Edit tour

Windows Analysis Report
https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05

Overview

General Information

Sample URL:	https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05
Analysis ID:	1430714
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent=&C=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036	HTTP Parser: No favicon
Source: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	HTTP Parser: No favicon
Source: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49816 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.5:49732 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49816 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.26.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05 HTTP/1.1Host: we.tlConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05 HTTP/1.1Host: wetransfer.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/bacf6ffa65b559f2.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/404-d60ba40552f46991.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/css/03d589055b9fa8a0.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /gtm.js?id=GTM-NS54WBW HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9216.2fed4395c6aaaa86.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/5835-418bbb9fccea5315.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/6878.ce0a8a7f3f44187c.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424 HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7142&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; _ga=GA1.1.1577694276.1713925069
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; _ga=GA1.1.1577694276.1713925069; wt_lang=en-US
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7142&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/1.1Host: public.profitwell.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45fsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12692&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12693&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A54.196%2B02%3A00&epn.hit_timestamp_unix=1713925074196&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925065478-69-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925065478-69-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=3598&tfd=12727&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/3.0/td.min.js HTTP/1.1Host: cdn.treasuredata.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12692&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12693&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A54.196%2B02%3A00&epn.hit_timestamp_unix=1713925074196&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925065478-69-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925065478-69-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=3598&tfd=12727&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&gjid=1427716448&_gid=99849118.1713925069&_u=6CDAAUABAAAAICgFKgC~&z=518431591 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D
Source: global traffic	HTTP traffic detected: GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075142 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075140 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075137 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco\|t
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat/amzn.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco\|t
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-source;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1Host: nolan.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.edb6538d.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDmuhUhnRUorH8lURh0lc9SToQ0m%2FU5FAX%2Bpv4UI%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925075022&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDmuhUhnRUorH8lURh0lc9SToQ0m%2FU5FAX%2Bpv4UI%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&_u=6CDAAUABAAAAICgFKgC~&z=2050603363 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&cb=1713925082664&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925082668 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925075022&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925083570&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeAIf-None-Match: W/"a25e-18f0b1d3698"If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&_u=6CDAAUABAAAAICgFKgC~&z=2050603363 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&cb=1713925082664&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925082668 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925084289&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925083570&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKWWFwcFJoSXQ3ekZPNlQ2N3plNWRzMjNqYm0rWmlqZWNwaHJ1bWVJTFRoS0NGMlJ6NHZTY1l0ZnR1WjF1YmZnTFNmQS9NSDNDc20xYWpYOHY5clNTcXQ0VWlUTW1iRGw2Z09vcXR4djFRST0mSXRIV3FzbE9mQzUxekhPZDhXRGhrb3IyYXZjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969If-None-Match: W/"a25e-18f0b1d3698"If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
Source: global traffic	HTTP traffic detected: GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925084289&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ4WStEK2NicmlPbmh4L0VMSTg0d2JPTW1Lc0FuSE4rV1dUOE03N25Cd2ExZkRsd2drLy8zZlQ1OUUyVCs0YUhiUkFVNERNVDV4Yk5WWlRRS0JrMjR1Z0gwaU1vUGpFY1RjWWk5K3Q3WXBudz0mWGtwVFc2RFh1QTFNMG5tdmlrYW1zbTc5Njg4PQ=="
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ4WStEK2NicmlPbmh4L0VMSTg0d2JPTW1Lc0FuSE4rV1dUOE03N25Cd2ExZkRsd2drLy8zZlQ1OUUyVCs0YUhiUkFVNERNVDV4Yk5WWlRRS0JrMjR1Z0gwaU1vUGpFY1RjWWk5K3Q3WXBudz0mWGtwVFc2RFh1QTFNMG5tdmlrYW1zbTc5Njg4PQ=="
Source: global traffic	HTTP traffic detected: GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eu1/v5/datadog-rum-slim.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/wallpaper-api-v2.js HTTP/1.1Host: prod-cdn.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /undefined HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7ec742af40df2646.css HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.svg HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /assets/images/spiral.svg HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.svg HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/404-2628cd0d85d8ff64.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925092439&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=361605886.1713925093&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925092439&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A18%3A12.608%2B02%3A00&epn.hit_timestamp_unix=1713925092608&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925092439-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925092439-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=10&tfd=3323&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d64965
Source: global traffic	HTTP traffic detected: GET /assets/images/spiral.svg HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=rMwg06isFyzqRDQ2ahwucWhvDcU HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, trigger=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925092439&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=361605886.1713925093&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925092439&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A18%3A12.608%2B02%3A00&epn.hit_timestamp_unix=1713925092608&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925092439-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925092439-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=10&tfd=3323&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=284905841&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqA65mBBj_-q1MzSNiND_mvIDorH_OPsGGRkLCGvdlxHzEFZHA&random=3777839157 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA0Nzc3NjE2LCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0Mjk4MjcxMCwiZGkiOiIzMDIwN2I2ODI1YmU0YzM2OWVjMDQ2M2M1MzkyZmIwYiIsImRqIjowLCJpaSI6IjY2Mjc1NDU2MjFkNDRhYThhY2RhOTJhOTAzMjcxYjU3IiwiZG0iOjMsImZjIjo1MTgyNjE5NzYsImZsIjo1MDcwNDMwMTYsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wZjhkZWU2MTMyM2Q4OWMwMSIsInNwIjoxMTgxMzQ4LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcxLCJ0cyI6MTcxMzkyNTA4NTg1NywicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IkV1cm9wZS9BbXN0ZXJkYW0iLCJiYSI6MSwiZnEiOjB9&s=rMwg06isFyzqRDQ2ahwucWhvDcU HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925098311&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925098312&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925098315 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925099080&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YzE1YTY4ZjItNDM0NC00MTZlLTk5NGQtODk4NGQwNTA4NDFi&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zihr7sAoIXAAAFmlAkDQ0QAA; CMPS=4139; CMPRO=4139
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=284905841&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqA65mBBj_-q1MzSNiND_mvIDorH_OPsGGRkLCGvdlxHzEFZHA&random=3777839157 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925098312&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925098311&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925098315 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925099080&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925096588 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9
Source: global traffic	HTTP traffic detected: GET /legal/ccpa HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _dd_s=rum=0&expire=1713926003096&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A24.829%2B02%3A00&epn.hit_timestamp_unix=1713925104829&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925104780-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=5&tfd=1049&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, trigger;event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e0
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-navigation-source, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=4IUXGOHqEohEx4lTXZ1VcdKVllc%2BRurvKRG3yaMU%2Fkb%2BNR6DImYGFuiQhMnDBfPA8YhH2BmqqTEjrrq5ct0bej%2Berj6WNnK1KBPMMPgcU1YtvoX1ZpIeowzLkiUSPmwvnhKtumpg610mc26mEUy4PlaRR3T2jzlwUeoJYjuUwI3PXlR7yVictO6kK3cxOhp8mIk%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A24.829%2B02%3A00&epn.hit_timestamp_unix=1713925104829&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925104780-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=5&tfd=1049&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45fsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=833540398&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqkTE9MtZjsw9jzE13pj5Veuxqonq5bq2MT-mlLlDtfG-CJRuu&random=1609040277 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926005124&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=833540398&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqkTE9MtZjsw9jzE13pj5Veuxqonq5bq2MT-mlLlDtfG-CJRuu&random=1609040277 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925107375&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925107396&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925107399&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925107402 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUgASgDMgsI_N38o_GD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925107375&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925108147&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925107396&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925107399&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925107402 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108373&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A28.361%2B02%3A00&epn.hit_timestamp_unix=1713925108361&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925104780-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1167&tfd=4545&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108555&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=c15a68f2-4344-416e-994d-8984d050841b&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=93&user_group=1&user_id=c15a68f2-4344-416e-994d-8984d050841b&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925108147&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2WXFSelpqS2lpVWZONW1IYmFkNUxUbk13dVgxa21tTEsyZVVYa1IzNEVOaXlMNHF1V1dwdDE5QmR5eWxGa0NqbjNpb1NORzNBR1diR0RTT21xRjFRejZYdGFkNTVWT3A5SDVTV2J6dEpaQT0mTVNHWk8rV2w5UzRhUlVuemo0M3FPYkNFUU9BPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108373&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2WXFSelpqS2lpVWZONW1IYmFkNUxUbk13dVgxa21tTEsyZVVYa1IzNEVOaXlMNHF1V1dwdDE5QmR5eWxGa0NqbjNpb1NORzNBR1diR0RTT21xRjFRejZYdGFkNTVWT3A5SDVTV2J6dEpaQT0mTVNHWk8rV2w5UzRhUlVuemo0M3FPYkNFUU9BPQ=="
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108555&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQSUE5ZHZybEVrN2dUY1d2U0pHdmUyai9iTG5wa2NTWi9VbTRyUk5zejFSdHhTRm5XZ2NCeFV2dnlNWk1tVk1yUVdzQTZ3UGtkR0ZkQXJKR1AxNHVhb2ovUDBTRHZmWnowT1NiUjhRdjd0bz0mN3VUM1Z6R2FxZkNoUyszT3htL0ZmMUsyMExFPQ=="
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A28.361%2B02%3A00&epn.hit_timestamp_unix=1713925108361&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925104780-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1167&tfd=4545&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCJKzgPvxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6c07a28ff53ed915f74a27fe90616d61"If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925107371 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925108360&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925108375 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=BW6dGPFpVWyZgWqbPgfR7KKsvoP3YEJCJQ%2FHTuBQEqI%2BTo%2B2s1%2BohdhydG05dDMj0yKy2hgeOCecv%2F4GXqtp8vUpRtn4r3Torcivd7voY9HaJ4WOPlN0a7NqEjAbp2Xrwh2AUrHiwFFhpcNnrCQoDUZNPbNBQp%2F14Pua4RtdVd66goSLK3qSgrjm8H0BD67UayI%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925108360&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=714394714&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqHbRuGT9s8qBQ7QsxkNeUHaB_wy_-GneFfQtWGmFXa6u97FBi&random=3889505892 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=714394714&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqHbRuGT9s8qBQ7QsxkNeUHaB_wy_-GneFfQtWGmFXa6u97FBi&random=3889505892 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926005133
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netIf-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926005133
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/bundle.5014c6212ea5a9061cdb.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/460.8410c9803a20af04dea9.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926015046
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926015046If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
Source: global traffic	HTTP traffic detected: GET /creator/newfold/2311/intro2/1_D8nrHQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/img.0b1e2943483763639418.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=7p1d0XZxMnCE0HLZrh_tuseJNCc HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925119.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.14
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
Source: global traffic	HTTP traffic detected: GET /creator/newfold/2311/intro2/1_D8nrHQ/bundle.389254d85d861455dbb1.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/newfold/2311/intro2/1_D8nrHQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA3ODA0NjYzLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0NjA0NTkwOCwiZGkiOiJlY2M0MDZjZTdmMmU0ZTlhODQzY2Y5M2E5MDc3M2FkNCIsImRqIjowLCJpaSI6ImUxY2M5M2RhMDAwZDRmZmI4Y2FmNzI2ZjdlNTgwZjA1IiwiZG0iOjMsImZjIjo1MjEzMjM0MTEsImZsIjo1MTAwNzc2MzIsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wZjhkZWU2MTMyM2Q4OWMwMSIsInNwIjoxMjE5MzM4LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcxLCJ0cyI6MTcxMzkyNTExMzk1NSwicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IlVUQyIsImJhIjoxLCJmcSI6MH0&s=7p1d0XZxMnCE0HLZrh_tuseJNCc HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/img.0b1e2943483763639418.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926021904
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
Source: global traffic	HTTP traffic detected: GET /pricing?trk=NAV_pricing HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netIf-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926021904
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/pricing-43f9c565fe91f700.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/us/bundle.ed3fd0b1c92c6af2e45d.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A45.077%2B02%3A00&epn.hit_timestamp_unix=1713925125077&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925125026-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=2&tfd=1303&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86b
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/copy1.a62a38e342bf4dadb1f9.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A45.077%2B02%3A00&epn.hit_timestamp_unix=1713925125077&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925125026-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=2&tfd=1303&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCOSCiY3yg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/copy2.9454484e8930cd5427e6.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; amp_874b77=-0UZbBiWgvIoxMYdttvsk
Source: global traffic	HTTP traffic detected: GET /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926026167&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925126.0.0.496837087; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/copy1.a62a38e342bf4dadb1f9.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/product.553fcf2aa5ab6d9771ed.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCLa5-6vzg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019D
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/copy2.9454484e8930cd5427e6.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A48.104%2B02%3A00&epn.hit_timestamp_unix=1713925128104&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925125026-87-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-87-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1855&tfd=4793&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.17138839462
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925126090&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/mailchimp/2402/static2/1_9hifw9/product.553fcf2aa5ab6d9771ed.png HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126369 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45fsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126374 HTTP/1.1Host: eu01.in.treasuredata.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
Source: global traffic	HTTP traffic detected: GET /pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094 HTTP/1.1Host: track.activemetering.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925126090&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=q_dCoJ5MyZRGnCTB4mG72RDMf5s HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1543118924&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqQXw5hrzmH2wFSsPQcU21uoM96ZyIAI2alxO2p5R31dNllmuB&random=2833824626 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925126241&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A48.104%2B02%3A00&epn.hit_timestamp_unix=1713925128104&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925125026-87-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-87-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1855&tfd=4793&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1
Source: global traffic	HTTP traffic detected: GET /rjss/st/1566598/79010620/skeleton.js HTTP/1.1Host: pixel.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304iZYkRNrQBltj2VMI55RfnAImp4auLtWs%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925130238&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130239&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130240&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925130241 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=1543118924&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqQXw5hrzmH2wFSsPQcU21uoM96ZyIAI2alxO2p5R31dNllmuB&random=2833824626 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713925126241&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094 HTTP/1.1Host: track.activemetering.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Image__Static HTTP/1.1Host: cdn.lamp.avct.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARAX-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQAccept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=799777550&fst=1713925126592&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A45.077%2B02%3A00%3Bhit_timestamp_unix%3D1713925125077%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925125026-1-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CLzV8MmQx7yY5AEiEwiFpcDU5NmFAxVbQggEHXC3D_kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq4g2rWOiGb3tMbKEOpxS-C_k_J-MQ_NwEZXsLh6f6vVyAbMbg&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTJAnEYuWx3AMoS5a1974Owg2GdX8ySwYvA&random=486909452 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/login-status HTTP/1.1Host: auth-session-caching.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304iZYkRNrQBltj2VMI55RfnAImp4auLtWs%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=q_dCoJ5MyZRGnCTB4mG72RDMf5s HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130983&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130985&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087
Source: global traffic	HTTP traffic detected: GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925130238&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130239&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925130241 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130240&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
Source: global traffic	HTTP traffic detected: GET /_next/static/css/3471d3babf255274.css HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc2s5.p.3.s
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925131.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.19; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /sdk/v2/vardata?v=0 HTTP/1.1Host: api.lab.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=799777550&fst=1713925126592&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A45.077%2B02%3A00%3Bhit_timestamp_unix%3D1713925125077%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925125026-1-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CLzV8MmQx7yY5AEiEwiFpcDU5NmFAxVbQggEHXC3D_kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq4g2rWOiGb3tMbKEOpxS-C_k_J-MQ_NwEZXsLh6f6vVyAbMbg&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTJAnEYuWx3AMoS5a1974Owg2GdX8ySwYvA&random=486909452 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.19.8.499.js HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130983&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETHQ0cmg1NyttQjVrd1RLV1poRjZWemt5dW5MSU9WV0pwSXFFWkRDZ0lCVUVKbWdwUndGdHhnQ2tVbUM3dm9lb3Y5T2kyMzZNS0pwOWl5MWxyRHhiT1FTcXVlQWlXN2pwWHZxY29wUVoxST0mS3Jxdi9LRVRCUCt0TDVJTThxRmgyY25GMmxnPQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130985&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETHQ0cmg1NyttQjVrd1RLV1poRjZWemt5dW5MSU9WV0pwSXFFWkRDZ0lCVUVKbWdwUndGdHhnQ2tVbUM3dm9lb3Y5T2kyMzZNS0pwOWl5MWxyRHhiT1FTcXVlQWlXN2pwWHZxY29wUVoxST0mS3Jxdi9LRVRCUCt0TDVJTThxRmgyY25GMmxnPQ=="
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts= HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925131.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.19; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
Source: global traffic	HTTP traffic detected: GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6c07a28ff53ed915f74a27fe90616d61"If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
Source: global traffic	HTTP traffic detected: GET /api/v2 HTTP/1.1Host: e-10220.adzerk.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
Source: global traffic	HTTP traffic detected: GET /sca.17.6.2.js HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rfw/st/1566598/79010620/skeleton.js?adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=e&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Fmailchimp%2F2402%2Fstatic2%2F1_9hifw9%2Fus%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=d&adsafe_jsinfo=,id:7f0967af-b568-56c1-bdd1-f263bedbcb3c,c:aLnZfx,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-pmmjq,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:1,reas:f,mu:10000,br:c,bru:c,an:n,oam:0,mtim:2367,mot:0,app:0,maw:0,tdt:s,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:1,renddet:IMG.qs,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,tt:rjss,et:2411,oid:fd7af33c-01e0-11ef-bf82-eaf9b4c06ee7,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1Host: pixel.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi6GaPHeM-Jxbdan4IIlCUuW4aDWBpyLU1dyL7qsFKScTQeEJQ
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts= HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=302810767&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD6Fn_WEKe7z-PfmXZfpuiAlzv5c_JvUlpCw5xfCBtwElS-l4&random=3432702778 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgh,pingTime:-3,time:2456,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2456,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,1~0%5D,as:%5B80~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=4HOm4D0LIoAQD4DdntC1aMKHAQkp5Mf8mT6MgHEPG437ockmNKOLFYV0vqY%2BOfnQDWRa2T1v4PYPCxyTdCFf1%2F4bMHHFYrFFvGMaXn6LgkaHreCH4ReiHwbiiTnyOMZK%2FZJDSpje1eD11Ls0lWl3eNf1we%2FsjoSvkpixF2YrG%2Fcn7F3UF%2BDGmFlqyfQRqgygCIc%3D HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
Source: global traffic	HTTP traffic detected: GET /skeleton.js HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/778938880/?random=302810767&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD6Fn_WEKe7z-PfmXZfpuiAlzv5c_JvUlpCw5xfCBtwElS-l4&random=3432702778 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=2042921191&fst=1713925127858&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A46.241%2B02%3A00%3Bhit_timestamp_unix%3D1713925126241%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925125026-62-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CMnyg8Hlxur_WCITCJqhqtbk2YUDFV1WCAQdUIwJMTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhdodHRwczovL3dldHJhbnNmZXIuY29tLw&is_vtc=1&cid=CAQSKQB7FLtq2ks73W1_DJVqVO9uTbHqY_NWp8xdGQJlxoCut411t94pUI4L&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTBjqho69MsEzqNQLxsN_JJN_n4N6vqCHnw&random=1638137281 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts=0%2C2700 HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgh,pingTime:-3,time:2456,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2456,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,1~0%5D,as:%5B80~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926034105&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/614409984/?random=2042921191&fst=1713925127858&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A46.241%2B02%3A00%3Bhit_timestamp_unix%3D1713925126241%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925125026-62-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CMnyg8Hlxur_WCITCJqhqtbk2YUDFV1WCAQdUIwJMTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhdodHRwczovL3dldHJhbnNmZXIuY29tLw&is_vtc=1&cid=CAQSKQB7FLtq2ks73W1_DJVqVO9uTbHqY_NWp8xdGQJlxoCut411t94pUI4L&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTBjqho69MsEzqNQLxsN_JJN_n4N6vqCHnw&random=1638137281 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A50.129%2B02%3A00&epn.hit_timestamp_unix=1713925130130&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925125026-106-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-106-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1954&tfd=11305&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wetransfer.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source, trigger;navigation-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d3
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNi,time:4503,type:e,im:%7Bimprf:%7Bttecl:5421,ecd:1537,tsecr:2%7D%7D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4503,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2048~0%5D,as:%5B2127~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,0%5D%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNn,time:4508,type:e,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4508,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2053~0%5D,as:%5B2132~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,4%5D%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts=0%2C2700 HTTP/1.1Host: measure.lamp.avct.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926034105&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNn,time:4508,type:e,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4508,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2053~0%5D,as:%5B2132~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,4%5D%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNi,time:4503,type:e,im:%7Bimprf:%7Bttecl:5421,ecd:1537,tsecr:2%7D%7D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4503,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2048~0%5D,as:%5B2127~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,0%5D%7D&br=c HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNY,pingTime:-10,time:4545,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1713925135237%7C%7Cde86bd9db1f497ec38edd91c2baa2a56%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C4cb7186908e680e6db746fddf8679a7e%7C%7C8bbca06e0e1b671af6eef268eb3ab302%7C%7C8a238fd2d8c80cbf7f58273074fb06d1%7C%7C136f9c12087b100fb754616b3bd49015%7C%7C2bdebd58842d2d570efc06acb249967a%7C%7C1663701684%7D HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pricing.7575d8b9ff1b3b50.js HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A50.129%2B02%3A00&epn.hit_timestamp_unix=1713925130130&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925125026-106-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-106-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1954&tfd=11305&richsstsse HTTP/1.1Host: tagging.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926035103
Source: global traffic	HTTP traffic detected: GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNY,pingTime:-10,time:4545,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1713925135237%7C%7Cde86bd9db1f497ec38edd91c2baa2a56%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C4cb7186908e680e6db746fddf8679a7e%7C%7C8bbca06e0e1b671af6eef268eb3ab302%7C%7C8a238fd2d8c80cbf7f58273074fb06d1%7C%7C136f9c12087b100fb754616b3bd49015%7C%7C2bdebd58842d2d570efc06acb249967a%7C%7C1663701684%7D HTTP/1.1Host: dt.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1Host: wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Amplitude-Language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/plain, /X-Amplitude-Platform: WebX-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskMX-Amplitude-Country: USX-App-Origin: decoupledsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926036939&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc8hs.10.3.13
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926035103If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
Source: global traffic	HTTP traffic detected: GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9c4.13.3.16
Source: global traffic	HTTP traffic detected: GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926036939&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9c4.13.3.16
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque-Bold.10832e10.woff2 HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/GT-Super-WT-Regular.20d77fe0.woff HTTP/1.1Host: cdn.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wetransfer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1Host: cdn.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/bundle.c2e5335b92e3c7a2b1f4.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/web-metrics HTTP/1.1Host: wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _dd_s=rum=0&expire=1713926038162&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img1.cedc71cac222019d305e.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img2.35539ce3dc0fcc71a276.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img1.cedc71cac222019d305e.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img2.35539ce3dc0fcc71a276.jpg HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BpOsA8srdQJukrFwZb9Tu9XyWzE HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925141.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.22
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BpOsA8srdQJukrFwZb9Tu9XyWzE HTTP/1.1Host: donny.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829 HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926038107
Source: global traffic	HTTP traffic detected: GET /v1/desktop HTTP/1.1Host: lebowski.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
Source: global traffic	HTTP traffic detected: GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1Host: nolan.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nolan.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=0&expire=1713926038107If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab"If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nolan.wetransfer.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/bundle.ff2f6c6b99b0f6998598.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: snowplow.wetransfer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925149.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.24
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/460.8410c9803a20af04dea9.js HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1Host: backgrounds.wetransfer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://backgrounds.wetransfer.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-rendererAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=zN_9_yb7KwE1RuJkz17LejLUCoc HTTP/1.1Host: donny.wetransfer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925149.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.24

Source: chromecache_397.1.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_234.1.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: we.tl

