6f 98 1c e6 c3 d2 54 34 51 5f 30 6c 84 82 db f4 d0 1c 46 27 6e 65 55 79 43 cd 30 2c ac 9f 5e 8c 8f 4e f2 71 76 72 32 1e 3f c3 3c 31 39 90 4c ce a2 a7 e1 cd 6e f4 3d 7d 32 25 a0 8d e5 04 06 c3 cf e0 b3 56 9e a7 58 c3 a2 d5 8d db 0c 2f 88 4c 62 25 e0 03 8c 28 14 0a e4 b7 fd da 94 af 6b d0 ef 3f 8b 1c 65 8d 35 d6 92 33 31 6d e5 e9 b0 f7 6a 98 76 0e 26 52 f0 54 3f 4e 4b 3d 94 bb 69 b7 2c b7 33 99 b4 99 11 90 63 3c a9 39 54 0a 3f d6 fa d6 b5 bb c5 be 34 76 b6 fd 48 80 83 c1 01 93 ff 1d be a0 0d f0 b0 fe fe 70 78 3c e9 4d 8e f9 a9 4c 92 d1 1f 55 bf c6 b2 93 73 Data Ascii: Sy=eA?X~r$s(\P 7Nyd<0r6=O&7#;D7oT4Q_0lF'neUyC0,^Nqvr2?<19Ln=}2%VX/Lb%(k?e531mjv&RT?NK=i,3c<9T?4vHpx<MLUs
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: ff 77 6b 6e f6 f6 9c 43 04 3a f8 b3 e6 a0 02 64 66 4b 80 90 21 4e c4 3a fd f7 d1 ad 37 1f fe 25 49 92 24 29 1b 5c 99 39 63 6f 5d ea a7 95 b3 71 9e f9 39 2f 67 99 ef 8c 97 06 bc 36 1c f6 7b 43 46 88 ba 8b d4 c3 61 19 57 79 76 9f 8e 0f 11 38 74 d8 2f cf 47 20 8c ff 7b aa 87 bd 51 af df bf fb 3c 00 de ad 4f cb 68 ea 0d e0 c4 fc fc cd 95 b5 a5 a9 f9 45 85 1f 5c 5e 9e 9f 5a 54 43 49 26 a6 e6 e7 a7 e6 97 de a3 ad 49 fa 50 27 f9 7f 40 56 aa 1c 0d b2 53 4d 1b 72 76 42 01 18 9a 24 35 e9 80 73 6e 59 64 d3 04 68 98 46 c1 2d d3 0b 94 82 9d 37 78 44 77 18 b6 1a cb 6c 06 de e0 43 e2 b8 7f 0e 85 0c 1f e2 5d 1b 49 2c e2 64 a1 ba aa 6c 60 1e 87 47 6f 9c 3f b4 ca d1 51 00 11 c0 12 3c 92 bb 04 ce 15 ec 16 e6 6a 98 50 cb 21 21 1b 4b 01 b3 83 cd 6d 60 4e 6c 87 5f 7f fe ec 8f Data Ascii: wknC:dfK!N:7%I$)\9co]q9/g6{CFaWyv8t/G {Q<OhE\^ZTCI&IP'@VSMrvB$5snYdhF-7xDwlC]I,dl`Go?Q<jP!!Km`Nl_
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: 30 e3 5f 5a 37 06 ab 09 2a 92 d7 51 dd 22 08 42 14 0c 86 00 48 84 f6 72 3a fa 23 a4 bf 0e 95 ac 43 f8 07 87 78 c5 ed b4 37 5c 28 80 42 13 61 c9 71 1c c1 99 d3 bf 44 dc 47 5e 52 58 90 b4 14 57 2d 2e 4b 18 f3 62 b6 90 0f 81 1d e7 3f e1 eb 1d 3b bc 58 fb 1e dc b8 a7 d7 8d 7c c2 3f 34 38 3c ac 98 68 cb 7b b4 25 2d 4e 81 bb 5a b5 97 6b 3d 42 96 97 88 d2 b0 5d 25 0a cc 0b a4 3c 23 a1 9f 18 11 2a 6a 3b 37 65 ea 29 f9 46 6a 64 aa 40 c1 60 4f 19 37 13 d4 9c ad 9c bf 68 dc 24 02 e4 12 fe df e0 d1 ee 3e 70 aa 28 c2 07 cc 34 36 23 b9 78 f1 f2 4a 2b ab 0b a5 c4 26 ba 86 20 eb c0 64 b5 84 7f ae 3f e5 9a 58 9b 8e 4a 5d 0a 86 97 42 98 d5 2d 32 34 52 67 eb ee f8 e7 92 72 06 9a 0f 97 74 e9 21 07 ea 7c 75 f2 5b 6d 02 22 19 f0 58 62 3e b5 bd 15 c8 4f dd 0a 6e df 7b 6f 41 7f Data Ascii: 0_Z7Q"BHr:#Cx7\(BaqDG^RXW-.Kb?;X\|?48<h{%-NZk=B]%<#j;7e)Fjd@`O7h$>p(46#xJ+& d?XJ]B-24Rgrt!\|u[m"Xb>On{oA
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: 77 77 13 4c c7 3c 33 e3 25 bf 16 03 02 39 68 ad 9f cb 93 6e 5f 1d bd bc ce c3 cd 7a fe 42 11 a3 02 de c5 43 7c 43 f2 2c 27 fd 8f 2f 0c 85 ae eb 2b fd 7f ff cb df 7c 7e aa bd b8 bc 40 1c 6f 5a 56 69 e8 d3 11 92 20 57 e8 a3 76 c3 93 6c 1b 60 d6 54 0d 31 ba 70 70 f9 c0 91 c5 ec c8 c1 05 27 8c 56 81 b7 de ce f4 4f 52 f0 87 bc fe 11 02 d2 21 0b a4 32 40 5b 10 64 64 87 98 4d 74 67 88 db 2d 53 83 3d 7f 71 02 27 7f b0 8c 1e 4b 80 94 7b f6 12 e0 b1 af 3f f1 60 ac 10 b4 ef d7 73 77 82 8e 6f 0f bd c1 4b d9 67 5a b9 37 30 8c ad ab a5 3b 2c b6 16 17 8f 1c 59 f4 3f d0 8b dc 91 20 de f6 b2 f5 c5 7f d6 60 c0 1b 6a 8d cd 3c 31 2e 21 61 a0 53 96 19 11 30 47 01 6f d3 03 8c 65 15 04 55 10 87 7b 7a ad 95 e7 6b 5e 7e e7 6d 71 7f 78 69 8e 78 66 98 02 93 38 01 31 80 25 42 39 aa Data Ascii: wwL<3%9hn_zBC\|C,'/+\|~@oZVi Wvl`T1pp'VOR!2@[ddMtg-S=q'K{?`swoKgZ70;,Y? `j<1.!aS0GoeU{zk^~mqxixf81%B9
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: f6 37 97 7f e9 06 be 2b 1e 73 01 18 bc be e0 9f ab c0 b8 99 08 72 e0 53 f7 b9 17 6b 95 05 75 1c 22 ae 4e 56 0e f4 ef ed 8b ec 75 14 57 d4 3f 0a 9f 8f f7 ed 1b 80 0e 8d e4 45 a3 98 5e f9 d0 a2 2d da 03 6d cb d7 11 58 b6 a0 bd 7c e9 8a ca c0 5c 85 ff 7e 2c 47 b0 a6 2b ca 08 91 20 f8 d6 f5 57 5e 6a a6 7c 8e d0 66 a8 a7 15 9b eb ef 9e 04 0c 00 fa 4f 90 73 6e 5d 1e 59 ca 56 84 43 55 f3 ad a8 81 3e 1a dd 4e 4d c9 c7 39 39 d9 9e 9c b6 7c a7 2b bb 9d 6b ed 07 ce 55 07 79 4a b4 07 28 e5 53 59 41 99 3d f1 a2 ea a3 dc 86 95 4d 57 60 8e f0 c0 c6 2f 2d 04 1d c9 c4 3d 7b 10 14 0f 26 c0 8b fe 1c 76 26 0b c8 7c 06 45 fb d2 31 3a 02 1f ae 7b dd e9 65 9e 49 e8 13 5d d5 1a 0b 8d 85 ab e8 6a a6 5a 20 ce e4 3b 5f 8a e3 f9 75 1e bc a8 eb c3 13 ab d3 99 1c e2 6c 09 30 59 a6 ec Data Ascii: 7+srSku"NVuW?E^-mX\|\~,G+ W^j\|fOsn]YVCU>NM99\|+kUyJ(SYA=MW`/-={&v&\|E1:{eI]jZ ;_ul0Y
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: f8 97 b5 d6 a3 aa a6 f6 37 61 38 ce 89 ce d7 da af 65 96 ef 78 52 99 24 cb 57 6d 50 d4 de 72 11 d9 bc 9f db ba e9 fb 37 23 f9 6e 68 c7 70 9f f3 3e 64 fa 7c 77 b9 db b2 0b 41 0f f7 17 55 37 92 fd fb 6b 8c 94 4b 96 af 5e b3 79 db d6 28 bb b4 7c d5 43 2b 2b db e6 d5 62 be 0d 2b 7c 8a 1b 15 44 2f a0 45 5b b4 fb dd b6 cc cf 8d b5 b1 1a 45 28 6e 07 c0 f2 15 80 ef ed 2b 32 a2 ff d0 00 df d6 88 4f f8 ca 4b c9 0f 19 f1 6e 77 6b 05 bc 7c 9d 11 31 1a 2b 44 31 16 51 50 fc 7b e8 bd 77 da e0 34 7d 80 eb ee 4c 1d 40 e4 30 67 54 98 8b 1a a5 b5 19 6d 56 91 62 ec 57 d1 00 0b 5d cd a6 d7 32 09 89 8e ee c3 2c f2 0d fe cf ff fa 7f f9 5f 71 00 96 52 a7 b0 28 f9 8b 55 55 e4 34 8b d1 06 b9 6f eb e0 0d e5 f7 2a c3 e3 c6 58 2b 77 7e 70 84 4c 32 93 df 30 76 d8 00 a8 73 0e 8f c4 7f Data Ascii: 7a8exR$WmPr7#nhp>d\|wAU7kK^y(\|C++b+\|D/E[E(n+2OKnwk\|1+D1QP{w4}L@0gTmVbW]2,_qR(UU4o*X+w~pL20vs
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: 5a 17 68 ee 23 02 2e f9 14 27 da 0f dc 51 02 3d 22 df d0 12 b3 42 07 a5 df 25 f9 a9 e4 8c 57 63 f2 53 5f 78 1e 25 e1 5e e7 eb 75 02 20 09 90 f1 20 44 3f f6 58 08 e4 cd 17 15 e2 dd 2a b2 a7 76 6c a8 d0 86 e2 37 18 0f 43 aa a3 45 67 b6 1e 3d 05 33 eb 2c 9f 3e 12 ed e2 e2 d2 b9 4e a6 3c c2 0a d2 c6 e6 7c 7d 2a 0a a8 32 c4 9b 60 4f 3e 8b 2f 45 4e 35 2d 90 28 02 93 40 33 cb 9f 34 39 8b 71 a6 3b 0f 98 bf 54 df 03 ad d9 8f b3 d8 ae 2c 0b ff 34 a2 6b 38 27 b9 80 2d f3 71 0c 2d f1 71 79 85 61 c2 be 9f 6e e4 f7 b4 d8 b7 c2 2e 7b 7e 47 82 20 27 eb 9e 04 c4 15 fa 86 7f 8e 3b ff b3 8f b0 16 b0 ae 5a fa cf 16 72 98 18 cb d4 a7 58 60 76 d9 ae e6 87 f6 3a b9 14 c2 41 f1 4f 27 79 88 29 09 19 1d 7b 9b ea fa 92 0b 75 1d 21 8c b1 bb 9a ab 01 89 80 31 8b 20 37 d1 27 23 7b a7 Data Ascii: Zh#.'Q="B%WcS_x%^u D?Xvl7CEg=3,>N<\|}2`O>/EN5-(@349q;T,4k8'-q-qyan.{~G ';ZrX`v:AO'y){u!1 7'#{
2024-04-24 02:17:26 UTC	16384	IN	Data Raw: 06 d4 02 c0 07 59 16 e4 1b ab ef 51 a9 5e 5f 11 e0 95 20 32 61 05 20 08 0e 54 b7 75 fb d6 ad 39 a0 97 07 01 9e 71 4e 60 98 d7 07 d2 78 4d bb a6 63 ca 9e ad f8 c2 dd 46 47 16 fe 48 b5 bd cb 63 bb 9e 7a 6a fb 33 bb 6f f5 cb 96 95 4d 65 aa b1 b5 c3 b7 03 c0 03 53 77 bd 24 b0 39 d0 b4 dd 78 a0 b8 35 08 18 a9 a5 72 19 90 35 23 eb d7 2e a3 c3 b2 dd 0f b6 62 e3 90 02 18 94 06 36 2f b9 cd 4b f8 94 ab 77 18 4e 74 f2 8b 37 de 80 37 8e 4e e0 57 40 82 af bd fc b2 62 40 2c 00 1a 00 d5 94 5a 5b 1f 42 b0 ce 54 d3 23 17 55 78 ed a6 85 a0 e9 f2 38 93 d0 62 f2 cd 36 de 53 ba 97 e8 01 8e bd 03 7f ce df b8 d5 f0 1c 4c 88 d7 3f fb 2c 3b 81 3f 93 30 67 76 cb d0 f6 89 be bb 17 f1 fc e6 06 b4 3c 5e be b5 c2 1b 27 b3 6f 2c 6c 8d 3d 8d 67 c0 63 33 70 14 bb af 69 b6 a1 9e df 8d 81 Data Ascii: YQ^_ 2a Tu9qN`xMcFGHczj3oMeSw$9x5r5#.b6/KwNt77NW@b@,Z[BT#Ux8b6SL?,;?0gv<^'o,l=gc3pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50410	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:25 UTC	2974	OUT	GET /i.gif?e=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&s=R5hfC5dT6-5o4PlZBozWkW35GxI HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925042.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.22
2024-04-24 02:17:26 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:26 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50409	52.210.6.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:26 UTC	2283	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3318 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
2024-04-24 02:17:26 UTC	3318	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 66 66 37 65 64 39 30 37 2d 66 38 36 30 2d 34 64 62 65 2d 61 30 37 61 2d 35 36 38 31 37 38 34 62 39 62 36 30 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"ff7ed907-f860-4dbe-a07a-5681784b9b60","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:17:26 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:26 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:26 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:26 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50412	99.80.201.152	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:27 UTC	2741	OUT	GET /i.gif?e=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&s=R5hfC5dT6-5o4PlZBozWkW35GxI HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
2024-04-24 02:17:27 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:17:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50413	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:27 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
2024-04-24 02:17:27 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:27 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50415	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:28 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:28 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:17:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50416	34.246.249.180	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:29 UTC	2243	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925045.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.23
2024-04-24 02:17:29 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:17:30 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:29 GMT ETag: W/"4515-hOY5ebyWo9qvc0jY8Pp9MChrHf4" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17685 Connection: Close
2024-04-24 02:17:30 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 33 34 35 31 39 31 36 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 38 31 38 30 32 38 35 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 32 31 37 38 35 36 31 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 39 38 39 37 36 30 37 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 38 34 36 30 36 33 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4f 44 51 32 4d 44 59 7a 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 4d 77 4f 54 67 35 Data Ascii: {"creatives":[{"adId":523451916,"creativeId":348180285,"flightId":512178561,"campaignId":309897607,"advertiserId":2846063,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyODQ2MDYzLCJhdCI6OTU5LCJidCI6MCwiY20iOjMwOTg5
2024-04-24 02:17:30 UTC	13936	IN	Data Raw: 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4f 44 51 32 4d 44 59 7a 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 4d 77 4f 54 67 35 4e 7a 59 77 4e 79 77 69 59 33 51 69 4f 69 49 69 4c 43 4a 6a 61 43 49 36 4d 7a 51 35 4d 44 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d 30 4f 44 45 34 4d 44 49 34 4e 53 77 69 5a 47 6b 69 4f 69 49 31 4e 44 6c 69 5a 54 46 6b 5a 54 67 30 4e 6a 4d 30 4e 6a 64 6a 59 6d 4e 6a 4e 6a 41 34 4d 54 68 6d 5a 47 45 79 4e 7a 67 77 4e 69 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 59 30 4e 57 4e 6b 4d 54 52 6c 59 6d 59 33 59 6a 51 32 4f 54 45 35 4d 7a 4d 31 4e 6a 4a 6b 4d 32 4e 6d 4e 44 45 79 4d 6a 6b 78 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 6a 4d Data Ascii: MSIsImF2IjoyODQ2MDYzLCJhdCI6OTU5LCJidCI6MCwiY20iOjMwOTg5NzYwNywiY3QiOiIiLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0ODE4MDI4NSwiZGkiOiI1NDliZTFkZTg0NjM0NjdjYmNjNjA4MThmZGEyNzgwNiIsImRqIjowLCJpaSI6IjY0NWNkMTRlYmY3YjQ2OTE5MzM1NjJkM2NmNDEyMjkxIiwiZG0iOjMsImZjIjo1MjM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50417	52.210.6.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:30 UTC	2282	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925049.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.24
2024-04-24 02:17:30 UTC	980	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 22 2c 22 70 61 67 65 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84","page":"/downloads/04c739eb07109cb2a1e7a9e50e8b62bd2024042308505
2024-04-24 02:17:30 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:30 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:30 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50420	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:30 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925939839
2024-04-24 02:17:31 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d07c8167eda81d307ca96358727f505e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: uXgZr7UoeYvdzKRWFkF5bPGtchKGK62uG81zeMRJmuFfeCUKoiBS6w== Age: 71219