Source: unknown

HTTP traffic detected: POST /api/graphql HTTP/1.1Host: wetransfer.comConnection: keep-aliveContent-Length: 448sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-amplitude-language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/graphql+json, application/jsonx-amplitude-country: USx-app-origin: decoupledsec-ch-ua-platform: "Windows"Origin: https://wetransfer.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wetransfer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:17:53 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w94l7-205948X-Request-Id: 13cc171bebe770cf4515e29db935bb94X-Runtime: 0.001088X-Cache: Error from cloudfrontVia: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: oK1nEg9XIZ5WxqSrE7xTvudUmr1Dc9byPBtYr1RpKHdvMxG8WhafLg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:57 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: VIHPHdHUPy-LirBoitGIS9kc97Xi80QmxxBbP5eYBsK0KZWc504t3w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:17:58 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: fXlvJv_H-peuGfbGO_sDo65XMkuTPUwj39K23wBDKU5bj92REjTbnw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:18:01 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0f8dee61323d89c01Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:05 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: PR1G8exUr2OAGWZfhOUyy2o8JV1D6Pc6pNjaKnnveQvQiTSK0NLjMQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:18:07 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 7084Connection: closeDate: Wed, 24 Apr 2024 02:18:11 GMTETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ikMJpGnMEHT4TC02nClmXT9uGdKqg6sX6KsOCcvPOa4UMzIlqQvWNA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:12 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: Cn2odfFDo5LA1fY-GmadY4NFB9ZIr6RpZRtjJrTab7n4Aav29JYKyQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:12 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: rftE9t4g5WKq9T5Xmmy8d80Psk2uO6Ii3aPZXP0z9kCb0DvOvuSRXQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:18:28 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-96nms-207147X-Request-Id: 0fa93b582822dad595ab87f6db5fab40X-Runtime: 0.001532X-Cache: Error from cloudfrontVia: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: nVoYnA1e2T7PJMjTiWKI-g4dK7pDC-Iv-faEwyv2vnvznoO0uynvxA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:29 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ARep_W3A7LbWszqRHUK_JH69meQpI_tAAZRIIj4pmoXme2pYvL3Bjw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:30 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: pb6K5CYvVLOzOtk78CX5uUjfTWAwriE8ivPIkjG_P4uRa8Q9j6l0ag==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:18:31 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0efa40d5cdf123505Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:18:35 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:18:39 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:43 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: LJXld-U_eNIzJ6_tiDOTne7e5idZYS2PB8VjPjnMC3DX5mr9OOvr2w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:44 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: ldAqgxXV_ld-zUmrzNDSMptu5aCnuWldmeK2qCBpW4UbUg5lDOgVWw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:18:45 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 874Connection: closeDate: Wed, 24 Apr 2024 02:18:48 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsvary: OriginX-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-vlpxw-205618X-Request-Id: 145c1fcab5fb341ae8646be332ce9d47X-Runtime: 0.001199X-Cache: Error from cloudfrontVia: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: qcYB6gDFg5DDGcY6JCCEFSRBqpZY2vbKgiS9Lgqhcxdegc7InzdRgQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:52 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: HmZrNRUXnxlezyk4XHIB96I7GUwW3eBa0UsicmXxIEV_6ZuSKcpNKw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:53 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: z5sNUHz4cp_ldkRqq4YWKoHP_l3zfK13TXLqRuYNk_IFPZ96Ah_W5g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 02:18:54 GMTContent-Type: text/html; charset=utf-8Content-Length: 145Connection: closeAccess-Control-Allow-Origin: undefinedAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-VersionCache-Control: no-cache, no-store, must-revalidateExpires: 0Pragma: no-cachex-served-by: prod-adservers-shard105-us-east-1-01-i-0f8dee61323d89c01Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:56 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: HTK8HIEqaTllHjdapD0B_5tiz_dMWqon93MeLr_XzMuUg1t_45thzQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:18:57 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: TEHf8giy6X2cu9yEh1AT-d_mv_grhxmYhz00j7aAyS1YfWD7mYYSEw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:18:58 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closeDate: Wed, 24 Apr 2024 02:19:00 GMTETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-DNS-Prefetch-Control: onX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LAX50-P3Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: f-iKwiDUolTTCmkLVkIUN5Er0MrERH4fCqe8nVVgCFvFP3AGVf-MkQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueContent-Type: application/json; charset=utf-8Date: Wed, 24 Apr 2024 02:19:08 GMTETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: OriginX-Powered-By: ExpressContent-Length: 73Connection: Close

Source: chromecache_230.1.dr	String found in binary or memory: http://bit.ly/sp-js)
Source: chromecache_381.1.dr	String found in binary or memory: http://javascript.crockford.com/jsmin.html
Source: chromecache_381.1.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_381.1.dr	String found in binary or memory: http://www.JSON.org/js.html
Source: chromecache_446.1.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_381.1.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_381.1.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_214.1.dr, chromecache_374.1.dr, chromecache_209.1.dr, chromecache_429.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000
Source: chromecache_414.1.dr, chromecache_236.1.dr, chromecache_214.1.dr, chromecache_416.1.dr, chromecache_241.1.dr, chromecache_374.1.dr, chromecache_209.1.dr, chromecache_426.1.dr, chromecache_429.1.dr, chromecache_417.1.dr, chromecache_260.1.dr, chromecache_366.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;o
Source: chromecache_214.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e4
Source: chromecache_374.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e4
Source: chromecache_429.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=523130626;gtm=45h91e44
Source: chromecache_209.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=650802726;gtm=45h91e44
Source: chromecache_417.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1158372871;gtm=45h91e44m
Source: chromecache_236.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m
Source: chromecache_429.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1491771273;gtm=45h91e44m
Source: chromecache_366.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m
Source: chromecache_214.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m
Source: chromecache_260.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1679236460;gtm=45h91e44m
Source: chromecache_374.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m
Source: chromecache_416.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1845618367;gtm=45h91e44m
Source: chromecache_426.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0
Source: chromecache_414.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v8
Source: chromecache_209.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=796664551;gtm=45h91e44m0
Source: chromecache_241.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0
Source: chromecache_303.1.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_294.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_381.1.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_435.1.dr	String found in binary or memory: https://cdn.brandmetrics.com
Source: chromecache_252.1.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YzE1YTY4ZjI
Source: chromecache_435.1.dr	String found in binary or memory: https://collector.brandmetrics.com
Source: chromecache_234.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_381.1.dr	String found in binary or memory: https://creativecommons.org/licenses/by/2.0/uk/
Source: chromecache_239.1.dr, chromecache_410.1.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_252.1.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d0508
Source: chromecache_437.1.dr	String found in binary or memory: https://ekstrom.wetransfer.net
Source: chromecache_448.1.dr	String found in binary or memory: https://email.wetransfer.net/Logos/wetransfer-logo.svg
Source: chromecache_335.1.dr	String found in binary or memory: https://github.com/WeTransfer/wallpaper-ui/blob/main/docs/components/Background.md#altText
Source: chromecache_381.1.dr	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: chromecache_234.1.dr	String found in binary or memory: https://google.com
Source: chromecache_234.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_303.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_416.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=132956564&fst=171
Source: chromecache_214.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1543118924&fst=17
Source: chromecache_414.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2021863534&fst=17
Source: chromecache_260.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=212334459&fst=171
Source: chromecache_426.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=284905841&fst=171
Source: chromecache_374.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=302810767&fst=171
Source: chromecache_209.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=49702422&fst=1713
Source: chromecache_241.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=714394714&fst=171
Source: chromecache_366.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=833540398&fst=171
Source: chromecache_429.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=966372292&fst=171
Source: chromecache_252.1.dr, chromecache_403.1.dr, chromecache_313.1.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_439.1.dr	String found in binary or memory: https://mb.moatads.com
Source: chromecache_439.1.dr	String found in binary or memory: https://mb.moatads.com/o.js?
Source: chromecache_234.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_303.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_303.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_303.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_303.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_303.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_252.1.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=c15a68f2-4344-416e-994d-8984d050841b&gd
Source: chromecache_459.1.dr, chromecache_434.1.dr, chromecache_396.1.dr, chromecache_334.1.dr	String found in binary or memory: https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Source: chromecache_439.1.dr	String found in binary or memory: https://px.moatads.com
Source: chromecache_439.1.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: chromecache_324.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_410.1.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.edb6538d.js
Source: chromecache_413.1.dr	String found in binary or memory: https://stackoverflow.com/questions/4845762/onload-handler-for-script-tag-in-internet-explorer
Source: chromecache_217.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_217.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_294.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_294.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_276.1.dr, chromecache_448.1.dr	String found in binary or memory: https://wepresent.wetransfer.com/
Source: chromecache_276.1.dr, chromecache_448.1.dr	String found in binary or memory: https://wetransfer.com
Source: chromecache_448.1.dr	String found in binary or memory: https://wetransfer.com/
Source: chromecache_215.1.dr, chromecache_274.1.dr, chromecache_386.1.dr, chromecache_451.1.dr, chromecache_317.1.dr, chromecache_450.1.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Source: chromecache_234.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_294.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_294.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_294.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_234.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_294.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_303.1.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_234.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_209.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=393624949&fst=1713925127670&cv=
Source: chromecache_429.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=50381611&fst=1713925128911&cv=1
Source: chromecache_214.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=507632436&fst=1713925126592&cv=
Source: chromecache_374.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/614409984/?random=829549972&fst=1713925127858&cv=
Source: chromecache_217.1.dr, chromecache_234.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_294.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_230.1.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_217.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_394.1.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_322.1.dr, chromecache_400.1.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_234.1.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_439.1.dr	String found in binary or memory: https://z.moatads.com/omidverificationclient/verification-client-v1.js
Source: chromecache_439.1.dr	String found in binary or memory: https://z.moatads.com/px2/client.js
Source: chromecache_439.1.dr	String found in binary or memory: https://z.moatads.com/swf/p6.v3.swf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277

Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.26.94:443 -> 192.168.2.5:49732 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@33/442@228/70

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247	0%	Avira URL Cloud	safe
https://cdn.brandmetrics.com	0%	Avira URL Cloud	safe
https://collector.brandmetrics.com	0%	Avira URL Cloud	safe
https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377	0%	Avira URL Cloud	safe
https://rum.browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.30.1%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Atransfer-web%2Cversion%3Ac98be9eb9f206547aea10d46f253ea37ea3d3db7&dd-api-key=pubabbc81b16855ec184b0753bf36600da1&dd-evp-origin-version=4.30.1&dd-evp-origin=browser&dd-request-id=ce37528d-2492-425c-b8ac-ab9224132f1d&batch_time=1713925089914	0%	Avira URL Cloud	safe
https://track.activemetering.com/pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094	0%	Avira URL Cloud	safe
https://collector.brandmetrics.com	0%	Virustotal		Browse
https://cdn.brandmetrics.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
eu01.in.treasuredata.com	3.126.72.131	true	false	high
sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	52.210.6.56	true	false	high
stats.g.doubleclick.net	142.250.101.155	true	false	high
cm.g.doubleclick.net	74.125.137.154	true	false	high
www.google.com	142.250.101.105	true	false	high
cdn.brandmetrics.com	172.67.69.191	true	false	unknown
rum.browser-intake-datadoghq.eu	34.149.169.145	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	high
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
we.tl	18.65.3.120	true	false	unknown
dna8twue3dlxq.cloudfront.net	18.154.206.58	true	false	high
d162h6x3rxav67.cloudfront.net	18.164.174.7	true	false	high
d1ykf07e75w7ss.cloudfront.net	52.85.204.136	true	false	high
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.192.84	true	false	unknown
di.rlcdn.com	34.49.212.111	true	false	high
googleads.g.doubleclick.net	142.251.2.155	true	false	high
reddit.map.fastly.net	151.101.65.140	true	false	unknown
api.amplitude.com	52.43.31.105	true	false	high
dualstack.pinterest.map.fastly.net	146.75.92.84	true	false	unknown
wetransfer.com	18.154.132.120	true	false	high
tagging.wetransfer.com	13.33.21.100	true	false	high
firewall-external-1524972847.us-east-1.elb.amazonaws.com	34.196.145.117	true	false	high
nolan.wetransfer.net	18.154.206.35	true	false	high
user-data-us-west.bidswitch.net	35.212.133.238	true	false	unknown
measure.lamp.avct.cloud	99.80.74.93	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.154.142.121	true	false	high
adservice.google.com	142.251.2.157	true	false	high
backgrounds.wetransfer.net	18.154.132.34	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
d3k6gt80y743t4.cloudfront.net	13.226.228.42	true	false	high
insight.adsrvr.org	35.71.131.137	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
ara.paa-reporting-advertising.amazon	54.230.21.79	true	false	unknown
amplitude.map.fastly.net	151.101.194.132	true	false	unknown
lebowski.wetransfer.com	52.213.228.117	true	false	high
s.amazon-adsystem.com	52.46.130.91	true	false	high
ad.doubleclick.net	142.251.2.148	true	false	high
e-prod-alb-s105-us-east-1-01.adzerk.net	3.218.116.188	true	false	unknown
cdn.treasuredata.com	13.226.225.89	true	false	high
prod-cdn.wetransfer.net	13.226.228.126	true	false	high
cdn.lamp.avct.cloud	18.65.25.70	true	false	unknown
dt-external-521234871.us-west-2.elb.amazonaws.com	34.215.30.93	true	false	high
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
donny.wetransfer.com	34.246.249.180	true	false	high
www.datadoghq-browser-agent.com	18.164.171.100	true	false	unknown
cdn.wetransfer.com	18.154.132.120	true	false	high
auth-session-caching.wetransfer.net	52.30.32.26	true	false	high
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false	unknown
alb.reddit.com	unknown	unknown	false	high
snowplow.wetransfer.com	unknown	unknown	false	high
z.moatads.com	unknown	unknown	false	unknown
pixel.adsafeprotected.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.moatads.com	unknown	unknown	false	unknown
api.lab.amplitude.com	unknown	unknown	false	high
simage2.pubmatic.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
w3-reporting-nel.reddit.com	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
dt.adsafeprotected.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
public.profitwell.com	unknown	unknown	false	high
collector.brandmetrics.com	unknown	unknown	false	unknown
s.pinimg.com	unknown	unknown	false	high
e-10220.adzerk.net	unknown	unknown	false	unknown
static.adsafeprotected.com	unknown	unknown	false	high
track.activemetering.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925098315	false		high
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&cb=1713925130239&dep=5%2CEVENT_TAGS_ABSENT	false		high
https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c	false		high
https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829	false		high
https://alb.reddit.com/rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://ct.pinterest.com/user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925107396&dep=2%2CPAGE_LOAD	false		high
https://www.redditstatic.com/ads/pixel.js	false		high
https://ct.pinterest.com/v3/?event=pagevisit&tid=2612705757018&cb=1713925084289&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D	false		high
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&cb=1713925098312&dep=5%2CEVENT_TAGS_ABSENT	false		high
https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Regular.20d77fe0.woff	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05?	false		high
https://www.google.com/pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=740184327.1713925069&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074	false		high
https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry	false		high
https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.js	false		high
https://cdn.treasuredata.com/sdk/3.0/td.min.js	false		high
https://w3-reporting-nel.reddit.com/reports	false		high
https://tagging.wetransfer.com/_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D	false		high
https://ct.pinterest.com/v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925107402	false		high
https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse	false		high
https://www.facebook.com/tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=GET	false		high
https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/460.8410c9803a20af04dea9.js	false		high
https://pixel.adsafeprotected.com/rjss/st/1566598/79010620/skeleton.js	false		high
https://wetransfer.com/assets/images/logo.svg	false		high
https://s.pinimg.com/ct/lib/main.edb6538d.js	false		high
https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176	false	Avira URL Cloud: safe	unknown
https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js	false		high
https://api.lab.amplitude.com/sdk/v2/vardata?v=0	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YzE1YTY4ZjItNDM0NC00MTZlLTk5NGQtODk4NGQwNTA4NDFi&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b	false		high
https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424	false		high
https://eu01.in.treasuredata.com/js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925096588	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=FGET	false		high
https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	false		high
https://connect.facebook.net/signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://cdn.wetransfer.com/_next/static/media/globe.1603f8a7.svg	false		high
https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	false		high
https://donny.wetransfer.com/i.gif?e=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&s=rMwg06isFyzqRDQ2ahwucWhvDcU	false		high
https://pixel.adsafeprotected.com/rfw/st/1566598/79010620/skeleton.js?adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=e&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Fmailchimp%2F2402%2Fstatic2%2F1_9hifw9%2Fus%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=d&adsafe_jsinfo=,id:7f0967af-b568-56c1-bdd1-f263bedbcb3c,c:aLnZfx,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-pmmjq,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:1,reas:f,mu:10000,br:c,bru:c,an:n,oam:0,mtim:2367,mot:0,app:0,maw:0,tdt:s,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:1,renddet:IMG.qs,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,tt:rjss,et:2411,oid:fd7af33c-01e0-11ef-bf82-eaf9b4c06ee7,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0	false		high
https://www.facebook.com/tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=GET	false		high
https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.css	false		high
https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA	false		high
https://donny.wetransfer.com/i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA3ODAwNDc4LCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0NjA0NDc3NCwiZGkiOiJhYjI3ZGYyYTZjMTg0OTg0YTVhODFhNmMzMWNkNWM4YiIsImRqIjowLCJpaSI6IjQyZGZlYjk0OGMzNTQ1Y2NhZmI0OWExNTVjMzA4Mzc4IiwiZG0iOjMsImZjIjo1MjEzMjIyODgsImZsIjo1MTAwNzM1MzMsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wMTdhZjZmZjFmYmVkYzk5ZiIsInNwIjoxMjMxODI2LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcyLCJ0cyI6MTcxMzkyNTE0NzI0NiwicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IkV1cm9wZS9BbXN0ZXJkYW0iLCJiYSI6MSwiZnEiOjB9&s=zN_9_yb7KwE1RuJkz17LejLUCoc	false		high
https://donny.wetransfer.com/i.gif?e=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&s=7p1d0XZxMnCE0HLZrh_tuseJNCc	false		high
https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff	false		high
https://wetransfer.com/undefined	false		high
https://ct.pinterest.com/v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925082668	false		high
https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247	false	Avira URL Cloud: safe	unknown
https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/bundle.ff2f6c6b99b0f6998598.js	false		high
https://wetransfer.com/legal/ccpa	false		high
https://ct.pinterest.com/user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108373&dep=4%2CTAGS_RECEIVED&stc=true	false		high
https://wetransfer.com/_next/static/css/7eebedc3bb83273f.css	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1	false		high
https://cdn.wetransfer.com/_next/static/chunks/pages/pricing-43f9c565fe91f700.js	false		high
https://rum.browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.30.1%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Atransfer-web%2Cversion%3Ac98be9eb9f206547aea10d46f253ea37ea3d3db7&dd-api-key=pubabbc81b16855ec184b0753bf36600da1&dd-evp-origin-version=4.30.1&dd-evp-origin=browser&dd-request-id=ce37528d-2492-425c-b8ac-ab9224132f1d&batch_time=1713925089914	false	Avira URL Cloud: safe	unknown
https://track.activemetering.com/pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094	false	Avira URL Cloud: safe	unknown
https://wetransfer.com/assets/images/spiral.svg	false		high
https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg	false		high
https://ct.pinterest.com/user/?tid=2612705757018&cb=1713925082664&dep=2%2CPAGE_LOAD	false		high
https://www.google.com/pagead/1p-user-list/778938880/?random=302810767&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD6Fn_WEKe7z-PfmXZfpuiAlzv5c_JvUlpCw5xfCBtwElS-l4&random=3432702778	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&_u=6CDAAUABAAAAICgFKgC~&z=2050603363	false		high
https://backgrounds.wetransfer.net/creator/newfold/2311/intro2/1_D8nrHQ/bundle.389254d85d861455dbb1.js	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=FGET	false		high
https://cdn.wetransfer.com/_next/static/chunks/6878.ce0a8a7f3f44187c.js	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377	false		high
https://s.amazon-adsystem.com/iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247	false		high
https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c	false		high
https://alb.reddit.com/rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=FGET	false		high
https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer	false		high
https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.brandmetrics.com	chromecache_435.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_217.1.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=966372292&fst=171	chromecache_429.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_294.1.dr	false		high
https://collector.brandmetrics.com	chromecache_435.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000	chromecache_214.1.dr, chromecache_374.1.dr, chromecache_209.1.dr, chromecache_429.1.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v8	chromecache_414.1.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1158372871;gtm=45h91e44m	chromecache_417.1.dr	false		high
https://ekstrom.wetransfer.net	chromecache_437.1.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_322.1.dr, chromecache_400.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_294.1.dr	false		high
http://www.amazon.com/b/?&node=7253015011.	chromecache_446.1.dr	false		high
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=c15a68f2-4344-416e-994d-8984d050841b&gd	chromecache_252.1.dr	false		high
https://ct.pinterest.com/stats/	chromecache_239.1.dr, chromecache_410.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_217.1.dr	false		high
https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m	chromecache_366.1.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=212334459&fst=171	chromecache_260.1.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=714394714&fst=171	chromecache_241.1.dr	false		high
https://github.com/blueimp/JavaScript-MD5	chromecache_381.1.dr	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d0508	chromecache_252.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.213.228.117	lebowski.wetransfer.com	United States	16509	AMAZON-02US	false
151.101.0.84	unknown	United States	54113	FASTLYUS	false
34.250.136.134	unknown	United States	16509	AMAZON-02US	false
142.250.101.156	unknown	United States	15169	GOOGLEUS	false
142.250.101.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.154.142.121	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
74.125.137.154	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
13.226.225.89	cdn.treasuredata.com	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
52.210.6.56	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.65.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.164.171.100	www.datadoghq-browser-agent.com	United States	3	MIT-GATEWAYSUS	false
35.212.133.238	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
35.71.131.137	insight.adsrvr.org	United States	237	MERIT-AS-14US	false
142.250.101.106	unknown	United States	15169	GOOGLEUS	false
172.67.69.191	cdn.brandmetrics.com	United States	13335	CLOUDFLARENETUS	false
142.250.101.105	www.google.com	United States	15169	GOOGLEUS	false
142.250.101.149	unknown	United States	15169	GOOGLEUS	false
18.154.132.120	wetransfer.com	United States	16509	AMAZON-02US	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
3.218.116.188	e-prod-alb-s105-us-east-1-01.adzerk.net	United States	14618	AMAZON-AESUS	false
142.250.101.148	unknown	United States	15169	GOOGLEUS	false
142.250.101.147	unknown	United States	15169	GOOGLEUS	false
34.196.145.117	firewall-external-1524972847.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.230.21.11	unknown	United States	16509	AMAZON-02US	false
13.226.228.42	d3k6gt80y743t4.cloudfront.net	United States	16509	AMAZON-02US	false
13.226.228.126	prod-cdn.wetransfer.net	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.43.31.105	api.amplitude.com	United States	16509	AMAZON-02US	false
142.251.2.149	unknown	United States	15169	GOOGLEUS	false
18.154.206.58	dna8twue3dlxq.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.2.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.88.50.113	unknown	United States	16509	AMAZON-02US	false
151.101.192.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
99.80.201.152	unknown	United States	16509	AMAZON-02US	false
34.248.204.163	unknown	United States	16509	AMAZON-02US	false
34.149.169.145	rum.browser-intake-datadoghq.eu	United States	2686	ATGS-MMD-ASUS	false
18.65.3.120	we.tl	United States	3	MIT-GATEWAYSUS	false
44.240.232.113	unknown	United States	16509	AMAZON-02US	false
3.126.72.131	eu01.in.treasuredata.com	United States	16509	AMAZON-02US	false
34.246.249.180	donny.wetransfer.com	United States	16509	AMAZON-02US	false
13.226.228.11	unknown	United States	16509	AMAZON-02US	false
18.154.132.7	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
18.154.206.107	unknown	United States	16509	AMAZON-02US	false
54.218.244.204	unknown	United States	16509	AMAZON-02US	false
151.101.194.132	amplitude.map.fastly.net	United States	54113	FASTLYUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
18.154.132.34	backgrounds.wetransfer.net	United States	16509	AMAZON-02US	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
18.154.132.38	unknown	United States	16509	AMAZON-02US	false
54.230.21.79	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
34.49.212.111	di.rlcdn.com	United States	2686	ATGS-MMD-ASUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
18.154.206.35	nolan.wetransfer.net	United States	16509	AMAZON-02US	false
52.85.204.136	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
18.164.174.7	d162h6x3rxav67.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
34.215.30.93	dt-external-521234871.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.46.130.91	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
18.65.25.70	cdn.lamp.avct.cloud	United States	3	MIT-GATEWAYSUS	false
52.30.32.26	auth-session-caching.wetransfer.net	United States	16509	AMAZON-02US	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
151.101.2.132	unknown	United States	54113	FASTLYUS	false
13.33.21.100	tagging.wetransfer.com	United States	16509	AMAZON-02US	false
99.80.74.93	measure.lamp.avct.cloud	United States	16509	AMAZON-02US	false
146.75.92.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430714
Start date and time:	2024-04-24 04:16:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@33/442@228/70
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://wetransfer.com/undefined Browse: https://wetransfer.com/legal/ccpa Browse: https://wetransfer.com/pricing?trk=NAV_pricing