2024-04-24 02:17:31 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50419	52.213.228.117	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:31 UTC	1988	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925049.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.24
2024-04-24 02:17:31 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:31 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:17:31 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50421	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:31 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925049.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.24
2024-04-24 02:17:32 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:31 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50422	18.154.206.82	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:31 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714960680284 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713925939839
2024-04-24 02:17:31 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:17:31 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 d60ff1abe1a8d6b57f911d047ccdc9b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: DWIlKfH0fwykyWONT-ZyGVCRHYFxWFwxbfKlNGzBb33agKWbsOuoCQ== Age: 62248

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50424	18.154.132.34	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:32 UTC	813	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:33 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:21 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:34 GMT ETag: "f05235538f0c742e45c43c011a5b2fec" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: h9h41y89i2QfO1eZ1SbCyeewQZ_Xb-mHNe-AM4VlWZTJ4-I4VKJ7HA==
2024-04-24 02:17:33 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50426	52.210.6.56	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:33 UTC	2283	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925052.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.25
2024-04-24 02:17:33 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 39 35 33 37 38 63 37 61 2d 63 30 37 33 2d 34 34 39 35 2d 38 36 32 32 2d 32 30 63 36 36 32 65 39 65 31 38 35 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"95378c7a-c073-4495-8622-20c662e9e185","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:17:33 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:33 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:33 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:33 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50428	18.154.132.34	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:33 UTC	730	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/bundle.8109b10fbdcaff69fa1c.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:34 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 229619 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:35 GMT ETag: "dad7e2c18e4a9909920276fe5afaaa16" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ADYJTqc1fQb5X6XMI28w3egC8CBX-VeqtBpvZCKN4FyJfJYw122LVQ==
2024-04-24 02:17:34 UTC	15862	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 38 31 30 39 62 31 30 66 62 64 63 61 66 66 36 39 66 61 31 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 38 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 63 69 72 63 6c 65 46 69 6c 6c 65 64 2f 69 6e 64 65 78 2e 6a 73 22 3a 31 38 30 35 2c 22 2e 2f 63 69 72 63 6c 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 35 37 35 33 2c 22 2e 2f 64 65 66 61 75 6c 74 2f 69 6e 64 65 78 2e 6a 73 22 3a 39 34 30 34 2c 22 2e 2f 73 71 75 61 72 65 53 74 72 6f 6b 65 2f 69 6e 64 65 78 2e 6a 73 22 3a 36 39 38 34 7d 3b Data Ascii: /! For license information please see bundle.8109b10fbdcaff69fa1c.js.LICENSE.txt /!function(){var t,e,n={854:function(t,e,n){var r={"./circleFilled/index.js":1805,"./circleStroke/index.js":5753,"./default/index.js":9404,"./squareStroke/index.js":6984};
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 39 20 31 32 2e 31 31 39 38 20 31 34 2e 35 38 30 39 20 31 32 2e 34 32 37 43 31 34 2e 35 38 30 39 20 31 32 2e 37 34 33 38 20 31 34 2e 36 30 34 39 20 31 33 2e 30 34 36 32 20 31 34 2e 36 35 32 39 20 31 33 2e 33 33 34 32 43 31 34 2e 37 30 30 39 20 31 33 2e 36 32 32 32 20 31 34 2e 37 38 32 35 20 31 33 2e 38 37 36 36 20 31 34 2e 38 39 37 37 20 31 34 2e 30 39 37 34 43 31 35 2e 30 31 32 39 20 31 34 2e 33 31 38 32 20 31 35 2e 31 37 31 33 20 31 34 2e 34 39 35 38 20 31 35 2e 33 37 32 39 20 31 34 2e 36 33 30 32 43 31 35 2e 35 37 34 35 20 31 34 2e 37 35 35 20 31 35 2e 38 32 38 39 20 31 34 2e 38 31 37 34 20 31 36 2e 31 33 36 31 20 31 34 2e 38 31 37 34 43 31 36 2e 35 33 39 33 20 31 34 2e 38 31 37 34 20 31 36 2e 38 35 31 33 20 31 34 2e 37 30 32 32 20 31 37 2e 30 37 32 31 Data Ascii: 9 12.1198 14.5809 12.427C14.5809 12.7438 14.6049 13.0462 14.6529 13.3342C14.7009 13.6222 14.7825 13.8766 14.8977 14.0974C15.0129 14.3182 15.1713 14.4958 15.3729 14.6302C15.5745 14.755 15.8289 14.8174 16.1361 14.8174C16.5393 14.8174 16.8513 14.7022 17.0721
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 20 37 2e 34 38 37 36 38 20 33 2e 30 37 33 34 34 4c 35 2e 34 35 37 32 38 20 33 2e 33 34 37 30 34 43 35 2e 34 30 39 32 38 20 32 2e 39 36 33 30 34 20 35 2e 32 39 38 38 38 20 32 2e 36 35 35 38 34 20 35 2e 31 32 36 30 38 20 32 2e 34 32 35 34 34 43 34 2e 39 35 33 32 38 20 32 2e 31 38 35 34 34 20 34 2e 36 35 35 36 38 20 32 2e 30 36 35 34 34 20 34 2e 32 33 33 32 38 20 32 2e 30 36 35 34 34 43 33 2e 39 32 36 30 38 20 32 2e 30 36 35 34 34 20 33 2e 36 37 31 36 38 20 32 2e 31 33 32 36 34 20 33 2e 34 37 30 30 38 20 32 2e 32 36 37 30 34 43 33 2e 32 36 38 34 38 20 32 2e 33 39 31 38 34 20 33 2e 31 30 35 32 38 20 32 2e 35 36 34 36 34 20 32 2e 39 38 30 34 38 20 32 2e 37 38 35 34 34 43 32 2e 38 36 35 32 38 20 33 2e 30 30 36 32 34 20 32 2e 37 38 33 36 38 20 33 2e 32 36 30 36 Data Ascii: 7.48768 3.07344L5.45728 3.34704C5.40928 2.96304 5.29888 2.65584 5.12608 2.42544C4.95328 2.18544 4.65568 2.06544 4.23328 2.06544C3.92608 2.06544 3.67168 2.13264 3.47008 2.26704C3.26848 2.39184 3.10528 2.56464 2.98048 2.78544C2.86528 3.00624 2.78368 3.2606
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 28 38 37 33 31 29 2c 69 3d 6e 28 36 34 30 31 29 2c 6f 3d 6e 28 33 32 33 37 29 2c 73 3d 6e 28 38 39 37 39 29 2c 61 3d 6e 28 32 33 37 29 2c 75 3d 73 28 22 69 74 65 72 61 74 6f 72 22 29 2c 63 3d 4f 62 6a 65 63 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 63 28 74 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 5b 75 5d 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 69 6e 20 65 7c 7c 69 28 61 2c 72 28 65 29 29 7d 7d 2c 33 32 33 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 7d 2c 39 36 32 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (8731),i=n(6401),o=n(3237),s=n(8979),a=n(237),u=s("iterator"),c=Object;t.exports=function(t){if(o(t))return!1;var e=c(t);return void 0!==e[u]\|\|"@@iterator"in e\|\|i(a,r(e))}},3237:function(t){"use strict";t.exports=function(t){return null==t}},962:function(
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6c 28 6e 2c 74 2c 65 28 66 2c 74 2c 6e 29 29 2c 6e 7d 7d 29 7d 2c 31 35 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 35 34 29 2c 69 3d 6e 28 33 31 32 29 2c 6f 3d 6e 28 38 37 30 36 29 2e 61 64 64 3b 72 28 7b 74 61 72 67 65 74 3a 22 53 65 74 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 21 30 7d 2c 7b 61 64 64 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 28 74 68 69 73 29 2c 65 3d 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 6f 28 74 2c 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 29 7d 2c 39 33 38 33 3a 66 75 6e 63 74 Data Ascii: );return l(n,t,e(f,t,n)),n}})},1589:function(t,e,n){"use strict";var r=n(6454),i=n(312),o=n(8706).add;r({target:"Set",proto:!0,real:!0,forced:!0},{addAll:function(){for(var t=i(this),e=0,n=arguments.length;e<n;e++)o(t,arguments[e]);return t}})},9383:funct
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 28 31 35 38 39 29 2c 69 28 39 33 38 33 29 2c 69 28 35 30 32 35 29 2c 69 28 39 38 33 29 2c 69 28 39 36 30 30 29 2c 69 28 34 37 31 33 29 2c 69 28 31 35 35 35 29 2c 69 28 31 36 34 29 2c 69 28 35 36 31 39 29 2c 69 28 36 31 31 34 29 2c 69 28 36 30 31 34 29 2c 69 28 35 34 37 38 29 2c 69 28 35 35 35 32 29 2c 69 28 35 34 31 34 29 2c 69 28 35 32 33 35 29 2c 69 28 31 35 32 37 29 3b 76 61 72 20 65 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 73 63 72 69 70 74 73 3d 5b 5d 2c 74 68 69 73 2e 6c 69 73 74 65 6e 3d 74 68 69 73 2e 6c 69 73 74 65 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 69 6e 69 74 3d 74 68 69 73 2e 69 6e 69 74 2e 62 69 6e 64 28 74 68 69 73 29 7d Data Ascii: (1589),i(9383),i(5025),i(983),i(9600),i(4713),i(1555),i(164),i(5619),i(6114),i(6014),i(5478),i(5552),i(5414),i(5235),i(1527);var e=new class{constructor(){this.initiated=!1,this.scripts=[],this.listen=this.listen.bind(this),this.init=this.init.bind(this)}
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 41 65 5b 74 5d 3d 72 74 5b 74 5d 3d 6f 2c 41 65 5b 69 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6e 2c 6f 29 41 65 5b 69 2b 28 22 65 61 73 65 49 6e 22 3d 3d 3d 65 3f 22 2e 69 6e 22 3a 22 65 61 73 65 4f 75 74 22 3d 3d 3d 65 3f 22 2e 6f 75 74 22 3a 22 2e 69 6e 4f 75 74 22 29 5d 3d 41 65 5b 74 2b 22 2e 22 2b 65 5d 3d 6f 5b 65 5d 7d 29 29 2c 6f 7d 2c 47 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 2e 35 3f 28 31 2d 74 28 31 2d 32 2a 65 29 29 2f 32 3a 2e 35 2b 74 28 32 2a 28 65 2d 2e 35 29 29 2f 32 7d 7d 2c 56 65 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 3e 3d 31 3f 6e 3a 31 Data Ascii: ion(t){for(var e in Ae[t]=rt[t]=o,Ae[i=t.toLowerCase()]=n,o)Ae[i+("easeIn"===e?".in":"easeOut"===e?".out":".inOut")]=Ae[t+"."+e]=o[e]})),o},Ge=function(t){return function(e){return e<.5?(1-t(1-2e))/2:.5+t(2(e-.5))/2}},Ve=function t(e,n,r){var i=n>=1?n:1
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 30 2c 68 29 2c 75 26 26 28 6c 2e 66 70 3d 75 29 2c 73 26 26 6c 2e 6d 6f 64 69 66 69 65 72 28 73 2c 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 5f 70 74 3d 6c 29 7d 2c 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 29 7b 76 61 72 20 73 2c 61 2c 75 2c 63 3b 69 66 28 67 74 5b 74 5d 26 26 21 31 21 3d 3d 28 73 3d 6e 65 77 20 67 74 5b 74 5d 29 2e 69 6e 69 74 28 69 2c 73 2e 72 61 77 56 61 72 73 3f 65 5b 74 5d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 69 66 28 52 28 74 29 26 26 28 74 3d 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 72 29 29 2c 21 55 28 74 29 7c 7c 74 2e 73 74 79 6c 65 26 26 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 5a 28 74 29 7c 7c 57 28 74 29 29 72 65 74 75 72 6e 20 50 28 74 29 3f 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 72 29 3a 74 Data Ascii: 0,h),u&&(l.fp=u),s&&l.modifier(s,this,t),this._pt=l)},en=function(t,e,n,r,i,o){var s,a,u,c;if(gt[t]&&!1!==(s=new gt[t]).init(i,s.rawVars?e[t]:function(t,e,n,r,i){if(R(t)&&(t=on(t,i,e,n,r)),!U(t)\|\|t.style&&t.nodeType\|\|Z(t)\|\|W(t))return P(t)?on(t,i,e,n,r):t
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 44 6e 28 74 2c 65 29 3a 76 7d 2c 6d 61 74 63 68 4d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6b 6e 28 74 29 7d 2c 6d 61 74 63 68 4d 65 64 69 61 52 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3d 74 2e 63 6f 6e 64 69 74 69 6f 6e 73 3b 66 6f 72 28 6e 20 69 6e 20 72 29 72 5b 6e 5d 26 26 28 72 5b 6e 5d 3d 21 31 2c 65 3d 31 29 3b 65 26 26 74 2e 72 65 76 65 72 74 28 29 7d 29 29 7c 7c 53 6e 28 29 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4c 6e 5b 74 5d 7c 7c 28 4c Data Ascii: (t,e){return t?new Dn(t,e):v},matchMedia:function(t){return new kn(t)},matchMediaRefresh:function(){return xn.forEach((function(t){var e,n,r=t.conditions;for(n in r)r[n]&&(r[n]=!1,e=1);e&&t.revert()}))\|\|Sn()},addEventListener:function(t,e){var n=Ln[t]\|\|(L