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.138, 142.251.2.101, 142.251.2.113, 142.251.2.100, 142.251.2.139, 142.251.2.102, 142.251.2.84, 34.104.35.123, 142.251.2.155, 142.251.2.157, 142.251.2.154, 142.251.2.156, 204.79.197.237, 13.107.21.237, 40.68.123.157, 199.232.210.172, 192.229.211.108, 20.166.126.56, 20.40.202.2, 8.39.36.142, 8.39.36.141, 20.114.59.183, 142.250.101.94, 96.7.158.32, 40.127.169.103, 23.206.229.135, 23.206.229.132, 74.125.137.100, 74.125.137.138, 74.125.137.113, 74.125.137.139, 74.125.137.102, 74.125.137.101
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, bmcollector-geo.trafficmanager.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, wildcard.moatads.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, waws-prod-dm1-179-pork.centralus.cloudapp.azure.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, s.pinimg.com.edgekey.net, dual-a-0034.a-msedge.net, e13136.g.akamaiedge.net, clients.l.google.co
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 01:17:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977710919977559
Encrypted:	false
SSDEEP:	48:8ydoTM08HEidAKZdA19ehwiZUklqehHy+3:8hPnoy
MD5:	69B68FF54D302A4B9F52EAF8A1001D45
SHA1:	D99E8AE2650BDA1536946F1E2F8B44AFE310FC04
SHA-256:	7F970FFFB6077A573B749219B05086DDFB6048AC48B5DC0FA95DCA8D5C7D5147
SHA-512:	A42FA032F00645F6ACB43F9CF6701AB156FD728A58F1BE6BC2D9E6EA321571CACB742C8B6E48094CA567874B94B0B25C192A9BEAD7B569EF76BFC01B1673ADA2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}=.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X5............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 01:17:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9932713311709973
Encrypted:	false
SSDEEP:	48:8wdoTM08HEidAKZdA1weh/iZUkAQkqehYy+2:8HPN9QBy
MD5:	F8194917C7480B39EAEE027734C90C20
SHA1:	FD34BF7F759E64BE68C6CEF11EE9575D692D09CA
SHA-256:	66182628B51043E5FA24719E4FB047C2C656E717AD47E1A4BFBF6F13B1FBB638
SHA-512:	D96A6FFEC049D80F433898BED9687F700FD37BA792AC844F19B474A853034CF0AF4FC8CF102D58B1BE976A8C7B68192F9069740FD866F050B9C14CCFDE98857E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X5............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002779600811172
Encrypted:	false
SSDEEP:	48:8xtdoTM0sHEidAKZdA14tseh7sFiZUkmgqeh7sqy+BX:8xIPtn0y
MD5:	85428800F140547D4FD352344B39E13A
SHA1:	AFEF4F881C7A946D2F6449C202F7EF8A6E370667
SHA-256:	10D9E878773B817CF61C00A82A3179F7BADA43A02A5D78C29B3054F55FF6A243
SHA-512:	7C8206A4BEEA0BB37C7C897075E58AF6C4130428DB86EDE0A25F2CEBA5FC638C3D4059F49D358E04EC90B01E4ABD488201439B1F8ADC66CCD80D9533260B48AD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 01:17:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9921381017802102
Encrypted:	false
SSDEEP:	48:8adoTM08HEidAKZdA1vehDiZUkwqeh8y+R:8ZPuyy
MD5:	8687B58926467837F36D6183AAE6D9D0
SHA1:	FAA84252E4F7623506CCF680FFCE6614B3A55216
SHA-256:	40A092CA28FE936D6465C6D04D19B406F6F3690989178B3D7B0D29D9F7336EB0
SHA-512:	5951D9A70E99F46037690689F4F07EB142979EC07ACB39C848380AF62B4A6742A955F2DC57CA3B586F7815EB0F2CF3B3DA96112A4385569A8EA327E0B23E676B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X5............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 01:17:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.982121315078101
Encrypted:	false
SSDEEP:	48:8pdoTM08HEidAKZdA1hehBiZUk1W1qehWy+C:8EPe92y
MD5:	3803391DBB2219B8B2BB9B062AE30B1B
SHA1:	6A74109E3E5F9BD287387A3B57D4616B17ECFD85
SHA-256:	60D8125C95B0CB28CEEB33A3A872E3E5E5C1074F502752E31DAB357E2347B7EC
SHA-512:	E3019B2FB58036B172294F11E0F5EF5C3A9CD978E410B8C33B04A175D78D29A0E20132B40EB703B8C82E0E2A74DC8F752A447E0E41975A7801D45CC8CDFBE673
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X5............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 01:17:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9933673148401923
Encrypted:	false
SSDEEP:	48:8idoTM08HEidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb0y+yT+:8RPAT/TbxWOvTb0y7T
MD5:	DAA5FD5E5F5239FB794D3F5726A6806E
SHA1:	6C46F3F4B0EB1EA642B336FE327A8CF0D62318BC
SHA-256:	E8B6EECF5AEBAF04ADA2B6856D4F9BDFD7C4C9AE900A37984D03DD1B66BF6AAB
SHA-512:	B9DA8954EAFC73BDF4E0E089F12AB38658A298F68B97B929B66358E82E9A84351FD828E136186E0A724BF99DA339D2CC071140419393DBC517F59EBAE1478B64
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....~v.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X3.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X3.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X3.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X3............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X5............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............br.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 532
Category:	downloaded
Size (bytes):	317
Entropy (8bit):	7.283463774548154
Encrypted:	false
SSDEEP:	6:XtziARVataCMgLTWuNnn4WZ5WH6qRAPJRbfoaaOmoLnE8HX7lDzw2zs9:XYADaIgLTjn17WH5APJRbfLaODHpDzwf
MD5:	12675364A3F4A6364299793313B29AB0
SHA1:	D1A2FD1667D0AEC22DBBE4307B9BD9C298519F2C
SHA-256:	D3EE23AFDED928C438388E0AB673801F9C0E539BACE5F08A6F26CBCB447D5960
SHA-512:	F6AA719C65683FF957AEF942463DD32124CDF4420327D3F64DB81845013051B31A5C2ED10BDA92ECA0A0FD9E8C81F627321343340096FE666B3800F645DE712D
Malicious:	false
Reputation:	low
URL:	https://collector.brandmetrics.com/scripts/b.js?pixel=c5e20d8215c8475788ca42f0859bba7b
Preview:	.............N.0.._%.!J.._..#7z.6..,.;.7......H.z.wG...=E.;.XT.mo..g.JO{.".,g..`.v..].^n.?...IRp...)E...cK.E...`t.....STF.h.Q...P9-f.X.sU....(....Y.?.5.. l....h..?..m.7...w.e.0k...y.......`.:_K.E..)?-.8......\..9-...].j..'./&@Y........2...\J..$..*E-..s.8........K5m]G..9..u.jG....@..y.&.....S......

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1193), with no line terminators
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	5.322605577837871
Encrypted:	false
SSDEEP:	24:fbjvNxAU7cbLNPOlah5NwbWWNVdWyd06wYdqIXUshXP:fbDNxAp0a1wbWQVdWy1TA0Us5
MD5:	65123FAABA2E6CE6AF74685759B7C08A
SHA1:	30A70C3E816147F961E80B9999863EED4174506C
SHA-256:	118B9D396CDBB27D636E40E588B86180B8B31BFC9CB95736D971779CE85D44C2
SHA-512:	D67B9FDC9F958A12FC1E3A8F417F7FF8E4B790D9BE061D4947A3C983424C0581137A5A15A21270D6FD231CC9F0E7CF4D859A0C9762DB170C0E9D5C4F0DC2826D
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9210],{15184:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]",function(){return e(4654)}])},18469:function(t,n,e){"use strict";var i=e(2784);n.Z=function(t){var n=t.metadata,e=t.securityHash;return(0,i.useMemo)((function(){if(null!==n)return{title:n.title?n.title:void 0,description:1===n.files_count?"".concat(null===n\|\|void 0===n?void 0:n.files_count," file sent via WeTransfer, the simplest way to send your files around the world"):"".concat(null===n\|\|void 0===n?void 0:n.files_count," files sent via WeTransfer, the simplest way to send your files around the world"),image:void 0!==e?"/unfurl/".concat(n.id,"/").concat(e):void 0}}),[e,n])}},4654:function(t,n,e){"use strict";e.r(n),e.d(n,{__N_SSP:function(){return s}});var i=e(52322),a=e(19552),r=e(53145),o=e(18469),s=!0;n.default=function(t){var n=t.data,e=t.metadata,s=t.securityHash,u=(0,o.Z)({metadata:e,securityHash:s});return(0,i

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1323)
Category:	dropped
Size (bytes):	4997
Entropy (8bit):	5.584672841998517
Encrypted:	false
SSDEEP:	96:+8+/CC7ZeCCD8+/BC7ZeBC5EppJyMZAaJ+T6aaiDMNhc5:+8+C8ZeCu8+B8ZeBBpFbaaiDGW5
MD5:	0EFA51DFD911DAC674B3C3C2A5F71185
SHA1:	20595439CB9187D0D5DCBE8AB6C209A363D1C038
SHA-256:	1F5E20FD594E42244A924DCD9497AF8240F541D22F343A84D8981BA54493A042
SHA-512:	52170BDC705BB31FC5B8A10CD586E667048D8AD3AFE6BD7413DFD0387F62E35577586183FE0F885BC62663812C329CA13C1D7E4B26BDCA5431D338F64805EADB
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=650802726;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=650802726;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28503
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.977891652767339
Encrypted:	false
SSDEEP:	192:3/lrnDwZkhhO12YDBhSGhyOYgEOIxk+VrvZQOJgFKDUs4j:9DDdfO1KYHghVWOGFeUs4j
MD5:	9A680C8C475D8BBA600D4D87B4FA7EE5
SHA1:	032D074B386A4AA2EB03352ABF7F368BBD1470AE
SHA-256:	35DCE7F030321690BDD9E9D021037F9CCF5BC2FA83D11C11E6FEC4AC8CA3A7B2
SHA-512:	00A0685DE36A61C3991A01330E260DB76EE6E5997CDFD5D7F8BCEE0811E920120AFFA5C3CF48ED8D12E80AC6ABF21E9B2B76E6E470BDFA10B80D104705F1A1FF
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8.......).8fcc..g.\,%K.(..G.q\|A....F2N...\|.U.A3.........M.$^.."...%.V..........7eO.>}...ci.U...q..y)...x....C.......d..%...T.2..s.>G..V..J.(.#]..A.&.....U.n\|\..V..?5..,..d.N.bK...N.{...xv~=.t5d....".[[.}.FI..i..pW........ $..#c.%.u.[..E...2R.F..1....p..t....6/1..j.;KL...d...#..b..%...]&$_..8[c..m:E..`..c.....0.Ga....$a..".+Yz......q....,..I.+;Y.M.b.%vy.Q4....h..D....\f.&C..u.`....B.}.<........"c.\...y.2..y.R..._-.P.}.=.T=.8O!.3"....(4..q.W.)]cc.H.;q.:. )..k#.l"<.A.U?H.P..r..q.[.5.8a.om..c.(.{1tR.&^....Qd?.5.4.I.C..%..1..M............B..R..v.}...TN....._.....[....qIlWb.J.fu.#.,....`....v.....RJ.9.D.....K.xsO.....\Ga..).p...B{.Th..}.NS.@...Ig.{.V.$.....c....Jk.........`dU......5..y.........K;.~.n.p...Q..K4.\&.M2....d....P.Q1..x..(..k..J..h.Y..jdj....V\|..DXe...l.....8."..n.4....9E&$.RD.U.).....Z.......^a.YRp....E`sj.;urje.....<Y.I.y.B.DM1..s$G.0...OFA."a`.qi.>..K....lL.X`o.F}.$.`ecK........M....4..,1\|/...C....)..e,q@

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 829 x 804, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	403929
Entropy (8bit):	7.996411673921865
Encrypted:	true
SSDEEP:	12288:tVoG11Sf1sgv3c31KTSyLMlzpjENrPX0y:7bo1lvcFKhUzaDL
MD5:	B87143FE59071125A9693041A69391C9
SHA1:	47D62156F67424B65E0B82A172A308889482665C
SHA-256:	F5382D2D4A201B540CFA0E1E6CA1F86C0A934E7F2621D8A71AE8F6A9A5C906C5
SHA-512:	2458E1E8F7E1D8289623168B8A2D2FE28B5C309CC41E5F1FFF04FE2705B13E99BFBA8CF1F27341A833451BE9344770F4EBD7C00B27D435954257E57811B7FC6F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/product.553fcf2aa5ab6d9771ed.png
Preview:	.PNG........IHDR...=...$.......N&....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.4 (Macintosh)" xmp:CreateDate="2024-02-22T17:40:20+01:00" xmp:ModifyDate="2024-02-22T18:15:14+01:00" xmp:MetadataDate="2024-02-22T18:15:14+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:af44bf90-95bf-4424-affb-2f4313b4cdaa" xmpMM:DocumentID="xmp.did:af44bf90-95bf-4424-affb-2f4313b4cdaa" xmpMM:OriginalDocumentID="xmp.did:af44bf90-95bf-44

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1323)
Category:	downloaded
Size (bytes):	4999
Entropy (8bit):	5.5854537452160695
Encrypted:	false
SSDEEP:	96:+8+/wC7ZewCD8+/FC7ZeFCVZltaJ+T6aaiDMGEpoJyXpag3+h05:+8+w8Zewu8+F8ZeFolMaaiDspfpag3+I
MD5:	84625B9C9D1DB197EF8C4A0CE35ACC1E
SHA1:	E8E4071DE60BEF2E0433875749C7A158D1DA2CBA
SHA-256:	E9041B8E15145AB49858DCCBD1ADE0D0582DA058543574B0B86A6EA6F6805775
SHA-512:	28FAAC6CC3ADFD6A83B523F5E0BA48529D687DD35FB6500A2B5E87842CED5CE1C1E47D4C8F483811F1EBB3C08CFF1F23470E6CE082CB7E4CC0A1DF377AE35383
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A45.077%2B02%3A00&epn.hit_timestamp_unix=1713925125077&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925125026-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=2&tfd=1303&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_c

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/wepresent-logo.815a0c71238ee072fe14.svg
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	255661
Entropy (8bit):	5.610309874917215
Encrypted:	false
SSDEEP:	3072:MSh8LhzgNSNow8VNz2L178z71+TYc20DCSY1KGoIb1QWDe5L+aVsQCajmN8LMjFa:dwhewMNz2qqwhDe5LfV9CaiN8SsOa
MD5:	E98157550CEE865B3C8DC45F8D4CF2E8
SHA1:	A50F9054AACBB669C554547D2D104C3C553AF047
SHA-256:	836B51749E67DAADC25BA7828E19459C17D3FF0879B0A1B21F4EBADFDDD0B010
SHA-512:	304F2483A8B05EA07F10B8DE4E383CB361C1F59B57674334FFB522C1A8E81BF89B2E957D6940A21D6F094962828434C159EE34B39C3E62C031DE4145B44C334C
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":18,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":17},{"function":"__ogt_cross_domain","priority":18,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","accounts\\.google\\.","appleid\\.apple\\.com","accounts\\\\\\.youtube\\\\\\.","paypal\\.com"],"tag_id":20},{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":21},{"function

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A50.129%2B02%3A00&epn.hit_timestamp_unix=1713925130130&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925125026-106-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-106-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1954&tfd=11305&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164599
Entropy (8bit):	4.913484542083308
Encrypted:	false
SSDEEP:	3072:DnnnWzMk8AaOPvfUKGy4fm7716ibPqmzv2HKV7gYSHvSXxRFb+fIvJ:4mOPpGidi4XN+fa
MD5:	6095C9597989539E31FB82EFBB0997A8
SHA1:	8A955A12EA58493AAA672B56EF68C1F974EB17B9
SHA-256:	AEC09DDA5C1BF802C809A5E6D61E5F7631BA872B26C469B24A67D917DC22B3BB
SHA-512:	E31244719F7869A3D0C7B33DD6794ADBF1A30B478A09D5F0603121E5C6680B01DE9EEB36BDAC7601DA2C974474CBBCBCE1C6E093A0454D2D59BE2E3F4681AB8B
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/8745.743a269fbc05ea1f.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],abbr_day_names:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],month_names:[null,"January","February","March","April","May","June","July","August","September","October","November","December"],abbr_month_names:[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],order:["year","month","day"]},number:{format:{separator:".",delimiter:",",precision:3,round_mode:"default",significant:!1,strip_insignificant_zeros:!1},currency:{format:{format:"%u%n",unit:"$",separator:".",delimiter:",",precision:2,significant:!1,strip_insignificant_zeros:!1},EUR:"\u20ac",USD:"US$",CAD:"CA$",AUD:"aud",GBP:"\xa3",DKK:"kr",NOK:"kr",SEK:"kr"},percentage:{format:{delimiter:"",format:"%n

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x2048, components 3
Category:	downloaded
Size (bytes):	580328
Entropy (8bit):	7.987310721475111
Encrypted:	false
SSDEEP:	12288:9WY8z8Ax7x2stWE9fwNH5bO5hd1g1tTtWvQW6IPJdSqt8nfzJISa:az8Cx2sB9fwdA9CtJQQISZfJa
MD5:	F70DFA1ADEFDDE209493A1B273BAB92D
SHA1:	A116DD677B2333101F2D32D391283A21C59FB7C5
SHA-256:	14FA49B3B26F5A562B069A59A49B503D34C2A1DC3CC025EDB80FC7ED9DD18C3C
SHA-512:	373190467F667CEA019BA637BB191D3C5C9EEADBAA7E45267BB19CF45A95AFE91FB0D93129FB6D850C8B158B4235D1A69E38F71515E5CA929CDAA7B9F53690E1
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/img.0b1e2943483763639418.jpg
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"....................................................$..w..../+n..'mI/+j.I......r.s...I$.I$.I$.I$.V...k$..........v.....`....C...;$..''gy9;...ZN...'d..d.u..y..et..m[V.v.%.:...,.I$.cO+>..H%...z......d...{..I;.ZrI.9.s.vI...I..-[vNw..i$.I-+i%......fI$.I$.I$.I$.I$.NS.N.99)..v.okN..NR..f?5O.e.\|.d..;$...$.....y.vK.;;..$.......<.. $.g'd......l...$.I$.....4....g9;...i[N.I..I;$...s..r.....;....{9;..J.I;..5..p.SOe..I$.I$.I$.I$.I$...;-;.Y.IYn...w.Nr...~}.9........NR.w....rI9.w.Ks.Z.'/N..i~..j..z...ev..A.$..6..!.=3.I$.I$...,. 0....;'d.....y....xBS...j...;%.Y;.....$.'%o$.ge..v9..uv.7d.I$.I$.I$.I$.A.....Ns.NK[...$.V.]._8....n.nRv.E...I''d.;'$..[..d..'d.....}n...1...8...q.......MI$.I$.I9....[0u.....o.;.$.%^.."yyDh.E..$.g..{[NNvs........y.;;9..F....}]3...I$.I'$..d.I$.I.Q.....%o;9.V..d..'..?....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	290377
Entropy (8bit):	5.381376010354384
Encrypted:	false
SSDEEP:	6144:xYF9PLDkUVcZMx9ZkFaRMmftIbWT9gzLNx2GQ8p6lkqlcHZ:xYF9PPkUVcZMT+YRMmft9JgnNxHQzHc5
MD5:	18DC1214C0129D05F9BE4606A6A39660
SHA1:	D64CC9F660F0FC6052F7FD00BEAA05B49D2D444B
SHA-256:	1E3545E238446B7F00F1C90A20C474B679B76777F4CCAC8A8FA9D4B422D0B115
SHA-512:	3A1E25E38A4D7A13255045382F4F72ABBB3C1EE284FAC16A9021F0081EA13C9CAC49A1B516567694AD1ECC963153166FBB14214F05C5110EC55D673DADD34A9C
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js
Preview:	/! For license information please see bundle.cf3813e004e0be548281.js.LICENSE.txt /.!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),r.d(t,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return p},hideCloseButton:function(){return h},initialize:function(){return a},onBlur:function(){return x},onEnterFullscreen:function(){return b},onExitFullscreen:function(){return _},onFocus:function(){return w},onSafeAreaUpdate:function(){return j},sendTrackingEvent:function(){return g},sendTrackingVAST:function(){return y},setCloseButtonColor:function(){return v},setStatusBarColor:function(){return m},showCloseButton:function(){return d},startUpgradeProcess:function(){return l}});let i={};const a=async()=>{try{const{ChildFrame:e}=await r.e(460).then(r.bind(r,6460));n=new e((e=>{let{availableListeners:t}=e;t.forEach((e=>{n.listeners[e]

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1593702
Entropy (8bit):	5.787042597766311
Encrypted:	false
SSDEEP:	12288:rjGc+hNjUmSpY8OmUE4QvvfiD8snGKlubyItvxsaqy/alkCnzgMxlxAE999A56BO:99yIffty1RPdsDGOEw
MD5:	1CB6370C120798BFAF71D83B6465B7E8
SHA1:	C71BA77777865ACF4261CF8324E44479E6C42A13
SHA-256:	0E48F3E4D743C37628295E7A87935B77E91776668B200268AEB530A7404053CC
SHA-512:	D3566D43D50B834663E815F45402D04774E1C95F45235274DB19F6930E46114EAE695E70C59A44DB8A2C7F3F858D914E3286187E91C7B4EEC0BD300303B2895A
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6878.ce0a8a7f3f44187c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499),p=n(40672),g=n(33291),f=n(70273),m=n(27497),h={authenticate:m.YR},w=(0,l.$j)(null,h),_=location.pathname,v=function(){var e=(0,r.Z)(a().mark((function e(t){var n,r;return a().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return n=t.authenticate,r=t.navigateTo,e.next=3,(0,g.zD)();case 3:return e.next=5,n();case 5:_===location.pathname&&r(location.pathname);case 6:case"end":return e.stop()}}),e)})));return function(t){return e.apply(this,arguments)}}(),A=w((function(e){var t=e.authenticate,n=e.navigateTo;return(0,s.useEffect)((function(){(0,f.Nz)(),(0,f.ZY)()&&v({authenticate:t,navigateTo:n}).catch(p.Z.error)}),[t,n]),null})),b=n(53073),y=n(29057),x=function(e){return e<y.u.SMALL_MOBILE?y.l.SMALL_MOBILE:e<y.u.MOBILE?y.l.MOBILE:e

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55308), with no line terminators
Category:	downloaded
Size (bytes):	55308
Entropy (8bit):	5.200384847218251
Encrypted:	false
SSDEEP:	768:I+oCY1CZDtQYCmy1m0ZSHAzdjwYToL/0i0znDcvwzQRpLXeyq4PsRrbJiR10:I+Xy1m0ZboL/FKnDcIzQRp7CA9RG
MD5:	1C0B4E457C62548D0E46C380BED9CB82
SHA1:	E88C1D43A8E38227842594E337DA2225ABEAF236
SHA-256:	92C874C0714A983103292E4D1448A44A9EC43DABDA0F6D6ACAF42E4DFE0AB7AE
SHA-512:	81B1181B6EE4A0416257D43444ADA0E62BB44D77A5FC3AAE8B29F510EF2AA0E78D7F8A3B8499E59E33E9A3C5673168422FF915AA1D73F27484BD2E8EDF02E718
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function h(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){g(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function d(e){return d="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.pr