2024-04-24 02:17:34 UTC	16384	IN	Data Raw: 29 26 26 28 63 25 3d 61 29 21 3d 63 25 31 38 30 26 26 28 63 2b 3d 63 3c 30 3f 61 3a 2d 33 36 30 29 2c 22 63 77 22 3d 3d 3d 6f 26 26 63 3c 30 3f 63 3d 28 63 2b 33 36 65 39 29 25 61 2d 7e 7e 28 63 2f 61 29 2a 61 3a 22 63 63 77 22 3d 3d 3d 6f 26 26 63 3e 30 26 26 28 63 3d 28 63 2d 33 36 65 39 29 25 61 2d 7e 7e 28 63 2f 61 29 2a 61 29 29 2c 74 2e 5f 70 74 3d 73 3d 6e 65 77 20 4d 6e 28 74 2e 5f 70 74 2c 65 2c 6e 2c 72 2c 63 2c 4b 6e 29 2c 73 2e 65 3d 6c 2c 73 2e 75 3d 22 64 65 67 22 2c 74 2e 5f 70 72 6f 70 73 2e 70 75 73 68 28 6e 29 2c 73 7d 2c 58 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 4a 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 Data Ascii: )&&(c%=a)!=c%180&&(c+=c<0?a:-360),"cw"===o&&c<0?c=(c+36e9)%a-~~(c/a)a:"ccw"===o&&c>0&&(c=(c-36e9)%a-~~(c/a)a)),t._pt=s=new Mn(t._pt,e,n,r,c,Kn),s.e=l,s.u="deg",t._props.push(n),s},Xr=function(t,e){for(var n in e)t[n]=e[n];return t},Jr=function(t,e,n){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50429	34.250.136.134	443	5468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:34 UTC	2012	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925052.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.25
2024-04-24 02:17:35 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f69d832e-58db-4053-8ac7-988d1c56db8e; Expires=Thu, 24 Apr 2025 02:17:34 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:17:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.4	50430	34.246.249.180	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:35 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:35 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:17:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.4	50431	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:35 UTC	785	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/LandRoverWeb-Medium.4427ee73c2ac6d6a97d7.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:36 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 41124 Connection: close Date: Wed, 24 Apr 2024 02:17:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 16 Apr 2024 17:45:00 GMT ETag: "d747e7e3db3ecf479e1164662f582a12" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: dP36lHdKvD4IGWTahbS4MDRUBEsy0r4NEuxss3_kdfVaIojpUO-ESQ==
2024-04-24 02:17:36 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a0 a4 00 10 00 00 00 02 3d 20 00 00 a0 43 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 e4 76 1c bd 2a 06 60 00 94 2a 08 83 1a 09 8c 23 11 0c 0a 84 d2 14 83 e4 02 0b 8b 16 00 01 36 02 24 03 96 28 04 20 05 89 5f 07 ae 09 0c 84 5b 5b 59 ff 91 06 a5 87 7f be 22 ad 0d 8b e9 36 04 00 a7 3a 35 b2 fa a3 2e 88 63 6c 20 3d 2c 3d b7 f8 29 d4 9a 96 50 82 37 7d 28 6e 07 da fe 3b cb fb b2 ff ff ff ff ff 7f 47 b2 90 31 bd bf c0 fd 27 09 00 00 a8 6a b5 ed d6 6e 90 47 ce a6 a4 e4 4c bc b6 60 8e c1 e6 0e 46 3e 89 0d ee 15 b3 63 29 65 cd 46 61 e4 58 11 83 b2 67 2c 5b b4 b2 e3 28 67 ad 83 cd 23 9c e5 e9 b2 d9 05 d5 e9 28 16 cd d9 22 7a cd ce 32 44 dc c8 dc 64 6a a6 b3 42 c4 ef 54 5a 86 c7 f3 e3 d5 1a 76 1b 11 98 Data Ascii: wOF2= Cv`#6$( _[[Y"6:5.cl =,=)P7}(n;G1'jnGL`F>c)eFaXg,[(g#("z2DdjBTZv
2024-04-24 02:17:36 UTC	453	IN	Data Raw: f9 48 85 26 51 d8 2f 26 49 58 16 2b d3 82 88 80 fb 4b b4 c2 d5 32 a2 3a d3 08 62 89 11 eb 6c 46 61 99 27 da 86 24 17 62 26 35 f5 d2 ca 41 15 ab 35 d9 da 26 2c 06 7d bf c2 94 06 86 16 14 71 28 03 af 1a 82 b4 f7 5a 66 ea 3b 96 0b 86 21 50 64 d5 5b a5 08 ca 78 f7 78 f7 78 62 a1 e3 12 87 6b 97 e2 b5 22 cc f5 22 e1 37 0e 76 1f f8 5c 4e 12 ca b8 df 7c 6b a2 30 71 55 16 36 ec 6a 09 57 c1 62 a5 32 94 c3 b9 c1 9c 44 55 46 e5 83 bb c8 fa 68 b9 c6 82 22 41 8c e0 32 ab 51 f7 99 2f 9d 11 f0 8f b1 fa 90 78 1b aa 95 d5 88 b0 2c 75 f6 e1 c6 e5 97 0f 8c 93 08 20 f6 f3 65 1e cb f2 6d b1 f9 f7 9a 90 fb 20 54 47 99 ff ae 39 16 40 a8 4b 8b be 5e 04 53 b7 60 13 24 30 e6 fd f0 f4 fe f5 34 34 9b 26 b2 bf d7 ac a9 a5 ca 0b 72 29 ae d6 f2 d8 43 e5 ac fe e7 dc 11 ce 7e a6 09 fa 0d Data Ascii: H&Q/&IX+K2:blFa'$b&5A5&,}q(Zf;!Pd[xxxbk""7v\N\|k0qU6jWb2DUFh"A2Q/x,u em TG9@K^S`$044&r)C~
2024-04-24 02:17:36 UTC	12792	IN	Data Raw: f5 ba 49 0a 91 13 1d d5 c5 8b 00 e4 47 33 4b ca f8 f8 54 e8 f5 0b 94 d6 ae 8c 86 be 82 f0 1b c5 cf 00 43 0b 7a 85 3b 97 64 d0 32 24 33 23 3f c3 f3 60 83 86 22 05 d4 39 f7 65 77 74 79 3f 7b ac 34 d1 63 f9 eb 63 13 71 c0 8f f8 73 2d 1e 83 74 8f e9 8e 2f fe 2d b3 ff 0e c2 e4 0b f8 12 92 73 36 0f 93 49 3d e9 7e d7 a7 c5 bf 07 4e a8 6f ab 37 df ba aa e1 b0 90 b8 a5 f5 e1 c5 39 d2 ba 84 3b 6a 52 e5 51 34 77 a3 3f 06 6c 4f d7 24 46 e4 94 cf f5 1a 92 4c 0b 2b 2e db f0 e9 64 2e 6e 9f d1 2d 4b 99 95 ea b2 62 85 0c 88 2d 55 81 9e 6d f0 10 57 9b 33 12 66 a8 5d d3 94 69 29 2e b3 66 ca 01 b4 86 f5 ee 92 d0 8d dd ec 16 e8 5c 33 c4 41 4f a5 d2 ca 23 1e 9c c0 d8 ed 9a 81 c7 cd d6 c4 24 ee d5 28 d2 b6 93 e3 7a eb 21 67 55 94 1c 55 be 6d 92 20 f5 fc 7b f5 35 48 a6 3d fd 77 Data Ascii: IG3KTCz;d2$3#?`"9ewty?{4ccqs-t/-s6I=~No79;jRQ4w?lO$FL+.d.n-Kb-UmW3f]i).f\3AO#$(z!gUUm {5H=w
2024-04-24 02:17:36 UTC	5690	IN	Data Raw: ea 90 0c 2e a4 52 b3 de f9 46 23 d3 21 58 b7 70 94 ac be aa 91 eb b5 df ef 63 13 6a a1 2e 90 c1 41 ba 5c 32 f5 45 c1 99 e3 81 9e 90 00 20 a6 01 66 7a 63 b6 be 12 26 19 1a b8 a2 1d 9e a6 01 10 89 dc 32 a6 9b a3 42 74 33 02 6e a5 b9 0c 5c 28 b3 85 16 f7 f4 95 3a a0 f6 6e 13 0c b2 09 df e0 71 94 3e ef f3 a4 74 ae c8 72 ad 1c 67 00 af bc 83 b7 a8 16 de 5f 41 9d 0d c6 4b e9 6b 49 58 16 94 3c 9b a5 5c 95 f9 b6 39 d0 ee f7 94 04 1e 99 de 8f 31 a5 30 bf cb 91 15 c5 0f e5 bf 8c 61 5a b3 8b 46 9d 4a 62 8a 05 7a c6 52 01 50 ed 98 f3 8f 78 f6 fc 89 21 a8 78 9a 49 15 3a fa 0c e6 ad 44 f7 4d af 23 36 61 21 30 90 0a 19 4f d0 b5 26 fe 3d 9b d3 08 f7 47 00 9d 82 c6 49 3f dc 3c d7 1b e1 25 e3 04 a0 20 19 d3 78 da 69 f5 13 77 7a 5e 7f 53 d7 4e b3 e3 49 5f 0c 55 0b 6e 52 6f Data Ascii: .RF#!Xpcj.A\2E fzc&2Bt3n\(:nq>trg_AKkIX<\910aZFJbzRPx!xI:DM#6a!0O&=GI?<% xiwz^SNI_UnRo
2024-04-24 02:17:36 UTC	5805	IN	Data Raw: 7a a9 3e 1a 77 d4 a4 a8 3a 6c bc 34 a0 4b 58 89 9b 14 91 8e 7c 3b 4d 19 2f 2b a9 c1 70 b1 ce 9b 3f f5 a8 34 85 78 6e 35 c2 92 e1 c8 32 44 27 49 22 79 b0 c6 64 35 57 a6 6e 4f 8e 34 89 07 16 df 5c f4 40 a9 7c ae a9 1b 8a 51 34 47 b0 74 3d 24 16 85 34 0a 9a ae eb 0b 7f 68 55 28 1b 73 15 76 a0 d5 e8 57 d3 62 e1 6c 39 0b 65 05 39 49 bf 8f 6b 9d f4 a5 4a 7c 0d b7 59 4a 17 94 ad 3a c4 b9 bd ee 77 e3 5d 4e 7d 3e 6d b3 82 b5 da e6 d3 34 b4 fc 44 64 e9 48 a6 29 53 b3 50 ad 8d 69 49 af 21 d0 ae e4 e5 62 a2 b9 13 47 8f 34 20 51 90 81 92 f6 b2 92 f9 f8 1e df 84 38 bf 5c 12 4d 00 6b 16 93 01 88 65 bf cc 6b bc 9b 69 be c2 dc 52 52 41 af d3 09 4d 17 1d f2 18 0a bc 06 2d d1 7e 08 14 a8 c5 00 20 2d b9 11 8d 9b b3 a2 49 e5 09 97 c1 6d 96 ce 13 a1 9e ab 20 e2 4a e5 9c 49 21 Data Ascii: z>w:l4KX\|;M/+p?4xn52D'I"yd5WnO4\@\|Q4Gt=$4hU(svWbl9e9IkJ\|YJ:w]N}>m4DdH)SPiI!bG4 Q8\MkekiRRAM-~ -Im JI!

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.4	50432	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:35 UTC	790	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/grain.2c6cfe7dc5dab33d9c07.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:36 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 22140 Connection: close Last-Modified: Tue, 16 Apr 2024 17:45:21 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:37 GMT ETag: "1ac622908c72eb05313dba1e55b5707d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 db5074d02aa0b9851d4e5d66a6fc3826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 4XO8Nj4_iyWqm4PjRJy035L8-tRniATx8lPMs-rA05RcKGseU6-wsQ==
2024-04-24 02:17:36 UTC	15869	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 02 03 00 00 00 04 13 66 e6 00 00 00 0c 50 4c 54 45 2d 2d 2d 80 80 80 bf bf bf ee ee ee e1 8d 44 49 00 00 00 04 74 52 4e 53 0a 0a 0a 0a cb 83 02 bc 00 00 56 1b 49 44 41 54 78 da 15 d1 fb 43 92 f7 c2 00 f0 ef c3 4d 50 b4 07 04 04 45 03 05 2f a5 85 a6 a6 cd da f3 e0 03 82 b7 00 c1 5b 5a a0 68 da ac a9 69 b7 55 03 05 2f a5 05 86 a6 a5 a5 a5 ad 5a 6d da 6d b5 77 9d 03 26 66 65 0d 4d cb 9a 35 2b bb ed 6c 7b 75 d5 d6 ce 69 7b 2f 7f c1 e7 87 0f e0 e9 b6 bf 3c fb b0 3c 6c e7 7d 1a 99 7a 2b f7 ed f2 b3 0c fc 79 8d 49 94 1e f3 e7 da da 1d 63 ed d9 7d af 09 0a c1 d9 3d e7 7c 91 56 6a a2 2c 47 1a c6 04 8c 8a c1 19 1e 23 0f b6 12 3e bd d8 86 94 d2 68 89 b3 fc 09 62 05 20 32 da 65 d7 0c 0e 0a 33 bc Data Ascii: PNGIHDR,,fPLTE---DItRNSVIDATxCMPE/[ZhiU/Zmmw&feM5+l{ui{/<<l}z+yIc}=\|Vj,G#>hb 2e3
2024-04-24 02:17:36 UTC	6271	IN	Data Raw: f2 08 21 66 fb 07 7b 36 45 b0 d3 f0 14 aa 7d b6 dc d1 e6 4f 91 4a 52 c6 36 0a 91 f2 4f f2 d8 35 ad 1c 6d 20 95 4f 74 07 d2 c4 bf 60 e5 ad c4 ad 72 ef 70 6d fe 3c d9 8d d7 2a 18 63 64 a6 29 4b 34 08 91 59 3f 04 88 99 8b 48 03 70 fb bf 4e 31 fb 14 1b 6e 15 12 a3 73 4e 77 07 16 46 6f 86 a4 fc df 1c 68 51 9a 45 ee 65 7e 35 ef cd 60 46 79 02 e6 fa e9 8f 98 74 c4 e3 a6 ab f6 8a 73 85 f6 b5 65 5d db 26 bf 06 a8 a0 c6 6b 35 63 63 51 38 39 d2 f0 ab dc 46 15 d5 65 f5 b0 8a 56 32 58 df a4 1a a3 95 3c 2e 60 ee cb 1c 10 9b 44 4a f5 fb c4 50 32 21 9d 9a 8c c4 85 81 47 ee 96 63 f2 51 83 1f 2e 70 67 d1 0e bf ec 57 ca a0 26 82 5c 0c 56 c2 1d 5b 6d 07 6a 08 4c 61 56 dc 20 89 c3 79 6c 6f 7f ee 36 52 ce 26 7c 57 93 98 0c ff 9a 9c af 4b 22 b6 ef e3 5f 8a 51 33 5d 74 be c2 a1 Data Ascii: !f{6E}OJR6O5m Ot`rpm<*cd)K4Y?HpN1nsNwFohQEe~5`Fytse]&k5ccQ89FeV2X<.`DJP2!GcQ.pgW&\V[mjLaV ylo6R&\|WK"_Q3]t

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.4	50433	34.246.249.180	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:36 UTC	2243	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.365053505.1713924969; wt_lang=en-US; FPID=FPID2.2.ji8pkyMbFcJgAPfof4ZBuf%2B7k97tMC1al2H0LvDKlH0%3D.1713924969; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713924971020; __wtccpa=1YYY; FPAU=1.2.1163326897.1713924972; auth_session_uuid=1e8b1d43-88b3-4fae-a0f5-7661173f364b; FPLC=%2BSKD08B%2BKWKpLoW1Ddd0dxw38FIXjyioLHGtC0Xtzw3pjXzX34%2FrYrYakEjgJLr6idSby26z5zg2z7o%2B2sKitkSf0kdyV3piQyusbyEEnuhkAGn41t7q3mJofsVevg%3D%3D; __td_signed=true; _wt_snowplowses.0497=*; _fbp=fb.1.1713924979213.1486414664; sp=f69d832e-58db-4053-8ac7-988d1c56db8e; _gcl_au=1.1.1607869942.1713924996; _pin_unauth=dWlkPU1UZGhaREJrWTJNdFpUWmpNQzAwWmpsbUxUa3hZVEl0T0RCbU5UTmlNV1JqWkRjMA; _ga=GA1.2.804451605.1713924969; wt_trk=NAV_pricing; _uetsid=9ed9fee001e011efa0dea93abfd83f84\|1l09rxi\|2\|fl7\|0\|1575; _td=f93fccd8-3bb1-486d-9877-3bbfe8f6723b; _gat_UA-11792855-4=1; _rdt_uuid=1713924974217.c75ccba7-50c1-4800-9ca3-7928f039b486; _ga_0M019DTWVR=GS1.1.1713924969.1.1.1713925032.0.0.1838502804; amp_874b77=E8sC2HUkMVlUbVqOMu_V5N...1hs6u7bhs.1hs6u96f0.14.3.17; _uetvid=9eda777001e011efafd8ed114767de19\|17x4azi\|1713925040236\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925052.1713883946204.c3fe8c83-80ac-486b-8316-1cd8d0544ec7.2e7fe606-1d8e-4d04-8cbf-5549b7b3c277.dd77e905-ca75-4525-96dd-c070a22690dd.1713924978231.25
2024-04-24 02:17:36 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 32 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":2,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:17:37 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:36 GMT ETag: W/"3c67-4lbf2AbBtL8krYgjGJCmMUMjAEo" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15463 Connection: Close
2024-04-24 02:17:37 UTC	15463	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 31 35 33 31 30 38 33 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 33 36 32 31 39 36 32 35 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 30 34 31 35 39 34 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 38 31 39 32 30 39 36 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 31 39 38 39 38 31 37 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 37 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 78 4f 54 67 35 4f 44 45 33 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 35 4f 44 45 35 Data Ascii: {"creatives":[{"adId":511531083,"creativeId":336219625,"flightId":500415943,"campaignId":298192096,"advertiserId":1989817,"priorityId":149687,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoxOTg5ODE3LCJhdCI6OTU5LCJidCI6MCwiY20iOjI5ODE5