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65089)
Category:	downloaded
Size (bytes):	79831
Entropy (8bit):	5.494921052305278
Encrypted:	false
SSDEEP:	768:rgNPUNJqCXWAugakpl4R8r6gNKx0qpclDNhs72o7JbvShRV4fkRDnJaA+VFxqeT:sNPUZrqgNKx0qpclDNG/Sn+fSOIeT
MD5:	E779375659F40138431DA5D448C170C1
SHA1:	2A965A0316367EAD74052A88B7EDEC5EC502AF36
SHA-256:	20C33DE3DBBDFED984634455B80E4239B2547D09CD7F0600742F36F5F5E3E36D
SHA-512:	51402A628F4282C786665EE91F01BD84D22D55DEA1E00F855D4654B9D2ADFF01AC3351402B52C2FD423CB9D8AA52BAF24BEFC3A837D24DC857EB24041680912F
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js
Preview:	/*. Skipped minification because the original files appears to be already minified.. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /./!. * Web analytics for Snowplow v3.23.0 (http://bit.ly/sp-js). * Copyright 2022 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,o={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(o[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(t=Object.getOwnPropertySymbols(e);r<t.length;r++)0>n.indexOf(t[r])&&Object.prototype.propertyIsEnumerable.call(e,t[r])&&(o[t[r]]=e[t[r]])}return o}function n(e,n,t){if(t\|\|2===arguments.length)for(var o,r=0,i=n.length;r<i;r++)!o&&r in n\|\|(o\|\|(o=Array.prototype.slice.call(n,0,r)),o[r]=n[r]);return e.concat(o\|\|Array.prototype.slice.call(n))}functi

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31120, version 1.6554
Category:	downloaded
Size (bytes):	31120
Entropy (8bit):	7.985418175929638
Encrypted:	false
SSDEEP:	768:P75Q02qtpsFozdYYk5SdY8cyynGiYENuQO9h:Nd2wq2zdYYktF5Nc
MD5:	57CBBFDAFC43E0DEECC75A309DD042C6
SHA1:	B9CC2FF331B8520706DE175F5B3FDBA6731A9BFC
SHA-256:	A9117F16BDAA64C953B303BEF951DFCA6316EF59F1B7CA72D5B946B1D815F6A6
SHA-512:	C997D44853DBC86C4A75E123306E504AB88FFDD7449B196AB200018ADF355183A474EF71F31E61F949BE3CB7BAC888D3F3A22AEC4226F9D50BD8B3FBDE1EF13C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff
Preview:	wOFF......y........<........................GDEF..i..........o.]GPOS..i4......3....GSUB..t........8-.jQOS/2.......Z...`..`.cmap............;.<.cvt ...L........T...fpgm.............0.6gasp..i.............glyf......T.....1.head.......6...6.VC.hhea....... ...$...Uhmtx...T.......b..j.loca...........:q.L.maxp....... ... .c..name..g....&....E.j.post..h........ .~.Dprep...........;............1H=S_.<..........#.........P..................x.c`d``>............l@...$.....\|.......e...e......./.a..........x.c`a2c..............B3.c.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....'..^..x....$I....Z......,...9.m...m.m.F..5.=.../.B.{.._/...P..A..j7sTmSZ.*..Uf.R..T.....m.V!..C.\7{...<.....B......P.~.......V..V..X.v_%..j.O..C+<...J.o..R.=..........=.}.#..5\.A{.r.K.c.&.V.3Td...f...>.&t.]S!.{m..5.B...]C-\..#........`#.&`=..AhvF.Te6.w-.b...4..A.lr..\|S.<}.At4..`.=.......`.B.-. ...k.L..F..]/..avU.g;..!...Sp<......I...a........a.T..c...N...\..?..........\|.T...\.6..[+.6.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46334)
Category:	downloaded
Size (bytes):	474109
Entropy (8bit):	5.5187553774803595
Encrypted:	false
SSDEEP:	3072:2Ndslu2MwW2lhzgNSNoJ8VNgo1P8tF1+TYc20DCSY1KGAlDH+bUs6rQDe5L+aVs+:LluL2lheJMNgzqIHDe5LfV9CKpX0/c
MD5:	F782CD5F0C5444C5C41D5BC80490A863
SHA1:	45BA97A593ABD23ED800E5018FE713C136CE38B7
SHA-256:	92C3B38BD2122A40E033C60E83E4BFF345EEF67C386998BB48662B81ADE7B027
SHA-512:	68EFD8D4F599A651256E03E7B8E00ABDA51A54879DC72CD54B02E939F15F4F051203C3616B5993416FE236B6686FFD9FCBF3698E66E9565E1DC569C77F8FD638
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/gtm.js?id=GTM-NS54WBW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"122",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__dbg"},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",2],"vtp_map":["list",["map","key","false","value","G-0M019DTWVR"],["map","key","true","value","G-RXXQE3EDY9"]]},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"G-RXXQE3EDY9","vtp_ignoreCase":true,"vtp_map":["list",["map","key","wetransfer\\.com","value",["macro",3]]]},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",2],8,16],"?!0:void 0})();"]},{"function":"__cid"},{"function":"__ctv"},{"function":"__c",

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (996)
Category:	downloaded
Size (bytes):	2322
Entropy (8bit):	5.600552245003107
Encrypted:	false
SSDEEP:	48:ja8++eK+4QvzhiQvz/LUTeG9piQvz/LUTZCaZeK+4QvzhiQvz/LUTeG9piQvz/L8:+8+/B4HmKKmKjZeB4HmKKmKg8Hpn5
MD5:	8E070077EDCC6F68E464FCEB8D656B20
SHA1:	F5298C947D0DC3EA4F045A269FA7E45E03ED42A4
SHA-256:	645D6BBEBD3F801A14E67FB11B4459DAF3CA44CDBD69321E1A591A9FC3F3A65A
SHA-512:	2BB0C6CE7F70045628FF73F1048DE596F6426446C6F9DE3B3278312B33A994D624DF0CA3AC2A262EF2DAEE4843836B388154924212E4243FF797470EAECE383D
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A54.196%2B02%3A00&epn.hit_timestamp_unix=1713925074196&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925065478-69-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925065478-69-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=3598&tfd=12727&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05?"],"options":{"attribution_report

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7142&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27440, version 1.0
Category:	downloaded
Size (bytes):	27440
Entropy (8bit):	7.992206939859718
Encrypted:	true
SSDEEP:	384:gs433pIbNnWeGf6ZOmKWZdUfbSHyZ3N3r6xESiUp7MkRzArC7ceMc/DDRO81IkRY:dgCi83dUD0EbpDGspywaIQ8QTubs8Ic
MD5:	A618EB8DDD7AF554656002BCFDECFE86
SHA1:	8ACD0B2B765B498BE6E3DDDAA583CD86D43BABB9
SHA-256:	8B271876EBB2CC145871D0DAA6F5D9581947E425338E6BC3DBB604E8A808B81C
SHA-512:	A2CC1024A09DEB79F0414839CF1CF92AA7F80970E327B1FBA73C37B0F5CE606E7683D03D2B90AF9BD26849A220535D76593C1CC0A92B90E0C0FC8D1AA0CA8EC2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2
Preview:	wOF2......k0.......d..j.........................?FFTM...4.....p.`..n..r..W.....4..R..&..6.$..H. ..\..~..3.#.W...H...hm.w.....PB.........=e.....Td.4.i....@.....S..."......n..7.....4...7....i.L...s.....g^...ut3.).-6..-..w..4.%.6!..s...nC..2...@.e..z./.1.Y..V....[.......=.BU"~.<I#i...gd.\..M..M....!......!EGR...h....K..O...yA..Ua.....{.......d.7?._....w..>."0n....G....Y.. .MiJ.h...W].........7......(.9..mp..V.....d.0...H."f.JD<.</.}.}nU}7j`D.30.c)..P.N..].hX......B..S....(\V&..w..Y...X........<...p...I..N.I.c./S{....(..:EP....C1.b.Y=....BW..Z...?s...\....k..EW#p.F&.W..W.k.....p1.1.<3...r.h....+...G<1.p.4.P..@!....\|:'.3NI8..[.k.T..4"...;..Tt:3&..}.E.....=......../_NN.;.$I.$I".....Y.+a...qbF.Qf..........i...5t.}.-..#.....Q.......`.......>D.1.P..VX..+O>.%....5..5..g.....`k...E4.X.{0v'..........^..T"h.uO5....,...L4_6...iw..}. r.3.9..(2D..cc...g.......>.$. .\|.e......9..~.R.M,.!y.!.....;W..]7..B)<.B..n..B!\...@!.....m..J.#..C{.~D?2....rf..y.U

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (646)
Category:	downloaded
Size (bytes):	2257
Entropy (8bit):	5.635236857994791
Encrypted:	false
SSDEEP:	48:ja8++eo+/teG9puICaZeo+/teG9pulAEpxDWY6zG9/Jdi00AFYzyxXvdR5:+8+/nltZenlfEpqyXbFYmxXr5
MD5:	1B1774AEF232E97A240F701472FF1253
SHA1:	2461A3A72326C9A54B5DDFCAC60C7D44AB99AD02
SHA-256:	703B768C2F34DF31688A5808DC8CFC3A13A63BFF01377EC273B4677932A93721
SHA-512:	B06259B1C23568277928B79E61A5042FED53B6338352E5154D2FC8F997491755F42E26BD405AA44030EB3B0F033BE303A657EC2209ABE226C6C490D9C2ABC10F
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A28.361%2B02%3A00&epn.hit_timestamp_unix=1713925108361&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925104780-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1167&tfd=4545&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;u

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646
Preview:	{}

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/favicon.ico
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 173, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13772
Entropy (8bit):	7.960303523366703
Encrypted:	false
SSDEEP:	384:ZFL3qqxCaUb8pZvLo45k1wlW6P9fKqwYpCHDO0iXc:XL3rCnuv3kOE66J7iXc
MD5:	8F5FC5C065F508CF95E46DE371A93D7F
SHA1:	BD74FF53EFC5D8CA678460A2EECD4CB0061E52C6
SHA-256:	BAD7A5F489F3A3223822B5C22001FFF419B6B52903736EAD38BF3FEB0D6ED460
SHA-512:	B913B9187A4640F12725530DDD02AF29EED0104C8C8651D0CC417A92D155337EC48A4974D2E793F232D382607F2CE250C94B81D71B60113EA2B8C1D7DF93E4D8
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/copy2.9454484e8930cd5427e6.png
Preview:	.PNG........IHDR.............3.LS....pHYs...............5~IDATx..=n.8............(SD/.^....^...{.vxB...Kp.'s/.Q.Y....N:7`..._.......y...E...b...f..+....=.[.+.O....h..A..IB..3..qO..q.'..t.B..Z.x.nx.g.... ../d,.B.A...@....U`/..8.LQuu...Z......aw.R..0.2n...i6...V...m..~.......A.v]!0P....v..v.Y.......<. .8..\.+...Wzf.G./.....x.............r.........0....Un.....>r.(........Z.WnC.p..&.K..7...e..'............p..[h...d.....oU]m.g.B:....<.5.].48.!l._.nM.....;^...5r...G.?\|.z. ....p......6..\.H.#d4.....+..;g..........L.?..p...v&../.`.....C../.....2./b4..zSu....\&...02.......B....}.`....].}.........6,..4UW...>.-......K..d.......Q.71..."H.+..i...B%...~....c4.<.fPMZ...?;W....#...>.%.. ....4.fK....a1.Ah.2..j..;..0u..8.$..q....H..%a.1.<$..0+8.a..`.H.u4.)..q...,".i..xZ.t..5..B..A....;....q....^...`..Im......p........yP...0...A..ZA.......c.3..f.R..;H....S....ag.....p..A..E._.J...h.g......=..~.s@...g.B......Mp.. ...nF.......C\B6...L..Q.A;..#f._......'.zKg...l.4.Mi.#..)...

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377
Preview:	{}

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47828, version 1.0
Category:	downloaded
Size (bytes):	47828
Entropy (8bit):	7.995688471432011
Encrypted:	true
SSDEEP:	768:K2F5oo/7NusRbJk5zsCr2RyHXUKa0ue60GqQzTlxU0uaa3yQfe9uryjBvKaoon3o:lJ/7Da5N2RkboeBiUYiJyjBKTon37Ru
MD5:	6DBAB1C1C6F168DB27CBE727E3AD7FE8
SHA1:	E943DE16537A3FB2BDF66E204EE35DEF9D0ED817
SHA-256:	C63EDA1F9ED0DF863719C3F5E229BFC00557354CD4A0CA9C61C57EC50AE97D71
SHA-512:	0B0128954C4C08CCB423544784ED0DCF3D529647FE4ABBADA963D03836B3A4612F88543B4281991ABFA22A2C8DA4C0D25F07F1C2C389B6981191732E57401483
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2
Preview:	wOF2..............S....k........................?FFTM..0...^....`..&...s.....D.......6.$.... ..p..r...[."...q.e.&>...6..2u...{A.c;.Z:.&..........1nG8..;z........J....=...^...D}.o..1.#..H9.JuU.&.ZW.Z..g..2.......n..T8.q..W.Saq..r.{s...8_.Y....e.o.......b .M...F..F.>....).b......F....L.bW....E.}.....X..1.....F...H......7.....b.:...C.... .s....x]/..#.%{.O.].p"O..#.;.q\|.].d....&......-..Z.L-~.....A.0...Ol...7..";..Z.Z...6.y~#.?.T.D...3d..Z..ad...3..\y.q..w...{......7....O.>3........+.d..9L..S.{.&...8.!.J.L.S...`..N...f.B...^$^HL...e.lo...D%."..v....^8.. ....a....#i...m.\|....1A%j..(.....(C.wt.J.....Pbh..b.#.x".~.?...sg.....,U.X.J..N.....C.n......< .."RE....%a&...Z......6..s......F.K.r ....c....9...J)_&.!.KD4..t.."I}.....C.A6.q......{......{..q..@......a.iy.u~5.,,--..#5.~..V......f.@5....W.YL.`)..[.A.Q..7..~...Nl.N....Z..c.>}.).X.UZ.h...1.F...T.jA.&QA.Z..S.C<e...{...9.:.........0...8%..v..9.\.x.!U[-8..Z&S*v.\|....G.+.H..nD...{..D....$......)..=

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099
Preview:	{}

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (580)
Category:	downloaded
Size (bytes):	929
Entropy (8bit):	5.483531157140071
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WILZYdy3JyNxL8BMUNbpbzbjkCMltlsMOfi:si2N1V4NxwZG1jFZywBflLMqpFY
MD5:	79D4E7A5E3DA091D5165590F4C047E98
SHA1:	082EAF5139A5DC72475E4B7889EA3CFDB2E7ABB3
SHA-256:	8EAC96F782B7881E6B6A113DB6D812071778AD512452B072834303DF45584FEE
SHA-512:	9909A01D191D14A38EB599E50298C513432F78CDE2723A5454A70AB2EB3DAB32ACD558B652DD67F46961E5B4E57D4C49331D4EF5C6F2D9633FC55EEAAF88FA3F
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=c15a68f2-4344-416e-994d-8984d050841b&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YzE1YTY4ZjItNDM0NC00MTZlLTk5NGQtODk4NGQwNTA4NDFi&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b","https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent="] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	66848
Entropy (8bit):	5.341298900882068
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyz:RIT7OX4s9eZYtj8ltz
MD5:	418B8C9C5BEDFB3B49B095DD5EB5B73E
SHA1:	18D3B691D06E8A0CF14D3DB9F47C6B193D30EBE5
SHA-256:	F5BD14FF782C108114EA619F0004673BDB8F531F953F60CEB88D974F1C69BEF2
SHA-512:	D155D6C4845DE222FA0DD7BEC4CF9FA052DED0BAB690C8F8560B3B6BDC7695DBD40C5318070F3600341638345052CC4CB9B91A5ADD3D0C4C5D1F347AC53FF6A1
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5500
Entropy (8bit):	5.217919540081293
Encrypted:	false
SSDEEP:	96:D/xCiqH3FeYKOzqH3FeYKEAPqRGqetKE9FfVDebYKV2Cxa3qnrpeoKrASSFjSme9:9quah
MD5:	AFC3E4BC6A3478E7C2F0BB0B0D0CB7AF
SHA1:	A398074A9114D6AF63AEBC294A75847F21497CED
SHA-256:	4380E7DC2835765FFB8A685C7ADFDB47F8A6BD227F40FD9B61582F65BD78B9F0
SHA-512:	B2B808673BBBFBCB1C6ACD66BF2938261E41FC983F7D57D9847260563687DD6023DCF56293331000BA27B3D06D17818AD51F7BED2154A83B4F82E5F594ABA7DB
Malicious:	false
Reputation:	low
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAxVDAyOjE3OjA0Ljk3MloiLCJwdXIiOm51bGx9fQ==--2c23f746713a02482a30c48bf67523cb534feb2468f2707a5e1dea85ccb7a67b",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26464), with no line terminators
Category:	downloaded
Size (bytes):	26464
Entropy (8bit):	5.400813500778424
Encrypted:	false
SSDEEP:	384:BWBiN8VT/jGKuYlW8Qwt7J5SUElnWJFc4xr9Qscbm9YaJEVzSTWKR:BWBig/TVvt7J57E5cXLTcbm6g6KR
MD5:	02CD96AF1FE12399200B70E7BF8FA6CD
SHA1:	C624CF7E36C284B611C9FF15461A04092D000569
SHA-256:	C7E101857CC0358162EB9141CE5FC2898B68CFF3CF037DA40FAAD00D3FD1290B
SHA-512:	37716C1C67AE7B35A8B90E41111BEC0D27D7E6E5806DB68237DE7BF17C10741C44D2852E902E8680F4408A501F53B4CC6435D9C307BF384219FE8DCC678280B1
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/dde21195-2697a3889c46ad74.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{return t.apply(this,arguments)}catch(e){try{self.postMessage({type:"errored",error:e})}catch(a){self.postMessage({type:"errored",error:"".concat(e)})}}}}t((function(){var e=function(){var t=4,e=0,a=1,n=2;function r(t){for(var e=t.length;--e>=0;)t[e]=0}var i=0,s=1,_=2,h=3,l=258,o=29,d=256,u=d+1+o,f=30,c=19,p=2u+1,g=15,w=16,b=7,v=256,m=16,y=17,k=18,z=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),x=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),A=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),E=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Z=512,U=new Array(2(u+2));r(U);var R=new Array(2*f);r(R);var S=new Array(Z);r(S);var L=new Array(l-h+1);r(L

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1056103
Entropy (8bit):	5.485279165250842
Encrypted:	false
SSDEEP:	24576:sGXTot1srdL+Cir0A3aOH/vOpNztkOlZCnjLuAADQ:sGXi3aOH/vOpNztkuZCWAADQ
MD5:	12E84F18D00FCBAB4BBB6E73A50DB8E6
SHA1:	E83F205E165944A1858293938742AD59A6E09CC1
SHA-256:	1BA64EBC490EB865895C8F395791339D1EEF95E7A0CDD994F258E5DEF714A819
SHA-512:	73DC364FF8EE9FED376EE64113730D30444F0EF7F92425CE148D3234116860A5C8E4FC8480E795716C1BDA8CFBE61F98ED98C2FA6A9C8400670B325DEE898BE2
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9216.2fed4395c6aaaa86.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=r(90205);e.exports=function(e){return new Promise((function(t,r){var h,v=e.data,y=e.headers,m=e.responseType;function _(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(v)&&n.isStandardBrowserEnv()&&delete y["Content-Type"];var g=new XMLHttpRequest;if(e.auth){var b=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";y.Authorization="Basic "+btoa(b+":"+w)}var x=s(e.baseURL,e.url);function E(){if(g){var n="getAllResponseHeaders"in g?u(g.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"json"!==m?g.response:g.responseText,status:g.status,statusText:g.statusText,headers:n,config:e,request:g};o((function(e){t(e),_()}),(function(e){r(e),_()}),i

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	dropped
Size (bytes):	2255
Entropy (8bit):	5.628753904453824
Encrypted:	false
SSDEEP:	48:ja8++e3P+/teG9puICaZe3P+/teG9pulAEpjWY6zG9/Jdi00U/LpdR5:+8+/32ltZe32lfEpIyXxJ5
MD5:	329890213ACEAE1FB61A12BF2255F025
SHA1:	9F6F37CF0316B61D9B3CD535BF5E2850C9A95901
SHA-256:	F06AF993532B28272BBCB95C8EA4FDEED958417A9C29FCADAF45105F843FD06F
SHA-512:	1C1EA0E424DD810546802CDBBF7EF42CEFFAD6629E7F9EBB85FA3F7FB0570CAFCC5EEA48ECD65B998E97CFF6554700D78935AD03D903F3E9BDB04E43A02C59BF
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1679236460;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1679236460;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1084 x 319, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50270
Entropy (8bit):	7.942578630414581
Encrypted:	false
SSDEEP:	1536:jdvGYXMK0jCzPYiJfp9qBqcoyLcLcdr+o//:DMKWCzRJfPqBqcMC5
MD5:	C7E58E7FAE0D14B374938F7C3052BEBC
SHA1:	0A4F46E3A2144BC9D33E61C30D7DCDB98DC798C8
SHA-256:	F0E40A3DEFF67DAD93BBC6653158D41EDCB49CA2FD6CCD17B32541F83BB89BDE
SHA-512:	33C612C718CA3756429F4D0F1BB52F1FF27C598B1DA15D0FFF95E2862FA338713B95BDEC23FA956674AC059AF71A4E2927AD2BF5E3EFCA4B7E3C429DEB2ABBA5
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/copy1.a62a38e342bf4dadb1f9.png
Preview:	.PNG........IHDR...<...?.............pHYs.................IDATx..g.$E._rXXv.".....%.H.(QP2..$...D.DEE%)..(A.$.D.9..X ...].v.....w'T...s..<.....:..N.0...(....Y3.0...x..J.ER..8k>...........C..U..EQ..F.....(.2.p.,.\|....8........".l...J.(S.Y.8.X....\|.7uT(EQ.E....P.EQ.......,...f.../.....!.Wa{....[.>o..\|....P..d.;..[.{...xig.R.EQ....EQ...q....vB.+Z..p.p.....mN.\|.8...`5?.!.VT.E)...6...E..K.[..(..oL.m..EQ........u.2`s`..f.V..4v...cG..u.\|.%...oQn.\g..QO..0..u(Jn.5...K,>30~.I..(..(..t..-@#.5c.S...........MF....".b.............L...!^P..EQ....y.x.)'.....X../G.....{6)..p....wB.?q..C\|7U.E...s....I..(..(J....Y3..5\|.`U.Ty..u....<.....C\|..=.YX.8...9k..!.SF.EQ.%.Y.....Z.{.Q~/..}.5.........}.\.....q....)<..6..Il_Q.`..E.EQ.E."]...Y..,..nu`..4."p.p.......\|.v.......!>....EQ.>..q7.7`w.....q....9......YY8k...BL...4.q..kY.............e..4.+..B...C..yHQ.EQ.5...p.....\|.X.S..b^`../... ..(J}.Nse....,.nO.s>.....Ace............Is...$..TG^..q.H.(..(].v..g.u....y.5.Qv(..(..g.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 30776, version 1.6554
Category:	downloaded
Size (bytes):	30776
Entropy (8bit):	7.985440814365276
Encrypted:	false
SSDEEP:	768:W3vsyUi/jdWtvA0kddk7OYfqBPdS1Rzs5:0EyJAtnk3k7OYEVio
MD5:	3E43992E4E2C4420A860C2DCED8CC368
SHA1:	2749C9FD14C8021138214E8E89542C8FF69A6B5C
SHA-256:	04AC8540C5790E80273C2FF1DA99BDDEE617700467EAC8799072EF4424ED086F
SHA-512:	1EEB5EBEBEC9D25DE8C6AAB5063442BD547D70D0F1A479CA44DAFDEEA8FDCE8D48F695DD813A3EF527CB52AA4A14C9735B74CCCC0FA24AD69AC47B1F0D5881C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff
Preview:	wOFF......x8.......<........................GDEF..g..........o.]GPOS..h....r..3v...GSUB..s........8-.jQOS/2.......Y...`..c.cmap............;.<.cvt .......t....O.-.fpgm.............0.6gasp..g.............glyf... ..S.....09.head.......6...6..C.hhea....... ...$.R..hmtx...T.......b.r^9loca...........:...Vmaxp....... ... ....name..f....&....E.j.post..g........ .~.Dprep...p........D.5..........z._.<..........#.........A...J..............x.c`d``>.....k....N.^@...$...$.........`...d......./.a...%......x.c`a.e..............B3.d.a..........,....;0(T..(0.....#.P.._.#..000.a..JL..1q1......:......x...p%K..O.,.`..Y..m.m.m.m..~....Ye..:m.....%.}....(w....<...(8_Ez^enG.A..Py.M..q....u.h.e...TA.......VO.o.5.....N.........".........P..&./k.DV.....,..D...(;L#.mY.m.....O2..$.S..Gm~.h._+. ..`.5..`".=t...._N.4..V.......p...[..h..A.j$...kb0^....].A>.\..[..Omh........;.b.._.L?P.....oI...._.F...i;....5..!.R....gk....A.e.......R..0.F...M...`5..5.5..o.>..l....M'.sU.c......\.-..)os

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1084 x 319, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50270
Entropy (8bit):	7.942578630414581
Encrypted:	false
SSDEEP:	1536:jdvGYXMK0jCzPYiJfp9qBqcoyLcLcdr+o//:DMKWCzRJfPqBqcMC5
MD5:	C7E58E7FAE0D14B374938F7C3052BEBC
SHA1:	0A4F46E3A2144BC9D33E61C30D7DCDB98DC798C8
SHA-256:	F0E40A3DEFF67DAD93BBC6653158D41EDCB49CA2FD6CCD17B32541F83BB89BDE
SHA-512:	33C612C718CA3756429F4D0F1BB52F1FF27C598B1DA15D0FFF95E2862FA338713B95BDEC23FA956674AC059AF71A4E2927AD2BF5E3EFCA4B7E3C429DEB2ABBA5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...?.............pHYs.................IDATx..g.$E._rXXv.".....%.H.(QP2..$...D.DEE%)..(A.$.D.9..X ...].v.....w'T...s..<.....:..N.0...(....Y3.0...x..J.ER..8k>...........C..U..EQ..F.....(.2.p.,.\|....8........".l...J.(S.Y.8.X....\|.7uT(EQ.E....P.EQ.......,...f.../.....!.Wa{....[.>o..\|....P..d.;..[.{...xig.R.EQ....EQ...q....vB.+Z..p.p.....mN.\|.8...`5?.!.VT.E)...6...E..K.[..(..oL.m..EQ........u.2`s`..f.V..4v...cG..u.\|.%...oQn.\g..QO..0..u(Jn.5...K,>30~.I..(..(..t..-@#.5c.S...........MF....".b.............L...!^P..EQ....y.x.)'.....X../G.....{6)..p....wB.?q..C\|7U.E...s....I..(..(J....Y3..5\|.`U.Ty..u....<.....C\|..=.YX.8...9k..!.SF.EQ.%.Y.....Z.{.Q~/..}.5.........}.\.....q....)<..6..Il_Q.`..E.EQ.E."]...Y..,..nu`..4."p.p.......\|.v.......!>....EQ.>..q7.7`w.....q....9......YY8k...BL...4.q..kY.............e..4.+..B...C..yHQ.EQ.5...p.....\|.X.S..b^`../... ..(J}.Nse....,.nO.s>.....Ace............Is...$..TG^..q.H.(..(].v..g.u....y.5.Qv(..(..g.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1837, components 3
Category:	dropped
Size (bytes):	307426
Entropy (8bit):	7.977800402025947
Encrypted:	false
SSDEEP:	6144:IEcFog9gbg3m+DfpGg7xdLkgP6LBp/oQU4sSQDXvgSdShvBHgR3d2:jcFoLb+NrxJpPEp/9U4sSQDXvXU5VgP2
MD5:	1CFF9093BA7619F76854B2D4F71C01DC
SHA1:	60691147656B3931F42489803F8AAE93B684A413
SHA-256:	D38C8D581CB9B008773AF9DFE7072DA23247DB8B66B682C48A2AC440394CCD16
SHA-512:	418640B538FDD3036835B275CE58AE1C31EBF0DD14D93AFC5B1F5EFBB9CCD37640431A2541576AA1072FE81C870237FDC81F8E4E668536CDB5447A7402023BA2
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......-....".....................................................8#.W5..G,`..8.bW...+..J..Ej.(".........8. .4..PE... ...E.P....\.s\.s\.\.". 4.T.......AG5..5.....9............k.....p...Q.h..4Dp. ...T.h8.h..]..h ..@.E...@P...=..TQ@...P..F...h.....E...... .... .(....E.......A...Ph. 5.\..\5.\........5.......#\4s..h.T......\..................(......P... ....p.....s\..........EEA@.....h...@@@....#A...k... 0T.DT.APQ..]......APTP......@AA..TT...Q...T.h..(.....A......@@... ...Q....@.7.8h.5.@.T.D.Q...TP..P..EA......T..j( .(.4....4.... ....5......(...t....5....@...PP..TEQ.TP.1Q^.AP.@.P.......A..............A....A."........... (.....(...".(...h.... .@.....5......D....4.PA...4.@....Q..N..h .sA.DT...Q..T..T.P..TP..P.@.T.QV0.P............sDF.....@ED... (..j(9.......k......*... (..............@EDP........4................

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845
Preview:	{}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35384), with CRLF line terminators
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	5.351684385876074
Encrypted:	false
SSDEEP:	768:CY2XYmZwOhINHCUUGEs9wtqd2Owr7iBwy:52dZjeJCts5oy
MD5:	DDA723FF3ED7EAF04E02DD8BF51EA41A
SHA1:	8B4CE1B3C7F04112519E9D8A217ACE13C4A45C69
SHA-256:	AD367E536C20C594229B6D90AC4097730886EAC4F8E11B07E908E584A62B1268
SHA-512:	F3DFB0A14A9E98B3A2B16B8013E9D3C34C7BDB3FA29EB92F9BE07B3EE07BA482398A60767ACE2DBFCAC13D2A4C6DA2524157062D1EDD7950A0A327D1216247E5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.32
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return We},get start(){return qe},get stop(){return Xe},get track(){return Ie}}),e=Object.freeze({__proto__:null,get clone(){return an},get compute(){return on},get data(){return Ze},get keys(){return Ke},get reset(){return un},get start(){return nn},get stop(){return sn},get trigger(){return rn},get update(){return cn}}),n=Object.freeze({__proto__:null,get check(){return gn},get compute(){return mn},get data(){return Ge},get start(){return pn},get stop(){return yn},get trigger(){return vn}}),r=Object.freeze({__proto__:null,get compute(){return xn},get data(){return bn},get log(){return On},get reset(){return En},get start(){return kn},get stop(){return _n},get updates(){return wn}}),a=Object.freeze({__proto__:null,get callbacks(){return Nn},get clear(){return Hn},get consent(){return Cn},get data(){return Tn},get id(){return jn},get metadata(){return In},get save(){return An},get start(){return Mn},get stop(){ret

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4562), with no line terminators
Category:	downloaded
Size (bytes):	4562
Entropy (8bit):	5.334921895055784
Encrypted:	false
SSDEEP:	96:nIAc8jsKwObAfJt1Fv0FLvWDlsod8DWh6jWtiVfM3rmcNeTinfGzbgR6A78Rsu1O:IisHOAb0VWD64oWgZI6/NhOZ65sG7XOD
MD5:	34EAE0E4B14BA01EEE4D85C9C6FA8BBD
SHA1:	736E8B5660727E6E8CEF569F2F94532E352DE523
SHA-256:	B61FF9EC819A4E60952AD88E18B4139CFA50F49C8AACDD8C6C5948903521B3F8
SHA-512:	4FFAC9558A5D99F8101DDCE4CE659413E3A223492866169B6E586396E60B41744ADCBFD18923ABC2EA9072D827D136929B75BE2961742DD0441F747E9C43FA51
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/404-2628cd0d85d8ff64.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(14148),i=t.n(o),s=function(e){var r=e.title,t=void 0===r?"Yikes, something went wrong on our end.":r,o=e.children,s=void 0===o?"Perhaps try reloading the page, or coming back later":o;return(0,n.jsxs)("div",{className:i().ErrorState,children:[(0,n.jsx)("a",{href:"https://wetransfer.com",className:i().Logo,children:(0,n.jsx)("img",{src:"/assets/images/logo.svg",alt:"WeTransfer"})}),(0,n.jsxs)("main",{className:i().Wrapper,children:[(0,n.jsx)("img",{className:i().Spiral,src:"/assets/images/spiral.svg",alt:"Image of a spiral"}),(0,n.jsx)("h1",{className:i().Title,children:t}),(0,n.jsx)("p",{className:i().Description,children:s})]})]})}},53145:function(e,r,t){"use strict";t.d(r,{Z:function(){return a}});var n=t(52322),o=t(97729),i=t.n(o),s=

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12692&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925126090&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44642), with no line terminators
Category:	downloaded
Size (bytes):	44642
Entropy (8bit):	5.470824352879873
Encrypted:	false
SSDEEP:	768:gJj3JFkiE+2jS/hpb+F+zLW50xxUnUQaW8kkHMMpd1NzdMykcb0s0PFZs8:gJ7JFkiGjS/hEF+zk0xxUUQaW8kkHM6U
MD5:	0117DED66314D5D48929F64D97591068
SHA1:	893CFE4C1BFEC063FC7961C5E89DCF5FE621DEB0
SHA-256:	D90ADB7C4B93E66D3309045CA1764CF914D4809EB3B824D141D8BEBC8E82D6AA
SHA-512:	796287B88EB5287233A18FAFE197597133900DC6E217EDE1C07F342FCB6DA8BC793B683BC6AB30DCEA48A23CD40C6B525EAF7D8755E8FE7251FCA13E2292F5AA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/955cc3f7.47e52b23a8132ed3.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e?"object"===typeof e\|\|"function"===typeof e?a[i.call(e)]\|\|"object":typeof e:e+""},t.isArray=Array.isArray\|\|function(e){return"array"===t.type(e)},t.isPlainObject=function(e){var r;if(!e\|\|"object"!==t.type(e)\|\|e.nodeType\|\|t.isWindow(e))return!1;try{if(e.constructor&&!n.call(e,"constructor")&&!n.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(a){return!1}for(r in e);return void 0===r\|\|n.call(e,r)},t.each=function(e,t,r){var a=0,n=e.length,i=l(e);if(r){if(i)for(;a<n&&!1!==t.apply(e[a],r);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.apply(e[a],r))break}else if(i)for(;a<n&&!1!==t.call(e[a],a,e[a]);a++);else for(a in e)if(e.hasOwnProperty(a)&&!1===t.call(e[a],a,e[a]))break;return e},t.data=function(e,a,n){if(void 0===n){v

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925108360&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4877), with no line terminators
Category:	downloaded
Size (bytes):	4877
Entropy (8bit):	5.287929038960014
Encrypted:	false
SSDEEP:	96:HQJFMUFbj0EY6f6Kufxbz6EDPs41F6GxCgYKpZrR6YZbb5nGokp9Hy:HCMUFbjrY4LufxbzxDPj1F6GogYKpH6g
MD5:	386A8F7359235F2656A1440273B12DF8
SHA1:	EB45D1DFC3D439799C52C0A08D14A6E9F33B4A3F
SHA-256:	917A6EAA1938969449BF65D43E4D39CCD24D151FE1C53FF8C304F5188BE80CC1
SHA-512:	B69F90D56C794DD7B79E8F1538D973FB0AF118ECB766839FE90BD9500BE0B771921E8380C74D0C779825BA1E68060DAE865D41B814C84AB494D23161B2D54AFD
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/460.8410c9803a20af04dea9.js
Preview:	"use strict";(self.webpackChunk_wetransfer_wallpaper_ui=self.webpackChunk_wetransfer_wallpaper_ui\|\|[]).push([[460],{4645:function(e,t,s){Object.defineProperty(t,"__esModule",{value:!0});const i=s(3909),n=s(7109),a=s(9582),r=s(6457);t.default=class{constructor(e){this.eventEmitter=new n.default;const t=new URLSearchParams(window.location.search);if(this.endpoint=t.get("_origin"),!this.endpoint)throw new Error(r.default.CANT_VALIDATE_ORIGIN);if(this.parentPlacement=t.get("_placement"),!this.parentPlacement)throw new Error(r.default.CANT_VALIDATE_PLACEMENT);this.callback=e,this.eventEmitter.on(i.RESERVED_READY_COMMAND,this.onParentReady.bind(this)),this.listeners={},this.run={},window.addEventListener("message",this.receiveEvent.bind(this))}receiveEvent(e){if(e.origin===this.endpoint)try{const{command:t,payload:s,parentPlacement:n}=this.parseMessage(e);if(n!==this.parentPlacement)return;t===i.RESERVED_READY_COMMAND?this.onParentReady(e.data):this.eventEmitter.emit(t,s)}catch(e){console.er

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	501856
Entropy (8bit):	5.3562533607063925
Encrypted:	false
SSDEEP:	6144:2V/EvQ01Siyn+AYX2Eb4E328MOGjkeQG/nn:2NE401vyn+AYjb4E328MOGjkIn
MD5:	7BBF99584CACBC02A1D6EE0813153C1D
SHA1:	C5690A5FD7A2E391EA8B144537CFB87FE259CB57
SHA-256:	8838F444316D5E9808AC6B8320B64408F49DC9E71C9BEBC462A33599FF19D238
SHA-512:	E2EB39DE9EA9768E68E814ADA4A4423ABAE82F05C0908489972A72E7A6A3525BCB72E7326B6D48069D2C19E414D90B1360BDA85CA1A6B95ABA5918889A0E5E3F
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/03d589055b9fa8a0.css
Preview:	.WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-display-heading-large-bold__WSfgs,.WallpaperSocialLinks_wt-display-heading-large-narrow__hQtfe,.WallpaperSocialLinks_wt-display-heading-large-wide__inDul,.WallpaperSocialLinks_wt-display-heading-large__D_lV4,.WallpaperSocialLinks_wt-display-heading-medium-bold-narrow__lp7nv,.WallpaperSocialLinks_wt-display-heading-medium-bold-wide__W_K4w,.WallpaperSocialLinks_wt-display-heading-medium-bold__AIoN1,.WallpaperSocialLinks_wt-display-heading-medium-narrow__bkJTb,.WallpaperSocialLinks_wt-display-heading-medium-wide__Wa813,.WallpaperSocialLinks_wt-display-heading-medium__eNOaM,.WallpaperSocialLinks_wt-display-heading-small-bold-narrow__BAncF,.WallpaperSocialLinks_wt-display-heading-small-bold-wide__iQnnQ,.WallpaperSocialLinks_wt-display-heading-sma

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.517395759023966
Encrypted:	false
SSDEEP:	3:YIzGE/Ke8KTNz1VHJSXLjJp2ERh2in:YIX/WIzfH4nJp2Eein
MD5:	0AF94B9851CBD20AE843EF0C26CCEBE0
SHA1:	3D3A1D4256673F9F5286677E0B046D22044E83F8
SHA-256:	65199FF4A61961135B3CB942273A30ABAF3DA3D10246652988A573863D282C8F
SHA-512:	3B31EBA5C84D0B7866E6820DE42CD4023316732AD37D42B02D24B671772EA5C2649C21941D31B835F231C99EC078E3E5A6BC96B310C613CDE75CB19BCE2B588C
Malicious:	false
Reputation:	low
Preview:	{"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35884, version 1.0
Category:	downloaded
Size (bytes):	35884
Entropy (8bit):	7.993678658459837
Encrypted:	true
SSDEEP:	768:nTaYaeKDNBe40kOdkMcfwPKNLZWxLJd0yJGMg1QdyAdSk3y:nTtfKRE40je2VJCMiuyAwkC
MD5:	51CBD7213AE115ED59C3F2874014AB69
SHA1:	D8D1A69F5D19C825CD0B44D875C95140C3129E0E
SHA-256:	CBF4D73CCEF8548406B20D54B8792830468541C81BF78B22E0B4D24D811C5F53
SHA-512:	0614AEB0394B101C39A5AA0D5E089158E0F4B351836FF0B64ACA811A5AAF338EEC03404F1B51A04FFDE3FF9F14233468BA72578C66EBBDA1689D35FD49273EF7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2
Preview:	wOF2.......,......{.............................?FFTM..........v.`..n.4........ ..2.....6.$..". ..'..b..'[VW....<.g.>J.!P....UH....Q.y....+....A...+j.....[.E...Af..8:..._5.zL).^F.r..h.$K....`.[..2..6.j..u..Z..+R...1.f.6.z..i..`IHRv...j.-\Dx.D$^.R......msr.n...i..C..\|....E..+]r...y.2....k.... ...].A.......nr..\5.....$!I.......1.......L...6..3[.e.....tj....a..1v..# ..^&.........[OV.F....=...0yYq..........=F4X..;~.v}'...%...?.!.;..Ev.....].%...+N.....:.._...i....A.A...DT.J.......vq..(B..L.Z...N.....-.@I....{...~.0.2....,Q.J$..c.YV.w..&..U....X...I.l.;......W.{...........6..3.....y...Y..l.._....e.u F8tV.zd.>.2........v~._..V.uZ....F..s.q.k..y.S...0.]..-Q..\|.......l.}..9J..[..%X.way..a<......'..c.B..yR.........ON..twMi.TW..^o...#..(BL ql.N=....<gr.....~.@.L.V.I...E*.T.{.../Y7y).f(.8.E...I..Uc..r3a...\e.qz7.."V...w..S..7.UB.........C..}x...!..C.0..&........4..Y......e....d.(....v...R........ax....6y.W..~v.....?..Xd..2.'Z....o{....j>.]r..B....\Z

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120412
Entropy (8bit):	5.318079856861032
Encrypted:	false
SSDEEP:	1536:NVhJDkPcBFSVE/PKjBDXZfIj7wZ3MzVdwLbmjvcAtcKtlH:7wcBW6KVjpIjUZcekqK7H
MD5:	0D42CBC6F4575509A4B48AB8458F42A8
SHA1:	7573505BD3E6711D08142B8B41E1F8A8979C2B03
SHA-256:	A910329A78CFD7C5CD1300634E32071F9B0B67FD7F084A4D28285A60AC31983D
SHA-512:	994321CAD4391CE8956339841AA5F8DD3FBA5BBBD2FC366D1066B5CF26ADF33B8A3C54513063E99B9BFA9D5C1E451F89A96C73285821C77713F69C4642B3F482
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/main-3f0c3e8b10ca351e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}},47568:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},61476:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return a.default(e)};var n,a=(n=r(5651))&&n.__esModule?n:{default:n}},96385:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},18282:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1069
Entropy (8bit):	4.468396063736787
Encrypted:	false
SSDEEP:	24:tkuLglFOuHfyAQm+AmJyobMe9QemGd6G9AwcAUjVa4rKBAMPJy2:DSOqyDWoyEM/eANs/3
MD5:	4DA6828F7CD6F0D208E2CA0924F20AD7
SHA1:	6BA33AFB047CE9794A1D2E4C3398F342A7039202
SHA-256:	89DF87A23A177461DFF07428E9B50C834E5FBB89DF8632AD87BA2CAEAAB31447
SHA-512:	33297675FEDAE71EE6488AABCFD9B3FB395C8730CF66F8687E033B1AB8CF695CD1E9445E47378E096DABBB9F0900552F7A44494E98EF731585D8F5C9E6C53808
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/logo.svg
Preview:	<svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.648-4.153 2.415-7.21.843-3.408 1.226-5.524 1.226-7.248 0-1.724-.536-2.742-2.376-3.095C19.24.423 15.83.15 12.073.15c-3.756 0-7.167.273-9.697.743C.536 1.246 0 2.263 0 3.988c0 1.724.383 3.84 1.226 7.25.767 3.055 1.61 5.327 2.415 7.208.653 1.528 1.266 2.076 2.607 2.076 1.342 0 1.917-.783 2.607-1.92l1.84-2.938c.42-.666.766-1.018 1.38-1.018zm23.572 6.197c3.22 0 5.672-1.018 6.975-2.43.69-.782 1.495-1.997.92-2.937-.498-.823-1.34-.98-2.338-.47-.996.51-2.108.783-3.373.783-1.227 0-2.53-.47-3.22-1.176-.843-.862-1.303-1.96-1.303-3.252 0-.313.19-.353.536-.078.882.705 2.185 1.057 3.948 1.057 3.26 0 6.133-2.232 6.133-5.68 0-3.643-3.372-6.347-8.47-6.347-5.71 0-10.12 3.762-10.12 10.11 0 5.915 3.834 10.42 10.312 10.42z" id="b"/>. </defs>. <g fill="none

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43796, version 0.0
Category:	downloaded
Size (bytes):	43796
Entropy (8bit):	7.986945551187073
Encrypted:	false
SSDEEP:	768:Js2Y/kwGIUHolyiDzi0fropS/nxelW9ffiNUqqxQvtSJ4bM6OzAbEV5p:uczlolxnlTopaq09WXbM6ON5p
MD5:	5321545E6FD1CEC2EB1EE4B745F450A1
SHA1:	3CA6BFFA09BB812466BA0CD5196D38B57AC51252
SHA-256:	F95DC7465B90788F8D5CB452B298BB4E6639CEC58821888DA9BE25F353035A8C
SHA-512:	B5D0EAE16E6FE120A128D7D48D44830C2EB5E10F7D0B4F2E324B693F85D4A4FB614C0CBBA09875A456F34EC937FE15CB254DE577B31FE75B92731DE321CB3AFD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Regular.20d77fe0.woff
Preview:	wOFF..............t.........................DSIG................GDEF................GPOS... ...!..6...1.GSUB...D.......^._..OS/2.......N...`hy..cmap...P.......h=j.ccvt .......)...4....fpgm.............6..gasp................glyf..!h..s........head...<...6...6...hhea...t... ...$....hmtx.............\-.loca............_$.emaxp...8... ... .;.Gname...X...Y........post...........b.))aprep...\|........hF.x.-..AC....p.....p....w.-.{......%......>`..-..F....r...!...x..z.#-.M....Z..M:.b..f.g.iC'..e..:.A.........g......;.}...C.X..M.^....x...3..Y..../.m...Zc.]M.41...tA5].}l......7...<.......El?..WF`..H..}.c..a.XZ..$.D....bW..#x.F.52x.N2_..].O.\|.....JVl..X....b.)..1..%..../+.#....6\|. ....%.Tk...(.....I.F...C.5r%.X2...A.e...&.lk.A....:4:$.j...~..S7.?.yj.Z.6.m..#....3.]..V..........<.+W..}...~U.T..h5].Z.^-....55j....3.]..V.....@.o. ..0....8.'....?.n...Y.f~....@(.......6..awu.../.~.?-A.h.......j&l.) ..q..\|.$.....JK..\|.L...\.>O.S"%[.C.d....rYn.[yo\|M..`.7Uf..D.-].C.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 829 x 804, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	403929
Entropy (8bit):	7.996411673921865
Encrypted:	true
SSDEEP:	12288:tVoG11Sf1sgv3c31KTSyLMlzpjENrPX0y:7bo1lvcFKhUzaDL
MD5:	B87143FE59071125A9693041A69391C9
SHA1:	47D62156F67424B65E0B82A172A308889482665C
SHA-256:	F5382D2D4A201B540CFA0E1E6CA1F86C0A934E7F2621D8A71AE8F6A9A5C906C5
SHA-512:	2458E1E8F7E1D8289623168B8A2D2FE28B5C309CC41E5F1FFF04FE2705B13E99BFBA8CF1F27341A833451BE9344770F4EBD7C00B27D435954257E57811B7FC6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...$.......N&....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.4 (Macintosh)" xmp:CreateDate="2024-02-22T17:40:20+01:00" xmp:ModifyDate="2024-02-22T18:15:14+01:00" xmp:MetadataDate="2024-02-22T18:15:14+01:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:af44bf90-95bf-4424-affb-2f4313b4cdaa" xmpMM:DocumentID="xmp.did:af44bf90-95bf-4424-affb-2f4313b4cdaa" xmpMM:OriginalDocumentID="xmp.did:af44bf90-95bf-44

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1002077
Entropy (8bit):	7.98664974383649
Encrypted:	false
SSDEEP:	24576:XmIizjY6EG7KrsfMsz9dhl1vM9QXZcT/Pot7KHow1o5i:kXYRkKNwdhl1vMQJcUt7KHPoY
MD5:	25EE8E8C018A2D9ADDC20A03B331B97A
SHA1:	86A3F95782EF90667EDA5D25221B99B479A86825
SHA-256:	511978CD22AFA7A9F3CE91DCA2B1ED89DF617236D1AC6264EDCFE936BAA15B65
SHA-512:	94D5E702047BC65001F5FB42F50C866FCA40357E321B0EE3E075C482EF257EDF7451BA3BEB347A383F74A95D1BC798DC7446B04E47B989F869C27DECB105B36B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTEGpL...^.wj..j..j..j..i..j..i..p..IfZ1@9W}mm..j..C\R......Rre...8LDu..Z.w...j..l..i..i..rwyg..t..h..ypzd..X.v.........................................................`..{..Z...Ah..%...Jr.e..e..`..]..?a.%2R_..S~.kV^.$;=e.C6=Q?Hk..q..,@66T\|=h.\.t...nqr]KR...[.....`.....`..)50EdX!,&.!.0#'>+/2I?%..w..X.v?[MM.WG{ODxL8SE`.{Uzk....RxMMna=e.Z.._..^.....:C~d<\yIo\|_j.s..W.....\|....q.....e.................jv...p.w......JW.8..S..o'..0..7..E.R42.>..L..L..]&...\|..M..W..d/.R..QM....l?.Q.............BL.GS..............V.aI..D@"...ng......YUrHE.e_.\|s.w.~u.}t.um.xoc?<.zq.....}....z.\|t....}.h_.zq..w2/...UQ+gb4..?....vxs>..J..n.u..]...Q..K..S..............j.os.X[..n...HU....................b..e..d.fj..P....d.T..R..Q....jn..S.^b.>*.ae.uz.E/.D-...J....tRNS............U....$5.Dl......Q.t.0..Ym....................................................................P.......................................................................