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.4	50434	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:36 UTC	786	OUT	GET /creator/landrover/2403/accordion/2_d6hcUN/1.54cf34588a1445a7e768.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/landrover/2403/accordion/2_d6hcUN/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:37 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 367532 Connection: close Last-Modified: Tue, 16 Apr 2024 17:44:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:38 GMT ETag: "919afcc9672a5541843a4796383ff076" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Tv_jLiXtkmmvGgDNhrof9sAdqZHjCF_2iXimcXxaYMvtN5EBxSys7A==
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c2 00 11 08 06 99 07 a2 03 01 22 00 02 11 01 03 11 01 ff c4 00 38 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 45 0e e7 dd f8 4c 03 57 25 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T"8ELW%
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: a6 36 71 68 63 de aa c6 bf 2f 61 6b 04 38 f7 4c 00 6e 5d ca 3a c3 e5 e9 3c 6b 05 de d0 40 3e 1e 9b ad 4a 13 57 27 9a b9 74 b9 1a 62 9b d1 7c c8 f2 d6 9c 73 93 ad a1 d4 7e 5d 4e d5 9a d3 44 2d cf 65 41 1e 73 66 00 45 85 5a 21 9c 51 cd 34 46 d6 1d 80 e8 76 0a 53 57 50 0b 30 ba 16 23 8a 9a 03 84 c9 5c 2e c9 10 a5 53 50 53 45 60 42 ac aa e4 82 c2 22 c4 b4 d5 e7 2c 9c 6d 61 e0 35 34 45 05 a4 dc 30 4b 08 0f 61 d5 69 c4 9c 4d 9e 67 61 a9 b2 30 e5 a4 a4 15 45 40 62 d3 55 7c e8 c8 30 62 ca af 3a 32 13 eb 45 80 e1 71 61 83 29 92 28 46 59 a8 46 68 f1 1b 33 22 01 5c 18 63 6c e2 c4 6a cf 52 c3 d5 76 2e 97 35 7a 38 6b 4b 1a 3a e5 b8 b0 da ce 85 b9 e8 f4 c7 47 3e 69 ed e9 1b 9b 7b 8e 92 18 13 b9 de 6c 49 ef 1b 46 c1 2f 4e 3d 3e d7 05 77 d5 f3 fd f3 ed 2f cc af b1 7d 1f Data Ascii: 6qhc/ak8Ln]:<k@>JW'tb\|s~]ND-eAsfEZ!Q4FvSWP0#\.SPSE`B",ma54E0KaiMga0E@bU\|0b:2Eqa)(FYFh3"\cljRv.5z8kK:G>i{lIF/N=>w/}
2024-04-24 02:17:37 UTC	11977	IN	Data Raw: 42 14 ad c2 1e 55 f4 25 a0 8f 1c dc 9b e8 f5 1c ed 8a f5 9b 62 c4 0a d5 9a c1 1a 57 66 4f 3e f6 62 14 d2 8e 76 09 91 9c c2 70 3e d2 42 1e 77 09 26 d6 09 62 b0 e5 b0 d5 0d 2c d5 aa d5 58 9a 2b 59 c8 d2 3b 69 9a c5 be b5 4e 70 a5 43 24 34 6f 8d 06 02 38 27 38 95 83 69 d2 84 75 c7 2e 6d cb 0f 2e 69 88 62 a1 a4 c8 d0 bd 00 12 b5 5c 04 89 6c a6 53 35 33 ca 4d 5b 35 02 de 7e 6b e6 3e 93 e6 7a cf 6e 2b 94 7c f7 94 e7 7a fe 3b 3e c9 33 36 7e a2 8c 07 8f 65 b4 18 e3 d7 a0 a8 37 6e 1b 10 cd 9c 5c de e5 9e 6b a4 ab 90 f3 7b 5d ef 95 cb 96 fb 3a 9c c4 fa 6b ab 6e 62 39 a3 b2 03 79 fe ed 81 da e4 b9 74 a6 47 d7 fb bf ca ae 35 4b 9d bc f8 f6 36 ec 65 cf b7 42 33 3b 77 15 6b 1a 86 c2 b1 35 2c 7f a5 7c d7 1a f3 a3 f6 ed 73 cb d0 ee 72 57 bb f7 5f 93 7d 2a dd 4f 11 ae 08 Data Ascii: BU%bWfO>bvp>Bw&b,X+Y;iNpC$4o8'8iu.m.ib\lS53M[5~k>zn+\|z;>36~e7n\k{]:knb9ytG5K6eB3;wk5,\|srW_}*O
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: 09 ae 33 0f d4 73 05 77 bf 96 12 d5 06 35 00 d2 23 5b 40 d3 58 73 ea f9 c2 56 33 44 bb 54 df 64 c5 cc ea 33 53 16 77 6b 24 cf 9d 65 77 ec f3 fb 0d e1 67 fa 16 5d 9c d1 9a b1 a0 7a 76 e5 3e 7c b4 35 32 35 4f 8f a9 6a 94 f5 f2 a8 0b 99 d2 d9 55 c6 cc aa ee 50 66 9d d1 52 2d cd 48 13 18 a4 c5 05 34 11 dd 12 d7 2c d0 41 41 5c 5a 2d 2b 33 75 e8 ec bf 4c 73 9b 13 ca 35 a7 9b a1 37 2a d6 c3 90 24 7a d0 5a 76 a0 46 d5 2a e6 a2 af 64 cf 57 92 5d a3 18 a9 de 15 d2 8e bd 4d a1 a3 55 1a 3c e1 62 59 24 c6 b3 25 49 1a f8 ed 6c 01 aa dd 01 4c 94 47 ea 33 8e 47 32 53 2c 0e f2 4a d4 2f 57 b2 c5 37 12 58 b2 f6 a6 b2 eb ce aa cf 6f 28 e0 f6 f3 cc 54 31 26 4e 75 ef 99 f0 05 e2 bd aa 83 28 5b 73 a7 3b a4 40 91 b6 b3 d6 ce ed 4b 81 71 9b 4c ce a9 ad 9c 6c 65 ed e2 00 30 ae 25 Data Ascii: 3sw5#[@XsV3DTd3Swk$ewg]zv>\|525OjUPfR-H4,AA\Z-+3uLs57$zZvFdW]MU<bY$%IlLG3G2S,J/W7Xo(T1&Nu([s;@KqLle0%
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: 86 c0 58 f2 b9 a8 d9 a3 6c d3 7c 49 63 83 11 cd 4d 80 06 19 89 65 01 43 e7 6a dc 81 49 22 a8 a0 0e 1f 0a d2 00 15 98 7c 30 02 33 65 88 58 81 f0 40 d4 50 18 a5 38 a6 55 fe 40 6a 40 34 ca 5d 80 2a 88 8f 59 0d f6 46 be 6a 42 c4 78 3b fc 4d 31 39 5c 1d 89 c5 61 84 80 56 17 60 2b 73 a8 5a 2a 1a 30 4a 65 46 95 22 e4 06 a2 7f e0 64 1a 4f dc 63 4d fe e7 2f 2b 05 c0 30 b6 76 2e a8 e7 34 14 1c d6 5f 34 80 63 34 d8 22 8a 02 cb 4c f9 fa 46 12 56 8b 47 6d 82 d0 42 3c 82 c3 18 a7 5d 10 6a c7 7c 56 41 c6 5f 40 06 31 a2 83 45 9f 60 d4 e4 b1 c5 6e 15 70 50 8d b1 5b 3b 78 ad b5 45 15 9f f9 d8 d0 50 5b 15 b6 c7 05 4e bf 4c 49 c1 a8 98 86 c9 7c a3 01 4e 8e ff 00 6a b9 4c 15 ee 13 e1 bb 78 f9 eb f5 ab 15 44 c1 c9 fb 60 ae 7f 8b a3 78 62 87 b9 91 48 3e 4d 87 7c 26 b4 15 44 78 Data Ascii: Xl\|IcMeCjI"\|03eX@P8U@j@4]YFjBx;M19\aV`+sZ0JeF"dOcM/+0v.4_4c4"LFVGmB<]j\|VA_@1E`npP[;xEP[NLI\|NjLxD`xbH>M\|&Dx