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35384), with CRLF line terminators
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	5.351659320595888
Encrypted:	false
SSDEEP:	768:Cz2XYmZwOhINHCUUGEs9wtqd2Owr7iBwy:q2dZjeJCts5oy
MD5:	714414D8F323460D6A8187161A8B77EB
SHA1:	C8D90ADE715D2878AC79BFA8576E15FF217A2DF8
SHA-256:	FC0E5BDF4287F4E976558D72D9E58269B0D4261B5A23570ACB065A26D13FF9F0
SHA-512:	A76C43768EACA16BB54F3932D1905936430E61B117B8FAFF4488B9C7D2E78BF5FCFC1477448B375B7684B350F952028CD94FD44D46D7CD39F385F0B1601647D3
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.31
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return We},get start(){return qe},get stop(){return Xe},get track(){return Ie}}),e=Object.freeze({__proto__:null,get clone(){return an},get compute(){return on},get data(){return Ze},get keys(){return Ke},get reset(){return un},get start(){return nn},get stop(){return sn},get trigger(){return rn},get update(){return cn}}),n=Object.freeze({__proto__:null,get check(){return gn},get compute(){return mn},get data(){return Ge},get start(){return pn},get stop(){return yn},get trigger(){return vn}}),r=Object.freeze({__proto__:null,get compute(){return xn},get data(){return bn},get log(){return On},get reset(){return En},get start(){return kn},get stop(){return _n},get updates(){return wn}}),a=Object.freeze({__proto__:null,get callbacks(){return Nn},get clear(){return Hn},get consent(){return Cn},get data(){return Tn},get id(){return jn},get metadata(){return In},get save(){return An},get start(){return Mn},get stop(){ret

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	dropped
Size (bytes):	149049
Entropy (8bit):	5.5988351780883026
Encrypted:	false
SSDEEP:	3072:43pj7fThL4OKhO56zapd+uMKSUqcPHyPQFFrHsfltW767lJjhcCZWEoUR+zaN9/2:45j7rhL4OKhO56zai/dUxPHyPQFZHsfe
MD5:	6B7DB5006CA5B020EAF9B911EF2503FD
SHA1:	4E47870599D5BA49B31863A3520C18812F8EDA31
SHA-256:	DE9A7FC7BADEF153AFD13331DA8E1F84C54C9CE80CF04FC50D57134CE965EB57
SHA-512:	03B33B630AA8AC54721B58C774B743232CE9B3337C2365732724971197198AA2C67461047F671A230AD793EFB553889433C0706757D887A8F6C1B619F881F13C
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200
Preview:	{}

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65450)
Category:	downloaded
Size (bytes):	139237
Entropy (8bit):	5.554876748615201
Encrypted:	false
SSDEEP:	3072:kf3to9625ib7aJ33vyiOKa9G113EQSb6h:4touMqigG/4b6h
MD5:	DD28BC4C18D898C1324BA23968D79179
SHA1:	104A40925465EAB1AB0BBF0760A41B4BCD9115C0
SHA-256:	7247F077BAD957C4886646510B4BE4321CF524E4FA4243383646CF116E668D98
SHA-512:	0A1053ACB0CAAD3451B216AE1D24AB3E8387F219CED8EE6776D55E54443AEF0F1F6B3F456B73EF2250E414148D62E4E0562EF22BA0D6E18B089F94B24040A9A6
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/newfold/2311/intro2/1_D8nrHQ/bundle.389254d85d861455dbb1.js
Preview:	/! For license information please see bundle.389254d85d861455dbb1.js.LICENSE.txt /.!function(){var t,e,r={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:[]}},2274:function(t,e,r){"use strict";let n;r.r(e),r.d(e,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return h},hideCloseButton:function(){return d},initialize:function(){return o},onBlur:function(){return j},onEnterFullscreen:function(){return m},onExitFullscreen:function(){return N},onFocus:function(){return _},onSafeAreaUpdate:function(){return D},sendTrackingEvent:function(){return y},sendTrackingVAST:function(){return v},setCloseButtonColor:function(){return M},setStatusBarColor:function(){return g},showCloseButton:function(){return p},startUpgradeProcess:function(){return l}});let i={};const o=async()=>{try{const{Marco:t}=await r.e(441).then(r.bind(r,4441));n=new t((t=>{let{availableListeners:e}=t;e.forEach((t=>{n.listeners[t]((e=>a(t,e)))})

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12693&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=4HOm4D0LIoAQD4DdntC1aMKHAQkp5Mf8mT6MgHEPG437ockmNKOLFYV0vqY%2BOfnQDWRa2T1v4PYPCxyTdCFf1%2F4bMHHFYrFFvGMaXn6LgkaHreCH4ReiHwbiiTnyOMZK%2FZJDSpje1eD11Ls0lWl3eNf1we%2FsjoSvkpixF2YrG%2Fcn7F3UF%2BDGmFlqyfQRqgygCIc%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10127), with no line terminators
Category:	downloaded
Size (bytes):	10127
Entropy (8bit):	5.390113372974597
Encrypted:	false
SSDEEP:	192:d+fEn917bsGTFiK2H5J1cGBgm0qofTI+AJj82M/BOzeqNwEC90Aqj3Z:kcn3EKFDeX2bgJj9zeqNx3Fjp
MD5:	8A82CE8BE8DB77081A8255882AF37A92
SHA1:	169400F93136DEC77CF2F78F8344428E7B387722
SHA-256:	757DE6D9E9FF3AA8A9E3492C9073F5E98427B48A18D8BECE2C459B0D59EEEFE2
SHA-512:	6D793BB14ADED6425A39E63628664401CD2D07EF9DCB107854D1BFC3A18B36AB5E5F5EE82806FB8F0019712D1EA306C6724D6BA77C8DB529AE3CB71C3FBBDFE2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/webpack-069d168508eed678.js
Preview:	!function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},function(){var e=[];c.O=function(a,t,b,f){if(!t){var d=1/0;for(i=0;i<e.length;i++){t=e[i][0],b=e[i][1],f=e[i][2];for(var n=!0,r=0;r<t.length;r++)(!1&f\|\|d>=f)&&Object.keys(c.O).every((function(e){return c.O[e](t[r])}))?t.splice(r--,1):(n=!1,f<d&&(d=f));if(n){e.splice(i--,1);var o=b();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[t,b,f]}}(),c.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return c.d(a,{a:a}),a},function(){var e,a=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};c.t=function(t,b){if(1&b&&(t=this(t)),8&b)return t;if("object"===typeof t&&t){if(4&b&&t.__esModule)return t;if(16&b&&"function"===ty

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	485
Entropy (8bit):	4.573995652063813
Encrypted:	false
SSDEEP:	12:trsdCtuC8Wbn2ASk1hj74QmrcSQkexhqHQuQDImVTDKjyS:tAdCtuNWbxl1tiIST4kQHsmVnKjyS
MD5:	9C5640120E49AFFC48FE61CDA0B5B08D
SHA1:	D4E21E33439F9CC61687AAB71E0DCB1583DCDB99
SHA-256:	A41CAB3374674FB912CC0E0B9A02DB73B57D22F72D0FA09F7608AD6104991D5A
SHA-512:	963261B5D1060DEBE28436B8B3D0B23FB415F7873D03BB787080D97DE6DA0D1D846CA4E015AF3093A575A85EA5D58F123247277061F1001F3292C76715750926
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/core-shape.cde027dc.svg
Preview:	<svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9853 0.196099 25.0258 0.562169 27.426C2.07711 37.3741 9.3593 42.0794 21 41.999C32.6407 42.0794 39.9213 37.3741 41.4378 27.426C41.8039 25.0279 42 22.996 42 21C42 19.0125 41.8039 16.9721 41.4378 14.574Z" fill="currentColor"/>.</svg>.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129996
Entropy (8bit):	5.262570094340155
Encrypted:	false
SSDEEP:	1536:MhhOCvjwxJZzcXI6+jyXu4KaEV/gbXc20ZHLwD8EaBtrRyXfG:MhhOC0x96ruNiXcvh0jyxRyXe
MD5:	810B8DB8296DF1F82A3DDECEF6AC0832
SHA1:	DBBF03835BF6560A4CFE3BB9B32289DDA417205D
SHA-256:	418DF2D5B51731160E7CDA10AD98A90A93ED2F6BB0E50432B80ED3B5A43D5A3A
SHA-512:	777FAB5CFF72041B2F0B8E102D1E134F35D35472C3BFC6C8E13E765DC53D44567F0503761D8D6B91F40524C3C50617964C40C3009234B2415074918D7E370C1F
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/framework-45ce3d09104a2cae.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(i[e]=t,e=0;e<t.length;e++)u.add(t[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925126241&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1002077
Entropy (8bit):	7.98664974383649
Encrypted:	false
SSDEEP:	24576:XmIizjY6EG7KrsfMsz9dhl1vM9QXZcT/Pot7KHow1o5i:kXYRkKNwdhl1vMQJcUt7KHPoY
MD5:	25EE8E8C018A2D9ADDC20A03B331B97A
SHA1:	86A3F95782EF90667EDA5D25221B99B479A86825
SHA-256:	511978CD22AFA7A9F3CE91DCA2B1ED89DF617236D1AC6264EDCFE936BAA15B65
SHA-512:	94D5E702047BC65001F5FB42F50C866FCA40357E321B0EE3E075C482EF257EDF7451BA3BEB347A383F74A95D1BC798DC7446B04E47B989F869C27DECB105B36B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png
Preview:	.PNG........IHDR.....................PLTEGpL...^.wj..j..j..j..i..j..i..p..IfZ1@9W}mm..j..C\R......Rre...8LDu..Z.w...j..l..i..i..rwyg..t..h..ypzd..X.v.........................................................`..{..Z...Ah..%...Jr.e..e..`..]..?a.%2R_..S~.kV^.$;=e.C6=Q?Hk..q..,@66T\|=h.\.t...nqr]KR...[.....`.....`..)50EdX!,&.!.0#'>+/2I?%..w..X.v?[MM.WG{ODxL8SE`.{Uzk....RxMMna=e.Z.._..^.....:C~d<\yIo\|_j.s..W.....\|....q.....e.................jv...p.w......JW.8..S..o'..0..7..E.R42.>..L..L..]&...\|..M..W..d/.R..QM....l?.Q.............BL.GS..............V.aI..D@"...ng......YUrHE.e_.\|s.w.~u.}t.um.xoc?<.zq.....}....z.\|t....}.h_.zq..w2/...UQ+gb4..?....vxs>..J..n.u..]...Q..K..S..............j.os.X[..n...HU....................b..e..d.fj..P....d.T..R..Q....jn..S.^b.>*.ae.uz.E/.D-...J....tRNS............U....$5.Dl......Q.t.0..Ym....................................................................P.......................................................................

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 525 x 173, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13772
Entropy (8bit):	7.960303523366703
Encrypted:	false
SSDEEP:	384:ZFL3qqxCaUb8pZvLo45k1wlW6P9fKqwYpCHDO0iXc:XL3rCnuv3kOE66J7iXc
MD5:	8F5FC5C065F508CF95E46DE371A93D7F
SHA1:	BD74FF53EFC5D8CA678460A2EECD4CB0061E52C6
SHA-256:	BAD7A5F489F3A3223822B5C22001FFF419B6B52903736EAD38BF3FEB0D6ED460
SHA-512:	B913B9187A4640F12725530DDD02AF29EED0104C8C8651D0CC417A92D155337EC48A4974D2E793F232D382607F2CE250C94B81D71B60113EA2B8C1D7DF93E4D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............3.LS....pHYs...............5~IDATx..=n.8............(SD/.^....^...{.vxB...Kp.'s/.Q.Y....N:7`..._.......y...E...b...f..+....=.[.+.O....h..A..IB..3..qO..q.'..t.B..Z.x.nx.g.... ../d,.B.A...@....U`/..8.LQuu...Z......aw.R..0.2n...i6...V...m..~.......A.v]!0P....v..v.Y.......<. .8..\.+...Wzf.G./.....x.............r.........0....Un.....>r.(........Z.WnC.p..&.K..7...e..'............p..[h...d.....oU]m.g.B:....<.5.].48.!l._.nM.....;^...5r...G.?\|.z. ....p......6..\.H.#d4.....+..;g..........L.?..p...v&../.`.....C../.....2./b4..zSu....\&...02.......B....}.`....].}.........6,..4UW...>.-......K..d.......Q.71..."H.+..i...B%...~....c4.<.fPMZ...?;W....#...>.%.. ....4.fK....a1.Ah.2..j..;..0u..8.$..q....H..%a.1.<$..0+8.a..`.H.u4.)..q...,".i..xZ.t..5..B..A....;....q....^...`..Im......p........yP...0...A..ZA.......c.3..f.R..;H....S....ag.....p..A..E._.J...h.g......=..~.s@...g.B......Mp.. ...nF.......C\B6...L..Q.A;..#f._......'.zKg...l.4.Mi.#..)...

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	106028
Entropy (8bit):	5.234013803815825
Encrypted:	false
SSDEEP:	1536:9tO3uQXi41oPkvBVacTFMXCB4zwgi8x4XTerYybZ1RGx7JOn:bbQJgkvBpYo04jlA
MD5:	F57F5BBCB09D115F917B0EFAD0E910FA
SHA1:	44E8934F5EC1C8C339FBA195D89821B7F7D73987
SHA-256:	E5041A945EA3027586F51DDC29656F933C80A1E976BFAE9F6FD80687A55E318F
SHA-512:	6B82E8584C4A4E1C1F527CBFDFFB93A703DD7B19AF0F012547690BFCDFF7AA3ABAF66D35BBC7826CD364F0525F878FB52297A6458E98A1922AD826C1CF217016
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,u=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},s=!1;function c(t){s=t}function f(t){return function(){return l(t,this,arguments)}}function l(t,e,n){try{return t.apply(e,n)}catch(t){if(d(t),a)try{a(t)}catch(t){d(t)}}}function d(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];s&&i.error.apply(i,u(["[MONITOR]"],t,!1))}function v(t,e){return-1!==t.indexOf(e)}function p(t){if(Array.from)r

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	326856
Entropy (8bit):	5.507411627674058
Encrypted:	false
SSDEEP:	3072:0EvNv1mNYCSJR0YvoTxvht+Nz1t0x/hgabGpLsev6nsxuqrr5rBH4wWX2QDt:Ls870JrCNvms1Djzw
MD5:	43A224CE59E07EAD9CBB9A19231868D2
SHA1:	65384F5F2481FFF915363784C4BD0AEB9433EEDE
SHA-256:	2C442627A101ED151E72DA8F11443FDEDBBCC34AA1A853BDED8DD5858B230F80
SHA-512:	876F7FDC42003377FAC10433F134EA26D981CC8F0E5160371AA446B08EB2C7BD47DD24248F7FDE44CBBF2BC4EDAC724F3439D0A9E6E0CFBA75823FD276D62A69
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/e893f787.529ff2dd2d297b89.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r(1579),i.encoders=r(8649)},8620:function(t,e,r){var i=r(8996),n=r(1140);function a(t,e){this.name=t,this.body=e,this.decoders={},this.encoders={}}e.define=function(t,e){return new a(t,e)},a.prototype._createNamed=function(t){var e;try{e=r(6144).runInThisContext("(function "+this.name+"(entity) {\n this._initNamed(entity);\n})")}catch(t){e=function(t){this._initNamed(t)}}return n(e,t),e.prototype._initNamed=function(e){t.call(this,e)},new e(this)},a.prototype._getDecoder=function(t){return t=t\|\|"der",this.decoders.hasOwnProperty(t)\|\|(this.decoders[t]=this._createNamed(i.decoders[t])),this.decoders[t]},a.prototype.decode=function(t,e,r){return this._getDecoder(e).decode(t,r)},a.prototype._getEncoder=function(t){return t=t\|\|"der",this.en

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	360749
Entropy (8bit):	5.137525683557942
Encrypted:	false
SSDEEP:	1536:24m9Rg7Ft/EkwDW20BFYwTsFhYo2vLBIIDy0hZtapLAMwLsKBQq8QQi9O1iJD5Wb:+RE/wuFYvhYoY2WQi9O1iJD5WvX3jjUi
MD5:	92A4B56120B62DF1365864C3710C27BD
SHA1:	AA66D2395C27E7340B76F093FEE551E0646C237D
SHA-256:	E091DDC94C094FF12C06E7EFA469A61D944246E0A4E0383E822057175AEC1A7F
SHA-512:	14FDBAEF15E005331BB96D47490090648EE9B523614F1A26A7C20E57A62F73B81DE3BBCCF0178F03A71F0CB03DEFF7B026B20BD15B332DF4A0F516075190B829
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7eebedc3bb83273f.css
Preview:	@font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5abb93.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:500;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Medium.cab39769.woff) format("woff")}@font-face{font-family:Actief Grotesque;font-weight:900;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Bold.10832e10.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Bold.7ded28bd.woff) format("woff")}@font-face{font-family:GT Super WT;font-weight:400;font-style:normal;font-display:swap;src:local("GT Super WT"),url(/_next/static/media/GTSuperWT-Regular.d1473b9e.woff2

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25404)
Category:	downloaded
Size (bytes):	58921
Entropy (8bit):	5.256475194244875
Encrypted:	false
SSDEEP:	768:8ZUIkY9W8nMMxOKpCK7NiQI2tTOPFt0PHF4bQi65salOPCbYlxN6s13bdLlIBf1m:8ZWWW8MMxOBSN+FeWbQisvoAYlP3nM5a
MD5:	4B9ABB36767431F05495228EB82EDF01
SHA1:	CFE3AFC5D23EAF2F9DB85EFEAB696F57DB948658
SHA-256:	262F87D47643975A4633B675FC224C7A178D99E579E5D767F4A43CA7CC0BB9DE
SHA-512:	3257741AAFA0D0FC4C99185A3B55FACDF5E5F25B7D61DCBB9C0365E41D074E462837731F747725F493B3D2039D068B8D31AB8D7E09DBE18A69B16A94A65EBE3F
Malicious:	false
Reputation:	low
URL:	https://cdn.treasuredata.com/sdk/3.0/td.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=32)}([function(t,e,n){t.exports={forEach:n(35),isNumber:n(44),isObject:n(1),isString:n(8),isA

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/globe.1603f8a7.svg
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A48.104%2B02%3A00&epn.hit_timestamp_unix=1713925128104&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925125026-87-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-87-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1855&tfd=4793&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530), with no line terminators
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	5.401427845765136
Encrypted:	false
SSDEEP:	12:fbjqcUUlxAU7vrf6LPdqIyd6t9JYQEnc2hcDQsm5RX3+e:fbjnplxAU7vryLPdqIy+YIMNsaXOe
MD5:	EFC7D0DDD2FA9D9FC1C6637354E0E698
SHA1:	4E1424DD41F9AEC14F1C6F314872091D76ADA359
SHA-256:	B9EBCFF4A4470EB88AA94CD1DC9CD56873768D945E367CCE16AC8A9822F94791
SHA-512:	3E9A00B3B74DBD84B79EFBBDBAB70FCEDEA04B7DA4B83C66F10D408E5542A98DD3B210A796FEBD4C905B5A8F7F132672129F4206DE6774E65B2AD39C76A78126
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/pricing-43f9c565fe91f700.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var r=u(52322),e=u(19552),i=u(53145),_=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(i.Z,{title:n.pageTitle}),(0,r.jsx)(e.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=19164,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181528
Entropy (8bit):	5.256138856765788
Encrypted:	false
SSDEEP:	3072:B48AcQ9ZKjn3y4ASpGLAF0armAMD0OhUyti:BZAcQ9ZKjvASpGXOmAMYOjti
MD5:	30C77F1C465FFEBC4A34178E9E87E6B9
SHA1:	B763FA6E1CB1609EBF91E4FFDF610C89A1EA887E
SHA-256:	96C050F7520ACD3816919BC2E82F19BC0B9161C97C2C128EEEB522D8E1F10C96
SHA-512:	B77DE6B85ADB6561D97D656979A508DAFEB57E7019D0B07688F95F6E41EB4DE6F6034097B979AE47DC69AEFECFC59FE56E761FEFF7697D65432AD4CFD51F4FDD
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/6960-33ffbda0e04efb32.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];Object.prototype.hasOwnProperty.call(r,t)\|\|(t=r.log),o[t].apply(o,e)};function i(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(i){o.error(e,i)}}}o.debug=console.debug.bind(console),o.log=console.log.bind(console),o.info=console.info.bind(console),o.warn=console.warn.bind(console),o.error=console.error.bind(console);var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,o=0,i=e.length;o<i;o++)!r&&o in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,o)),r[o]=e[o]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return f(t,this,arguments)}}function f(t,e,n){try{return t.apply(e,n)}catch(o){if(

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1837, components 3
Category:	downloaded
Size (bytes):	307426
Entropy (8bit):	7.977800402025947
Encrypted:	false
SSDEEP:	6144:IEcFog9gbg3m+DfpGg7xdLkgP6LBp/oQU4sSQDXvgSdShvBHgR3d2:jcFoLb+NrxJpPEp/9U4sSQDXvXU5VgP2
MD5:	1CFF9093BA7619F76854B2D4F71C01DC
SHA1:	60691147656B3931F42489803F8AAE93B684A413
SHA-256:	D38C8D581CB9B008773AF9DFE7072DA23247DB8B66B682C48A2AC440394CCD16
SHA-512:	418640B538FDD3036835B275CE58AE1C31EBF0DD14D93AFC5B1F5EFBB9CCD37640431A2541576AA1072FE81C870237FDC81F8E4E668536CDB5447A7402023BA2
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img1.cedc71cac222019d305e.jpg
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......-....".....................................................8#.W5..G,`..8.bW...+..J..Ej.(".........8. .4..PE... ...E.P....\.s\.s\.\.". 4.T.......AG5..5.....9............k.....p...Q.h..4Dp. ...T.h8.h..]..h ..@.E...@P...=..TQ@...P..F...h.....E...... .... .(....E.......A...Ph. 5.\..\5.\........5.......#\4s..h.T......\..................(......P... ....p.....s\..........EEA@.....h...@@@....#A...k... 0T.DT.APQ..]......APTP......@AA..TT...Q...T.h..(.....A......@@... ...Q....@.7.8h.5.@.T.D.Q...TP..P..EA......T..j( .(.4....4.... ....5......(...t....5....@...PP..TEQ.TP.1Q^.AP.@.P.......A..............A....A."........... (.....(...".(...h.... .@.....5......D....4.PA...4.@....Q..N..h .sA.DT...Q..T..T.P..TP..P.@.T.QV0.P............sDF.....@ED... (..j(9.......k......*... (..............@EDP........4................

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNY,pingTime:-10,time:4545,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1713925135237%7C%7Cde86bd9db1f497ec38edd91c2baa2a56%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C4cb7186908e680e6db746fddf8679a7e%7C%7C8bbca06e0e1b671af6eef268eb3ab302%7C%7C8a238fd2d8c80cbf7f58273074fb06d1%7C%7C136f9c12087b100fb754616b3bd49015%7C%7C2bdebd58842d2d570efc06acb249967a%7C%7C1663701684%7D"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	137498
Entropy (8bit):	5.315086070700865
Encrypted:	false
SSDEEP:	1536:0JYKyCVB5V3V55gfNqmNu7ysayEXSVLNaWn2SluTL:0tHxmszEXSVPUTL
MD5:	84A46D0B6196FFA368647E975120E17B
SHA1:	9D241624EDB0C49A2327D6637B992C8EBA216C85
SHA-256:	741BE7BD899205EB5E3DEF9266A640BF0A797361F9B5F54320087CDC17514AB8
SHA-512:	A5476116F64EF647C66655806F03DCF139548E8BA691BECB62E9CA7188DD644B804B2582F0AF78B2175804EE3AD76695764A54C1E4E10C6F40139DF52D3D3626
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/1627.f2cf297cefb46766.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeError;if("function"!=typeof r)throw new TypeError;for(var o=[],i=0;i<t.length;i++)if(e.call(t,i)){var a=t[i];r.call(n,a,i,t)&&o.push(a)}return o};var e=Object.prototype.hasOwnProperty},468:function(t,e,r){"use strict";function o(t){return o="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"===typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}var i,a,c=r(977).codes,u=c.ERR_AMBIGUOUS_ARGUMENT,s=c.ERR_INVALID_ARG_TYPE,f=c.ERR_INVALID_ARG_VALUE,l=c.ERR_INVALID_RETURN_VALUE,p=c.ERR_MISSING_ARGS,y=r(971),d=r(467).inspect,h=r(467).types,g=h.isPromise,b=h.isRegExp,v=Object.assign?Object.assign:r(203).assign,m=Object.is?Object.is:r(113);new Ma

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	41566
Entropy (8bit):	2.306414372045211
Encrypted:	false
SSDEEP:	96:pnvhextGn8hK7mxOBsOqHJt46FWJisw0msSieZQckSpyt:pnZHKzxOeOqf46FWuASjQcA
MD5:	692E1C7339C359B6412F059C9C9A0474
SHA1:	E7C1A53DCA16B7664880E5B8A92524CF9A47FB62
SHA-256:	D12161435ACE47C6883360E08466508593325F134C1852B1D0E6E75D5F76ADDA
SHA-512:	115B958093186BF5F98BECED2BDE91775121083B1E73F720372D793A23EBC7CF130CC4C6196F5F0D725A809FD63997666AE1DE36CF070DCB6B6D2178C6796894
Malicious:	false
Reputation:	low
Preview:	............ .(...V......... .h...~... .... .(.......00.... .(-...%..@@.... .(P..6R..(....... ..... ............................................................................................................................................................................................................................................................................................................................................"...................k.......=.......R.......P...........K...................9...................+...................4...........................-...............................................P...3...........r...............................\...........................X....................................................................................................... ...........................d...............................T.......+..............................................................................................................................

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2878
Entropy (8bit):	4.243447799285671
Encrypted:	false
SSDEEP:	48:0gthO2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+zr:zYZnH/l8NhHJ0M2J7dCEr
MD5:	8F319AEECA6AB1F7E8C48CB285341202
SHA1:	793DECF22449549EEADB9D00B54EC96AEC9AAF0A
SHA-256:	BFCE0ACDBAD9CD1F883DB1FA4094A9EF4CCC6E62A9C48D7465827373368F138A
SHA-512:	0E7D00540B7E7715BA83A0735B0075A3983A37368466B1089C0C928BB4658DFF1CC9E28F3BAAFBD45DFD917500BB3E782179BD93AE9CB44599457411DD654BBC
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/newfold/2311/intro2/1_D8nrHQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48817), with no line terminators
Category:	downloaded
Size (bytes):	48826
Entropy (8bit):	5.290289546829455
Encrypted:	false
SSDEEP:	768:yI7JbL+eqHu1Nn5xy2hBUgFxeCoqbShbXdJQmHRIcf4I/rv2cYQOhtjF:5KeqHA5VUgFxeCauWxFYQq
MD5:	024EF35A6C8FFD7FA2987624414E2122
SHA1:	5FE95DEF82242280EDC46EF70D2EAD172C1B9D39
SHA-256:	A4ECD2025F93286309B97A82D286749FF75F58ED473D477452B27CB372157066
SHA-512:	E5730AA9704EC61962F41016A2E458628D8A636A56DE21C31F6B260B757866868AB85FC7EBFBDAC0FD2B414AAAB6457F64556122F7401B6994B644750F5AE1C5
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/bundle.5014c6212ea5a9061cdb.js
Preview:	!function(){var t,e,n={4339:function(t){t.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},4312:function(t,e,n){"use strict";n.r(e),n.d(e,{changeRotation:function(){return E},clickOut:function(){return A},enterFullscreen:function(){return l},exitFullscreen:function(){return p},forceRotation:function(){return k},hideCloseButton:function(){return v},hideUI:function(){return $},initialize:function(){return u},onBlur:function(){return w},onEnterFullscreen:function(){return m},onExitFullscreen:function(){return y},onFocus:function(){return b},onSafeAreaUpdate:function(){return x},onStateUpdate:function(){return N},openPanel:function(){return P},pauseTimer:function(){return O},resetTimer:function(){return C},resumeTimer:function(){return T},sendAction:function(){return _},sendError:function(){return j},sendTiming:function(){return F},sendTrackingEvent:function(){return I},sendTrackingVAST:function(){return D},setCloseButtonColor:function(){return g},setStatusB

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31554), with no line terminators
Category:	downloaded
Size (bytes):	31554
Entropy (8bit):	5.3137056116895405
Encrypted:	false
SSDEEP:	384:eLY909am6eTnSE73zhW4X86I+4TesAOSEqiQtO3pJ5kGthylQSm9cThgsS1yNAzO:oMMjk4X8x+geFOSEqCrOZAEuyz01wHp
MD5:	A5E9E0BD25747C28AF2C8919506692FF
SHA1:	070899FA44E808C97613DEF2DB7E221190F15D01
SHA-256:	A47C47A549C7BBD0E0575A8E5B63FB34EA953CFD878EF25AA14E3A6557BE710D
SHA-512:	3FA7EC8C68A5C9A38EE2A108985337FEB538B61C12C2670BBE986714FF6CEC9807F9C65525A1AB8B6285E501E2107485BB16AD11B9DCB4C749CE4C92BC071106
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css
Preview:	.panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48px}}.panel__topbar.showBackground{border-bottom:none}.panel__topbar.showBackground,.pricing-page__background{background-image:url(/_next/static/media/PricingBackground.74fe38a7.svg);background-size:cover}.pricing-page__background{position:absolute;top:0;right:0;bottom:0;left:0;background-position:0 -60px;background-repeat:no-repeat;z-index:-1}.pricing-page+footer.footer{max-width:1440px;padding-left:24px;padding-right:24px}@media(min-width:768px){.pricing-page+footer.footer{margin:0 auto}}@media(min-width:1200px){.pricing-page+footer.footer{padding-left:48px;padding-right:48px}}.Collapsible{color:#333;outline:none}.Collapsible__header{display:flex;justify-content:space-between;align-items:center;cursor:pointer}.Collapsible__header-text

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDmuhUhnRUorH8lURh0lc9SToQ0m%2FU5FAX%2Bpv4UI%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47828, version 1.0
Category:	downloaded
Size (bytes):	47828
Entropy (8bit):	7.995688471432011
Encrypted:	true
SSDEEP:	768:K2F5oo/7NusRbJk5zsCr2RyHXUKa0ue60GqQzTlxU0uaa3yQfe9uryjBvKaoon3o:lJ/7Da5N2RkboeBiUYiJyjBKTon37Ru
MD5:	6DBAB1C1C6F168DB27CBE727E3AD7FE8
SHA1:	E943DE16537A3FB2BDF66E204EE35DEF9D0ED817
SHA-256:	C63EDA1F9ED0DF863719C3F5E229BFC00557354CD4A0CA9C61C57EC50AE97D71
SHA-512:	0B0128954C4C08CCB423544784ED0DCF3D529647FE4ABBADA963D03836B3A4612F88543B4281991ABFA22A2C8DA4C0D25F07F1C2C389B6981191732E57401483
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/FaktPro-Normal.b13a72e7c98c850685bd.woff2
Preview:	wOF2..............S....k........................?FFTM..0...^....`..&...s.....D.......6.$.... ..p..r...[."...q.e.&>...6..2u...{A.c;.Z:.&..........1nG8..;z........J....=...^...D}.o..1.#..H9.JuU.&.ZW.Z..g..2.......n..T8.q..W.Saq..r.{s...8_.Y....e.o.......b .M...F..F.>....).b......F....L.bW....E.}.....X..1.....F...H......7.....b.:...C.... .s....x]/..#.%{.O.].p"O..#.;.q\|.].d....&......-..Z.L-~.....A.0...Ol...7..";..Z.Z...6.y~#.?.T.D...3d..Z..ad...3..\y.q..w...{......7....O.>3........+.d..9L..S.{.&...8.!.J.L.S...`..N...f.B...^$^HL...e.lo...D%."..v....^8.. ....a....#i...m.\|....1A%j..(.....(C.wt.J.....Pbh..b.#.x".~.?...sg.....,U.X.J..N.....C.n......< .."RE....%a&...Z......6..s......F.K.r ....c....9...J)_&.!.KD4..t.."I}.....C.A6.q......{......{..q..@......a.iy.u~5.,,--..#5.~..V......f.@5....W.YL.`)..[.A.Q..7..~...Nl.N....Z..c.>}.).X.UZ.h...1.F...T.jA.&QA.Z..S.C<e...{...9.:.........0...8%..v..9.\.x.!U[-8..Z&S*v.\|....G.+.H..nD...{..D....$......)..=

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1852, components 3
Category:	downloaded
Size (bytes):	493345
Entropy (8bit):	7.985283284731353
Encrypted:	false
SSDEEP:	12288:r4BoF+bCtjoPPiZg3AI3pzdStNB3xuIYRaAQ2hUmx:rrF+2tjU6mZhcqxNaS
MD5:	F6B0ABD028338F6A7ECCDA3AFF7B6E94
SHA1:	3BAEF65AD373BE6D2E7785C734AFE3921FA6CF25
SHA-256:	22D0C3781CB32AC38AB3E9B6F222EC3D56C994318B985E1BBD0770EA7E69A586
SHA-512:	3BAFD275FB42F5FB2B89328106A1EDA7672B1C0CFF6B3509F0A2D083BFDFC29607F010487948A3C2C9E1A92CD581E79F62B2E345B22C89E8204A85A3EE3CDE00
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img2.35539ce3dc0fcc71a276.jpg
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......<...."................................................pG.\N.,...A.,c,_...m}..0...b.1x.).5.k.j._I.....Yq...:....l..r.x..<.... .z...W.}d.\f.......+kuE.....n..k......N..C.~..I..4...Y..7....s.`.V@.z=Y.......?....\|....-.Yt..y.cT.FpD..}$.=E..V.iP.y..P...Sm..]..n.C..e..b.i....^.i..#7a.m..[.m\|\|..Rt. .d...5..4...5.......m..>..}..C..#....7..v..u.m7....hp..9$v.U..m.x........\y..m.'%.A...m........j.-.^+P...KC........O.j...7c...U...Ra".!.o.+..m..W.K...u....D.d$../d&,.....W'x.h...D..VQ.b..D.<D.y1p.T.Y.:."..=`a...XO..A......7..l.8.U.I...I..........K....t.~.8..k..%[_2..W...N...x=..`....W'QkVR..`mH.../......]....Y*tB..-...y...{C..b...[..l.PZ=..9...EH.G&;.:.dA.og........c....[Z0].5.T}..F..Y.9...i..M.t."...r..........t..)....)Iy......L..v...b.j.q&Vz.Q.#c._.+d..x$v.4...q..-..\..b..&....G.7.X"mxB....a4.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=BW6dGPFpVWyZgWqbPgfR7KKsvoP3YEJCJQ%2FHTuBQEqI%2BTo%2B2s1%2BohdhydG05dDMj0yKy2hgeOCecv%2F4GXqtp8vUpRtn4r3Torcivd7voY9HaJ4WOPlN0a7NqEjAbp2Xrwh2AUrHiwFFhpcNnrCQoDUZNPbNBQp%2F14Pua4RtdVd66goSLK3qSgrjm8H0BD67UayI%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48741), with no line terminators
Category:	downloaded
Size (bytes):	48743
Entropy (8bit):	5.189547988295321
Encrypted:	false
SSDEEP:	768:fMyiaqxb1ZN5wG0HvPRvzK7jV0z42NcCo:UD7Dw7zSCo
MD5:	F30A94DA42198BFD524696AD25D167CA
SHA1:	EF472859703280BC7801D25A82BA82A24937ED01
SHA-256:	0F9310871E672B3F79C80D21F6C85D345F21B0AF2C8EB41D044444B34C1B2B95
SHA-512:	1660FEDD13949FC377A191DD1BA84588B08F963FE2970C7E479D61CB96EEBBDE3B595D99C1B10897342A3648F297A3DF61B57C613B4ED28F964F11AE59DF8C07
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US
Preview:	"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function(){return c&&c.isInitiated},e.prototype.hasConsent=function(){return!0},e.prototype.addEventListener=function(e){"ready"===e.event&&this.isReady()?e.handler({api:this}):m.on(e)},e.prototype.triggerSurvey=function(o){var a,n=this,s=!1;void 0!==(null==o?void 0:o.timeout)&&0<o.timeout&&(a=setTimeout(function(){d(!(s=!(b=!1))),m.emit("survey_loaded",{available:!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dtName},e=!1,t=[];if("none"!==f.storage&&y){var r=y.state(),i=0,c=0;for(var v in r)if(r.hasOwnProperty(v)){var l=r[v];if(!0!==u.isTest&&

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	4.606544918787549
Encrypted:	false
SSDEEP:	24:2VB6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHQ1:3bwMlGbFWLT9f0W2dZNw1
MD5:	7D53C302929B29B84DDF7B7B4F916E47
SHA1:	EA2CE4181E88C60688511A4FC824D756110305A2
SHA-256:	39A6FB319CFAEDD656DC1DD9E9EB41E9B6BA564E9654934F4543447178BF307F
SHA-512:	05AD009350224AD184F9769314B0E6F5EE24D5656A772BDC5A144CCD9D6C0B8B3F06C9D19031E0307D8F341336F476BFFD9260FD5C0A15942CB9B98AFFFF82C3
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/56335302.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.insightsuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.webinsights('set', '_uetmid', m);.. w.webinsights('metadat

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27984, version 1.0
Category:	downloaded
Size (bytes):	27984
Entropy (8bit):	7.9917050547850605
Encrypted:	true
SSDEEP:	768:LHRy3jX6kwUDehXOjqYEYcxOLzgP7sKm4E:9ImXUDeheeiMOfYVE
MD5:	0E2EE02874D250D7602AE70E15E174C6
SHA1:	E1AE348778A4318680B6C7FF26AE216C348F0BB3
SHA-256:	AE3F0597EF34719D83D8153EC6A734D18C28098264F903424112BE85354E78CB
SHA-512:	469CA42C8C9DA54E161B7A826EF48240762AD42E94060458BF8D6F73F618956BF0FFDEA875C03E2FADEEA72493ADE9BAB32B70DECFC4754F066FD9AA93E02DE5
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2
Preview:	wOF2......mP.......(..l.........................?FFTM...4..8..p.`..n..r..W...........&..6.$..H. ..\..~..}.E.gpn:~.Q..."s...4<.6..NJ.!a.......O.^.....%.8,.Y.k....\.<.......i......L...Ek...D....{..\8Nt.]t.I>k6.\|g.. 3.....I..T.H8wz:.......Q..gs9;dS.PF...7m!;.d.. .m............D........a_.$......R.[..."Ks..\f....R_.@.W....nD...A..f../.5.....z.~.&..>t<....h.....Q.AL..p.2.....z$.Br..d..C..........<..?...`...(b.b4`.(.+...c.).....^e...../...X..?..=...^tX.Mpm....^...E4V.Y=p......P.Qo....M.....i....+....3[>.r..'.v.iQQQQQQQQ7..M.K...d5.:N...i.'...RJ3...E.y...;Tu.(..@...v....l.F{...O.m8.....1......0M.Z'._..kta.J$......+G..r.."...!d.j...+....Q('.P(3...../..{.=..E..PU.7...,.<gt.,.t6.]C.0..@.r.^ .c.....f... ..h:+.bI...6&Mr..E+4.8^.X.+..7...8&k..o..3.f...T....M~...w.....R..IC9...P..u..e...#<...0Y-Of..lJ.V.eo...."..{.4.G.=F).X!.4n...".Br..Pk.:.q. ....op....Y..5.....`...Ym*..'m>..=j.n..2.....]vB.V....7j3kf...N..^.(....F............[w9..-x.d..............].[.{}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925075022&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34592)
Category:	downloaded
Size (bytes):	35730
Entropy (8bit):	5.226602105438823
Encrypted:	false
SSDEEP:	384:C1NpkslDFLmy+/XFsjIPd3w1jr21lKJCngCZyzI56ul6OY9g4+7mZ9kvnTLvPfUz:aLk6q/2jCBlLW+HsESrp
MD5:	40097CDF413C1F1F303C66489742CB44
SHA1:	210051D7B3A5F9E2BB2400793350C0C9C0F9467D
SHA-256:	D19B7AF86A35DFDA3A91657FB0F532541AD1BF34B75C68BB9992A374CD5FD5F2
SHA-512:	9C551182ECAA04E85FD566A2BC5A9B7F16D9993940A0AB0617740EBFFB45BD5B9EC889B70C09A2F2DAB7C5CB1275DB028D6C37E67EA942614AE0D50FB1F4B74B
Malicious:	false
Reputation:	low
URL:	https://public.profitwell.com/js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1
Preview:	!function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])})(t,r)};./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7084), with no line terminators
Category:	downloaded
Size (bytes):	7084
Entropy (8bit):	5.6439767654353
Encrypted:	false
SSDEEP:	192:HWr+DWDb3XanHnxq7tFkWTFkGtvNMlPS4SmkpDGRFlaH16RhxcJ9/q:HWr+DWDb3XanHn8FkW5kGaPS4SPp9H1w
MD5:	9BC454B78703C124880F97850F0D0384
SHA1:	22A621FEC72AC20EA2268E97442EC19B3DDBD80C
SHA-256:	C48D94B7A374E5BD4C861D57DB4474B622705F0A658EC5074895C61D13DC3757
SHA-512:	FE0C7C02C737A5717E77D1A7229338C842435A38FF6C58B5272D6D6DA5CF1B60B6204FC0B83D19B57F4E6158AD2FD41DAC88768EF6C8EC82869D0C0C8D9D1C27
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/undefined
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="referrer" content="origin"/><meta property="og:title" content="WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free"/><meta property="og:description" content="WeTransfer is the simplest way to send your files around the world"/><meta property="og:image" content="/wt-facebook.png"/><meta property="og:type" content="website"/><meta property="fb:app_id" content="265125293564341"/><title dir="ltr" data-testid="page-title">WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free</title><meta name="description" content="WeTransfer is the simplest way to send your files around the world. Share large files and photos. Transfer up to 2GB free. File sharing made easy!"/><meta name="author" content="WeTransfer"/><

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304iZYkRNrQBltj2VMI55RfnAImp4auLtWs%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28464, version 1.0
Category:	downloaded
Size (bytes):	28464
Entropy (8bit):	7.992106511690401
Encrypted:	true
SSDEEP:	768:C2FrF4DIfgszvE0Eo4/2jiTmmn+c7T5hkPWMAZhoqg6qm6Q:C2/8s7Elx/Uun+5PWM8iqgPm6Q
MD5:	FF4429FEBA146D5A8E608DB1B13CD9B2
SHA1:	D459521F7418A066C06D1FBFFD02F86101CEA571
SHA-256:	234796A01DD3B44E82E1868F1DDD7C8A2EA603C29D7DD36E97F849CB058C13DC
SHA-512:	CB13406328F7BD8C382F8A6DDEECAF6BE43922535231FA8C30CD07BED58238F160E37F924DC709F635DADD7C8BB3138ACFA2A99D38E1247AD8C3B23388CD7469
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2
Preview:	wOF2......o0......Y...n.........................?FFTM..l..H..<.`..f.....8..6.....6.$..6. ../...[..q..m.Bt'..Zm.]..6...y.J.y.e.w~p...=..&......k.l...i..\.,<..&..L..u................5.]..._OsVU..ww..{.2U.<....ye..r.X...I..\.$..t....LT..m......!:!.....Y...r...`..B...F4.").......W.u.....s..\|.2?"#..\|i-Y..4.Zl.`.n..,r.sx~n.....b.....#J...q.,.`0..Uw.....)F..X.Q\.zQ.M...YX...,%$.."....w....z....g.hlT.H.U,.4@..q.B-....pR..'...}.M.....x...$.``.hn.....c.,..X.X$.$F.&)#Z.PPL...T\|..+^1.+..S.......5....mg....gE...x..6.:U.S....X?!..5}w".....a./..%.i...K.-.V.,..)>.........y.....g....Q.I.A.Z..`.L.,Z.b2./f.u.....?.../CT..rV%v.....o..W...../@......xKO_...p.z...9.o.~&B..P.MO.gw"W(.O91..O....+....D..Xvg".\......09g#....e.E.(T.y'.l........J2.`...S..=K,qH..!..U..wqdAZ...t7...mo.K@.9....W.....g.d..`,,....T.=..]...T.PJ~]..jj.........z....E;..a....n..a{.~.A.T....!...{.....N.1a.@...SN.v...<...N[......K....dVf.R.Ig.`v.$.h.....)}...XirW.....23..*U)...YhX........._.(.y.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/assets/images/spiral.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28644, version 1.0
Category:	downloaded
Size (bytes):	28644
Entropy (8bit):	7.992787664504082
Encrypted:	true
SSDEEP:	768:lMH76XTJb9Di5l3gc3e1YnJWfIZO2p2PG07:076XVbJint3a6WIZOe2
MD5:	FBE81375A88B68A2A2D7FFC63E6A0D8D
SHA1:	5410C67EFEF252A2AEAF77C118CB184E179CDD48
SHA-256:	4C9CEA7B804803A1A27B183E485C684934480E009E0F999F64ABC6C26F14AF0C
SHA-512:	1FEC84CDAFD8CE9892B6CE72B6887B361FCEBA3BF9E677DB9E5388B08948CE50D6618AFF158F5DE504F81EA62E81E92AD2F3D6D235E13511E1AE042F370FCF16
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2
Preview:	wOF2......o........<..oy........................?FFTM...4..:..p.`..n..r..W.....T.._..&..6.$..H. ..\..~..J...7dnNx'(.......bi.......>ed ..(......'&.9,w.K..........s.K...9......P&..k.....uo0v.@...8!b[W.T+. "x....j...A..N.....}...J.....[.:d.M.t:D.B...v2.WXM...Y./.=...a.......VI.......b.....@.5}..E.[..78.dB..AA.s'.l..v<.....}.......S/.<......$.I....3pJ..x~n.....iaL...............F.............E..s..`.....2X.#...d.....c.."i`a%v.~..../.k......^....^..........f".....:..D......`..p....x5....i....R.0.._;...]..\|.[..o.S^...x.2,.v..s\|.i.]'..Q.t..e...S.Tt.6`zE..o..il...K..<..KY.lwM!..4..m.W@R@._.Z.........o.. '3.>u.e!.J..z<..........i....\|....O....PL.o......W^.N}.,..o.z...[<...D...IL.3.V#.D.<..6x..w....{........9co8..-gM..Y.I..9.....E.oq.....w`==}B.9..T3...jj.....$......$..8NNN.....W..)`....Un.R...n.p.$@FH....NY3e.)S......Z. ...v...7J....v.i.....DV.....T...f.?...J2(.w.#t9...vV......_.._..H"1.....U.@....@...2.dU.+.9...9A...x.9Tr.B........+\.....T.......