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: cb 4e 4e 69 e0 ae 7a f6 79 2f a7 14 ce c0 fc 8a 77 ee a2 85 61 fc 32 75 8b d9 43 7f 17 29 d1 b7 7c 75 dc 96 f7 0b d3 0e c0 66 2e 98 80 b7 ef 7f 86 2c 11 9c d3 74 f7 10 98 35 fa 57 0c 33 96 e3 78 04 f2 7d 97 4f 8f bf 6d d3 a7 3b b8 e9 00 c3 11 dc 74 82 78 26 f7 a3 21 7d a3 1c df 46 a1 3a 7f 89 ba 5b 18 a5 ea 9e 99 8c e5 07 58 74 f0 1e 1b ac 38 1c 78 ff 00 19 71 43 e8 f5 9d 82 91 a2 75 dd ba 26 29 3a f4 c4 4b 2a fa 93 27 f1 66 f5 1a e8 c8 0c 51 fa b3 c9 c6 a6 31 07 ac 7c cc 58 0b ff 00 5c fa 81 00 41 e9 97 e2 e3 aa bd 3c bf 79 d7 9f ff 00 fa 84 42 dc 5b 2f 15 7f f8 a1 eb ce 43 91 b8 bd 6b ff 00 5b fa aa fd e5 69 97 d5 3e 70 1c d7 fd 57 e7 f7 0f 5f f5 73 a8 30 4d 0f 55 79 d0 db 09 3d 50 e7 64 72 c5 bd 55 ea 06 8f 4a 8b d5 1e a1 8b 38 ff 00 aa 3d 46 1f 65 93 Data Ascii: NNizy/wa2uC)\|uf.,t5W3x}Om;tx&!}F:[Xt8xqCu&):K*'fQ1\|X\A<yB[/Ck[i>pW_s0MUy=PdrUJ8=Fe
2024-04-24 02:17:37 UTC	3406	IN	Data Raw: 59 30 eb 8a 11 e0 82 4c 72 05 75 a9 e1 77 d5 16 3f fe 3e 3b 8b 6e 4b 64 bc 4a 23 2c a1 99 ce a5 51 6d c8 d4 05 5f b5 2c 1b 15 24 7a 3e ea 43 b4 42 45 71 18 97 2c cb aa 62 9e 54 75 58 8a ac 41 06 18 76 b0 54 45 1e 37 78 c3 b9 1b 49 11 70 a5 fc 20 a2 a8 c8 cb 48 61 d4 23 46 c1 9c 62 78 4c 8c 02 14 74 39 08 44 a3 73 19 c4 7b 06 ba 62 d8 39 f3 e4 b9 59 68 e7 25 9b 76 2a a4 76 05 cb 8c f8 28 72 fd b4 70 a6 46 20 1a 8e 30 47 90 aa 92 01 4e 1d 58 35 46 c5 dc b5 12 b9 3a fc 76 2f 58 29 22 e1 99 00 24 a9 14 62 d3 ca 9c 8f 2b dc 24 11 4f 14 b2 00 4c f1 e8 17 48 a4 2c 8f 40 00 c3 66 73 f5 4c 70 a0 d3 e0 db e1 64 9a 48 c4 42 8c b2 bc ab 51 84 c9 2c 0c 47 c8 60 ab e6 a2 18 6a 32 2a ec b5 2c 9a a2 85 8a 4c 7f 25 96 18 14 bb 7a a1 cb bf 23 7d 32 d5 ec a3 63 b4 c3 53 f1 Data Ascii: Y0Lruw?>;nKdJ#,Qm_,$z>CBEq,bTuXAvTE7xIp Ha#FbxLt9Ds{b9Yh%vv(rpF 0GNX5F:v/X)"$b+$OLH,@fsLpdHBQ,G`j2,L%z#}2cS
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: bc b8 2c 7c 29 c5 31 05 b3 f9 07 d0 30 a1 32 e0 65 a5 18 15 b1 ad 80 1e 76 53 e0 56 29 36 ee 93 59 03 19 25 31 5e 3f bc c7 af 8f 07 f2 ce 68 83 48 c0 1c 17 ed e0 61 b5 c0 c2 f9 a2 75 fb 0c b9 ad 87 9a 52 28 e2 98 80 05 64 7f 7e 2b 2a 0e 28 6a a3 24 60 1a 0c 82 99 b2 6b 71 5d c4 ae f4 74 a5 4d c9 15 b8 a5 96 3f eb 75 ad d6 83 a6 68 4a a6 8b 8f 24 6c bf de e8 28 3a 53 3a 9f 02 36 00 d1 71 8a ce 29 9d 07 d8 74 34 1a 37 06 89 8c 78 a6 65 04 60 32 b0 a6 0b 9a c0 a2 23 35 ac 0a a3 18 43 8a 3a 1a d6 3a 11 c7 8a 52 82 8f 6c b5 6a b5 2c 48 40 35 1a 2e a3 69 4c 68 a4 7e 48 bb 36 0c 71 05 1e 59 17 14 50 62 9a 1f 91 ae d2 57 65 6b b3 46 1a 31 85 fb 28 87 ef b6 a2 b4 06 8a e2 b5 0e 28 c6 37 cd 76 c5 76 c5 76 c5 18 c5 76 d6 99 00 a7 4a 4f 91 02 84 2b 44 6a 6b 63 58 35 Data Ascii: ,\|)102evSV)6Y%1^?hHauR(d~+*(j$`kq]tM?uhJ$l(:S:6q)t47xe`2#5C::Rlj,H@5.iLh~H6qYPbWekF1((7vvvvJO+DjkcX5
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: 15 7a 33 9c 66 65 53 78 86 54 0c 4c 4f 1f f0 72 fa 8a 85 21 ed 1c b3 33 1d 04 2a af 1e 5a c5 a3 3b 1a 92 d3 f7 0e d7 12 15 b7 48 e1 89 a5 4f 89 63 db 90 52 ce 92 fd 3d bf d9 46 b5 68 e2 2a ed 19 18 d2 32 af 1d 3a 14 38 32 ab 06 5a 12 11 4d 6b 1c 9f ba aa bd b6 22 a2 9c c4 e6 ad a7 55 59 25 8c ba bc 7d c7 7b 88 2e 06 8b 2b 15 5a 59 35 7d 55 1a 15 fd b2 d0 5b 20 24 c3 00 d3 c5 cc 38 7c 98 e1 06 12 e4 89 36 56 48 2c dc 21 57 92 d6 50 ec 95 1d ab 39 43 57 9d d7 3d c0 8a b7 25 56 49 0c 8b e1 56 40 e0 6f 15 fc 11 62 38 e7 6b 89 08 11 ab 2c 31 0d 5a e6 56 73 2c 96 9c d5 f4 30 80 c3 95 bd 9f ca da 4e 64 96 33 71 3f 1d 2d ec a5 8c 7c 1e c8 43 4f 70 38 f3 e1 67 ef 31 0d 71 07 60 13 1c 77 52 b2 14 8e ce 73 6f 6e ea f1 5f 6b 0c 6c 79 6b 89 f9 5b 67 55 b4 e9 9b ab b2 Data Ascii: z3feSxTLOr!3Z;HOcR=Fh2:82ZMk"UY%}{.+ZY5}U[ $8\|6VH,!WP9CW=%VIV@ob8k,1ZVs,0Nd3q?-\|COp8g1q`wRson_klyk[gU
2024-04-24 02:17:37 UTC	16384	IN	Data Raw: ae 63 b9 50 49 78 ee 70 81 07 bc 82 dd 86 4d d8 9a 77 c6 92 b9 a2 ba 62 99 d4 a7 9b cb 03 71 fb 8b 6f 6c 90 85 c3 c6 01 dc 49 31 32 1a e2 f0 e5 83 74 25 e2 71 7e b6 73 9b f2 70 6b c6 ce e5 cf ee bd 23 1c 52 0f 14 c7 c1 a9 5b c9 cc c7 c5 3b 54 cf e0 a8 6d 5d 40 67 44 c6 54 06 5c d4 83 c7 86 c1 5c 50 c5 33 2d 2b 6a 69 d5 5f c9 a4 c3 64 51 18 f1 4b f1 a0 b9 24 85 fc ad 63 59 6d 8a 52 7c 87 80 32 69 45 46 31 4a a7 22 a3 ca b1 a5 18 fa 40 30 16 95 7c d4 6a 43 06 a4 23 6a c3 60 61 43 a9 f9 46 8a 70 69 42 fd 81 ae 29 29 69 0f d0 a8 b1 51 9c 7d 8c 62 90 90 6a 39 08 35 1b 54 17 25 0d 5b 72 f2 db 90 53 8d ea 8b 83 3c 60 71 bd 55 05 bd 84 66 69 7a c2 cb 92 81 e1 8f 9f b9 93 ba cd 57 77 a4 36 2a 5b 96 1f 72 39 7a d8 02 45 34 c6 9a 4a 79 8e 7c 19 1a 89 26 99 fc 1c 17 Data Ascii: cPIxpMwbqolI12t%q~spk#R[;Tm]@gDT\\P3-+ji_dQK$cYmR\|2iEF1J"@0\|jC#j`aCFpiB))iQ}bj95T%[rS<`qUfizWw6*[r9zE4Jy\|&

Target ID:	0
Start time:	04:15:57
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:15:59
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:16:02
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	04:16:21
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5604 --field-trial-handle=1968,i,4512397084582188005,6178033095092771243,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://we.tl/t-nsdjwtsB1E

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Windows Analysis Report
https://we.tl/t-nsdjwtsB1E