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2771
Entropy (8bit):	4.173702023065315
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyU6w:zMZnH/l8NhHJ0M2J7dCj
MD5:	3C159F837EB7CE6E98732EEC5788A7C7
SHA1:	FB0F0B88D086189E4B20BCA6B649D439AE52BC4A
SHA-256:	133C717D331B613C9C6ECC4E89AC1AC73A314B1C85CD2037FE360915FDABC70A
SHA-512:	FF8896B693E5E1A06E710C3567CDEE0B974D7142253CC192615F484C3DD8F94A2674088029C4BDF30C5AA15E74A2FD110D6F1282F37B220DFDA2AFCD2ED4F028
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17274), with no line terminators
Category:	downloaded
Size (bytes):	17274
Entropy (8bit):	5.523574327087312
Encrypted:	false
SSDEEP:	384:iJvPnYxIh54XHw2WDTaEWgG0frqJY+qt02XhOwuG7+B6:iJvPYxCYogEOJctlXhOwuG7+B6
MD5:	227DCD2826F29B0374C5CDA69996B745
SHA1:	40E979435BFF146FE9B50B1B8949A224E71DCF95
SHA-256:	27C216F4A43D47B8BC0B446D13B1FCFC6A93D728FCFCE136C65A1CAE07136662
SHA-512:	BDA6333B0FF8A83289B1BC606A9A0827F23276CD7721CE48B52C76A48A2DD7647B12AD6834F5343C001ED70735A6E405537068D9E12EC3816C62DFB245CC6B0D
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/404-d60ba40552f46991.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(72169),d=n(78967),_=n(49034),f=n.n(_),p=function(){return(0,o.jsx)("div",{className:f().AppLoader,children:(0,o.jsx)("svg",{viewBox:"0 0 33 15",className:f().Loader,role:"img",children:(0,o.jsx)("path",{fill:"#d8d8d8",fillRule:"evenodd",d:"M25.883 15c2.336 0 4.143-.62 5.2-1.75.5-.538 1.056-1.44.64-2.12-.362-.592-.974-.705-1.697-.338-.723.367-1.585.565-2.502.565-1.585 0-3.225-1.328-3.225-3.248 0-.2.165-.17.388 0 .5.422 1.53.76 2.808.76C29.86 8.87 32 7.32 32 4.833 32 2.206 29.61.2 25.91.2c-4.14 0-7.394 2.655-7.394 7.23 0 4.265 2.67 7.57 7.367 7.57zM4.497 15c.973 0 1.418-.593 1.752-1.13l1.5-2.372c.306-.48.556-.735 1-.735.446 0 .696.255 1.002.735l1.5 2.372c.335.537.78 1.13 1.753 1.13.89 0 1.334-.395 1.723-1.214.64-1.384 1.25-2.966 1.89-5.48

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090), with no line terminators
Category:	downloaded
Size (bytes):	46090
Entropy (8bit):	5.4071519094390865
Encrypted:	false
SSDEEP:	768:EyRywZgW+Zx/AFh32HXBbRW33OKdZAsI9Hmxv+23i2D+FRPTM7z2+:EYMZx/A732HXBbRWGGxv+23i2D+FRPT4
MD5:	6D2B1124D8D986D756B08F0472FAFE16
SHA1:	2F9FB43C2BC571D911BA6BA200DAD84C7176CE25
SHA-256:	73280A5585F71A966D118203D402213832F3A7FB3208638EFC2BED11183C41D0
SHA-512:	B912A8FA2C9DF3CA17CE12488413DF70DD1625375DFEB513313A1E002CFBF60BD485664FF2CBCD402B4FCA4428913F4708F642E59CD90B410C92597FAABEBF3C
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pricing.7575d8b9ff1b3b50.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google.com/store/account/subscriptions",n="https://wetransfer.zendesk.com/hc/en-us/articles/4563370515988"},29975:function(e,r,i){"use strict";i.d(r,{Z:function(){return n}});var a=i(90581),t=i(8870),n=function(){function e(){(0,a.Z)(this,e)}return e.isOn=function(){return this.currentVariant()===this.variations.on},e.isControl=function(){return this.currentVariant()===this.variations.control},e.currentVariant=function(){var e=(0,t.bB)(this.key,{value:this.variations.control}),r=e.payload,i=e.value;return this.payload=r,i},e}();n.key="us-price-change",n.variations={control:"control",on:"on"},n.payload=void 0},67568:function(e,r,i){"use strict";var a=i(86368);r.Z=a.Z},86368:function(e,r,i){"use strict";var a=i(70865),t=i(96670),n=i(2784),l=i(

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	2255
Entropy (8bit):	5.650991388558776
Encrypted:	false
SSDEEP:	48:ja8++em+/teG9puICaZem+/teG9pulAEptDWY6zG9/Jdi00noF3dR5:+8+/VltZeVlfEp+yXj55
MD5:	1E0085D2A1EF513F243AFD9128878AE1
SHA1:	FAEDC570A943DCFC87E8686462CF74BF6EE3E2AA
SHA-256:	6B8A6F10BE47E4B012931BBEFD25B4F0523B5CE924E2D383089C9BF345A24461
SHA-512:	7D02064B3E78D91E52E1647EA7DF01E34CA8B30FF10C8E16996B14D406CA7EF175E244692086E144EC19F0C73175741CE9F3EBCBB951C7A0E5D8ABC8A8CC728D
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A24.829%2B02%3A00&epn.hit_timestamp_unix=1713925104829&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925104780-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=5&tfd=1049&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (911), with no line terminators
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	5.144668855875399
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5LR:0E1JBaYcfICAK
MD5:	E434B9481E572CE66AAAF238A1F3BE93
SHA1:	D89798424A7EE87276EF5A8431E458A31FD917F9
SHA-256:	00C602D4C83975BB9D9C9133D537E5FB93104A2F5A5C11957D62538A30153B11
SHA-512:	27104F7BF2823584B50D359902838E9CE78CF82B1C2B7D712E04DFB2909D78861802094847BFA2AC32860747DC8989A12BBA47E92FA2FF39460FCA723FD21DC2
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/css/7ec742af40df2646.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	290588
Entropy (8bit):	5.3815153404099325
Encrypted:	false
SSDEEP:	6144:msI0eqLRkVcZ5vkFF9RMZLNfbcTecZLt3pzjEmKSbFp3:msI0eURkVcZ5vonRMZLNIqc1t3pHEiz3
MD5:	FE037E4B086257F693DA393E98821F6B
SHA1:	D7510703A81CAD47DB709929DE40622D81C31098
SHA-256:	459642F71F9FB00A7DEFFA492F7631F922CDC6FBD418ACD7CF89FCFFB427E78A
SHA-512:	F3C1F1E350679E75CFC9F502563F6FE3E7E9E24BD80EA4246ADDC46B86337B24C27C0B408FFAC677ECDF307B3440A33E73F028D1B8D47896A7F2968C4CA4E85B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/bundle.c2e5335b92e3c7a2b1f4.js
Preview:	/! For license information please see bundle.c2e5335b92e3c7a2b1f4.js.LICENSE.txt /.!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),r.d(t,{clickOut:function(){return c},enterFullscreen:function(){return f},exitFullscreen:function(){return p},hideCloseButton:function(){return h},initialize:function(){return a},onBlur:function(){return x},onEnterFullscreen:function(){return b},onExitFullscreen:function(){return _},onFocus:function(){return w},onSafeAreaUpdate:function(){return k},sendTrackingEvent:function(){return g},sendTrackingVAST:function(){return y},setCloseButtonColor:function(){return v},setStatusBarColor:function(){return m},showCloseButton:function(){return d},startUpgradeProcess:function(){return l}});let i={};const a=async()=>{try{const{ChildFrame:e}=await r.e(460).then(r.bind(r,6460));n=new e((e=>{let{availableListeners:t}=e;t.forEach((e=>{n.listeners[e]

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18513), with no line terminators
Category:	downloaded
Size (bytes):	18513
Entropy (8bit):	5.362349540732293
Encrypted:	false
SSDEEP:	384:gQ1XNfNr1zRGgbCI3TMsD4h9YAHbT8NsWDVYs8a/Q48MO2KzuaqS7+nKzSdZq4Qf:gQ1XNfNr1zRGHI3QsD43YW8NzDes8STc
MD5:	56B11DEE72DF8E44C1E72BFD66E237AB
SHA1:	47EAD25BFA65C2BD1E0D77C1F388B3174B514263
SHA-256:	43312930CB4FC5A30F3A9C23A047948B181ECE20BE883E817E5A737475600E54
SHA-512:	4EC983B4ECA5BB6381EB2C7169392807F40407E340B82BEE0C229184B0F68041C8F56EA4CF7E8D09064632E3F18614A9475FEBA7E97C2E0671C9537B342F62F8
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js
Preview:	(()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{clickOut:()=>j,openPanel:()=>x,rotation:()=>H,sendAction:()=>L,sendError:()=>U,sendEvent:()=>M,sendTiming:()=>F,showDropzone:()=>$,timer:()=>W,ui:()=>D,vast:()=>k});const n=e=>{if(!e)return;(new Image).setAttribute("src",e)};const r={clientTracking:{},timings:[],initFromClient(e){this.clientTracking={...e}},init({envName:e,serviceName:t,version:n,sampleRate:r,applicationId:i,clientToken:a,useCrossSiteSessionCookie:o=!1}){i&&a&&window.DD_RUM&&window.DD_RUM.init({applicationId:i,clientToken:a,site:"datadoghq.eu",service:t,env:e,version:n,sessionSampleRate:r,useCrossSiteSessionCookie:o})},trackError(e,t){return this.clientTracking.tra

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:IvOKPUe:IvNUe
MD5:	53FAB767ECBD3BF07990B10246BEFBD4
SHA1:	49044085BB137D175D261B5FB9617C6F0F302C49
SHA-256:	BDEED1E1C0751610C8F3DC2A5C78C93F841C366B36A7F7A54F5E6752C2656C05
SHA-512:	B77C74696CD64C96E177CC32890BA8B666E13578C038BE4E4E5D4AB0438CB8E2B7B3539AD4089F9AD987C1BD53926B279EF7ADD30C690DC2592C5C4239465559
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.js
Preview:	"ad placeholder";

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43188, version 0.0
Category:	downloaded
Size (bytes):	43188
Entropy (8bit):	7.98710296602658
Encrypted:	false
SSDEEP:	768:x94SBRGblSQhMXU2pewGKB6kuvBkW3fsNPSghXI+Ktehv2hMobEh5p:xhBcBoU2plBIBvODFy4hehMl5p
MD5:	55576599A2D772F9297C5036D355B1FB
SHA1:	C52E4F9A59137105DEB12A3DE25EE7D5A15FD286
SHA-256:	1E3D5D86432B9BFCDF25CE0E35FD23667CEA86F6FA71FA920CD84ABB70258F73
SHA-512:	8270B97F43FFBE59405D81A988A5C194B15DCB3159D49FF7C37560C90069F1EEF67BAB8E15C2DCCE69FB5CF51810D4D4834AF69DB6B6571BC3D0464C5D6B6514
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/GT-Super-WT-Super.3397811e.woff
Preview:	wOFF..............v.........................DSIG................GDEF.............\!.GPOS... ......4.A.d.GSUB...........^._..OS/2...p...N...`j{..cmap...........h=j.ccvt ...,...)...4.M.zfpgm...X.........6..gasp...$............glyf......s(.....fc.head.......6...6.G..hhea...8... ...$.S.Fhmtx...X.........."!loca...8........w.^maxp....... ... .>.Mname.......]...6R5..post...T.......b.))aprep............hF.x.%..A.a...p.....p.....p...L........$..5....3.)...f..d.+..R.t.m..{.\|..}6.u.hd....f.1.Xd.eV.EF..C_.1..Z..P....'.....W?L.4..C...c.......x.,..l.`............m.6....FXD./^\|.b-.b-.'_.{....x-n[.[ye};/.vV.y??..H=v.?.T....X.K.#xk....X.YyL....].[.Ai.........F0..T..nc}y...M......Epo.l<!.8..yJ..s..P.L..9a$.....I2...D.l:...$.t^^.E.....h.H.[^[.D.x..e.,...^..n9(..&V.-.rU.J.<...Z.J.. ?.......,......N.\..D.+Ke.....W..Y.w.O..cy-o._.e...6b.[....a.2333333333ch.L........?s.t.....<.=..Oyw._Y..$;y..!.._....VV.VK..DvX.........z...a7..`.b/8.Wa.g^.Q.T.5n...:..6..%..H..8.1s...2\...Z.\.9.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1337)
Category:	downloaded
Size (bytes):	5008
Entropy (8bit):	5.5929809943471085
Encrypted:	false
SSDEEP:	96:+8+/4C7Ze4CD8+/+C7Ze+CVZKaJ+T6asieMGEp5JyXRVh75:+8+48Ze4u8++8Ze+o5asiespq575
MD5:	CAF27ECCC2E87D347263CBBCCB87B96F
SHA1:	58A320FB30050545254B928281AB5B1A827EEED0
SHA-256:	A78591ECF1000381E1A135629FCE340C1D1FC95D6BB421726EFA0CDA5494E119
SHA-512:	8010707AE04A2FC90E391A9F8FAD008848876872D9622088A140C8FDA450A7A8391E511D5AEA1FEDD828196076CFCA4CD42072E3A53201913EAB666750BDEBD9
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_c

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1852, components 3
Category:	dropped
Size (bytes):	493345
Entropy (8bit):	7.985283284731353
Encrypted:	false
SSDEEP:	12288:r4BoF+bCtjoPPiZg3AI3pzdStNB3xuIYRaAQ2hUmx:rrF+2tjU6mZhcqxNaS
MD5:	F6B0ABD028338F6A7ECCDA3AFF7B6E94
SHA1:	3BAEF65AD373BE6D2E7785C734AFE3921FA6CF25
SHA-256:	22D0C3781CB32AC38AB3E9B6F222EC3D56C994318B985E1BBD0770EA7E69A586
SHA-512:	3BAFD275FB42F5FB2B89328106A1EDA7672B1C0CFF6B3509F0A2D083BFDFC29607F010487948A3C2C9E1A92CD581E79F62B2E345B22C89E8204A85A3EE3CDE00
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......<...."................................................pG.\N.,...A.,c,_...m}..0...b.1x.).5.k.j._I.....Yq...:....l..r.x..<.... .z...W.}d.\f.......+kuE.....n..k......N..C.~..I..4...Y..7....s.`.V@.z=Y.......?....\|....-.Yt..y.cT.FpD..}$.=E..V.iP.y..P...Sm..]..n.C..e..b.i....^.i..#7a.m..[.m\|\|..Rt. .d...5..4...5.......m..>..}..C..#....7..v..u.m7....hp..9$v.U..m.x........\y..m.'%.A...m........j.-.^+P...KC........O.j...7c...U...Ra".!.o.+..m..W.K...u....D.d$../d&,.....W'x.h...D..VQ.b..D.<D.y1p.T.Y.:."..=`a...XO..A......7..l.8.U.I...I..........K....t.~.8..k..%[_2..W...N...x=..`....W'QkVR..`mH.../......]....Y*tB..-...y...{C..b...[..l.PZ=..9...EH.G&;.:.dA.og........c....[Z0].5.T}..F..Y.9...i..M.t."...r..........t..)....)Iy......L..v...b.j.q&Vz.Q.#c._.+d..x$v.4...q..-..\..b..&....G.7.X"mxB....a4.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1093), with no line terminators
Category:	downloaded
Size (bytes):	1093
Entropy (8bit):	5.284718693287587
Encrypted:	false
SSDEEP:	24:fbj71xAU7bXGk3zWykpvig4YVy0+IkJIdI4NZ3ww++GewzvXGq9:fbf1xAK2k0vig4FVJ9MZAw++G19
MD5:	DAFF3EF8F54D4473D8048108FB36E699
SHA1:	DB0D57E8607F3E984CC243138741C33ACEE18D24
SHA-256:	CCB49CC4C132485304E0306F1B8B391C5810A60D0343A7288BACD09362C05118
SHA-512:	FFB6AEF1FC824743E21D8318DE0ABC3631D74D6D307E1D6677C557DC0CA58A017E6ECD5E57172C2BDB20F3507C7FA975B3D5C2F2781204ACC7F56E0C87C1E354
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/chunks/pages/_app-8d7329f2c361b0c9.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function(n){var t=n.Component,e=n.pageProps;return(0,u.jsx)(u.Fragment,{children:(0,u.jsx)(t,(0,r.Z)({},e))})}},47842:function(n,t,e){"use strict";function r(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}e.d(t,{Z:function(){return r}})},70865:function(n,t,e){"use strict";e.d(t,{Z:function(){return u}});var r=e(47842);function u(n){for(var t=1;t<arguments.length;t++){var e=null!=arguments[t]?arguments[t]:{},u=Object.keys(e);"function"===typeof Object.getOwnPropertySymbols&&(u=u.concat(Object.getOwnPropertySymbols(e).filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})))),u.forEach((function(t){(0,r.Z)(n,t,e[t])}))}return n}}},function(n){var t=function(t){ret

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925107375&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8501
Entropy (8bit):	4.258565533608946
Encrypted:	false
SSDEEP:	192:aXgJ8+t17vDSnwiP4fWaNc2uua9wi0Al9tjR1:8+Sw/fpa2vtE1
MD5:	88427786DD0EE3F573E163D406446C1A
SHA1:	FF46B0FCD219130D596F18141D664664E6462D69
SHA-256:	BE0986D4B440BED755241354BB77EFFF35F13F08C9575BC563EF7F8A47F82637
SHA-512:	C4A6334F07C9C324B6BB66250DA22358910FFBAC3380BBDEFA6F5EF712FB39CA3A51C01BD404B0075015D53EBC045376D64F4F1C01210059919DB688CB87A96F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 555.52 148.14">. <defs>. <style>. .cls-1 {. fill: #241c15;. stroke-width: 0px;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1">. <g>. <path class="cls-1" d="m105,70.01c1.08-.13,2.12-.13,3.07,0,.55-1.26.65-3.44.15-5.81-.74-3.53-1.73-5.66-3.79-5.33-2.06.33-2.14,2.89-1.4,6.41.41,1.98,1.15,3.68,1.97,4.73Z"/>. <path class="cls-1" d="m87.31,72.8c1.47.65,2.38,1.08,2.73.7.23-.23.16-.68-.19-1.25-.73-1.19-2.22-2.39-3.81-3.07-3.25-1.4-7.12-.93-10.11,1.21-.99.72-1.92,1.72-1.79,2.33.04.2.19.34.54.39.81.09,3.65-1.34,6.93-1.54,2.31-.14,4.22.58,5.7,1.23Z"/>. <path class="cls-1" d="m84.34,74.49c-1.92.3-2.98.94-3.66,1.52-.58.51-.94,1.07-.94,1.46,0,.19.08.3.15.35.09.08.19.12.32.12.43,0,1.4-.39,1.4-.39,2.67-.96,4.43-.84,6.18-.64.97.11,1.42.17,1.63-.16.06-.09.14-.3-.05-.61-.45-.73-2.39-1.96-5.03-1.65Z"/>. <path clas

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26279)
Category:	downloaded
Size (bytes):	93606
Entropy (8bit):	5.429955848388857
Encrypted:	false
SSDEEP:	768:Jyo+RL6DqK9cdmcRURCHZRaycS3HZysOJkVkONnw6yCw8zHO9ZHXB8cTcT2/Mu41:JYB6DqfjRz3wsgkCONw6yCw8zH0ZA2a1
MD5:	1F3488247C90BB5DE253D3D0CB3B7458
SHA1:	6CFD5FFD2668B160CBD61B20AC59629E8F83C1DB
SHA-256:	01CEE6A7A3F1444680B188AB84052E2B6C85966F53A718D3926135EBCC832FFD
SHA-512:	1AABDAF8778F046DB77F2549A3B74A4BE9F197786D8CE7820A8864D5DBFF1BE47A3387897665EC9272BAC5695D8539DF589AAB0BEC7F48A8F8958F4B5999E072
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/sca.17.6.2.js
Preview:	/* .json2.js.2014-02-04.Public Domain..NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..See http://www.JSON.org/js.html.This code should be minified before deployment..See http://javascript.crockford.com/jsmin.html...JavaScript MD5.https://github.com/blueimp/JavaScript-MD5.Copyright 2011, Sebastian Tschan.https://blueimp.net.Licensed under the MIT license:.http://www.opensource.org/licenses/MIT.Based on.A JavaScript implementation of the RSA Data Security, Inc. MD5 Message.Digest Algorithm, as defined in RFC 1321..Version 2.2 Copyright (C) Paul Johnston 1999 - 2009.Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet.Distributed under the BSD License.See http://pajhome.org.uk/crypt/md5 for more info....base64 encode library from http://www.webtoolkit.info/.distrubted under creative commons license 2.0:.https://creativecommons.org/licenses/by/2.0/uk/.*/..window.zyx123bldtmstp=1663701684,window["87809293129bldvrsn1663701684"]="17.6.2",window.pou987bldnm="sca",window["6789

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	841
Entropy (8bit):	4.220945307354298
Encrypted:	false
SSDEEP:	24:tZrn88FoWB/mCfN8jO2xU4XFmNi7Na7Mc:T88+exfN87hmSO
MD5:	E8FFEF2E96AF9A1E327B5CFC3D3E1C6D
SHA1:	09B18616768DF4836E7448DFF73DE93E4F868A71
SHA-256:	38209C8FB7D72A610B8354AEBF269C82A0BCB7A03EEEE94A4F64193E671DB2B1
SHA-512:	B2392230F9EE8BD0C33D03A759B2F90816BC5C64DCF153D0067BCAA021E2078D1818282A9518C2B9321C429AEFDBEBAF8EE3CC9FBB5AED8AEF67CE49FCBCCA4E
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg">. <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127.465.254.253.507-.763 1.058-1.014.55-2.326-1.565-2.665-1.692-.338-.127.93 2.115 1.185 2.495.254.38 1.268-.465 1.31-.042.044.424-.972 1.65-1.733 2.073-.762.424.254 1.904-.085 1.862-.34-.042-.72.677-.847 1.354-.126.676-.678 1.353-1.523 1.057-.847-.296-1.608-1.058-1.354-2.2.255-1.143-.634-2.412-.72-2.92-.084-.508-.633-.423-1.395-.465-.145-.008-.27-.085-.38-.193.443-3.25 3.23-5.767 6.6-5.767 2.605 0 4.86 1.506 5.957 3.69-.198.06-.426.49-.626.79zm-5.12 4.993c.594-.255.932-1.228.974-.678.042.55 0 2.158-.93 1.904-.35-.094-.635-.97-.043-1.225z" fill="#17181A" fill-rule="evenodd"/>.</svg>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516), with no line terminators
Category:	downloaded
Size (bytes):	516
Entropy (8bit):	5.412572612885734
Encrypted:	false
SSDEEP:	12:fbjMlxAU7likLPdqIOG3tgqaKYQEnc2jDoum5RXu4X+e:fbjMlxAU78kLPdqIR6qJYIsaXOe
MD5:	442C1398C605B69D6CC3349439D63049
SHA1:	E618B018BD6C0EBC5D651E69538D3B7438C52EA0
SHA-256:	E64C2B1C12738D96943899C7A0D35CCA60839DC079E8ABA7D60C9433E350EE56
SHA-512:	C0BA0F10B8C8D3CA8D2881D49E4B4DA4AD7291EFD108E7ACE1123318FE10927682A4E4C67455733E97C61EA74E02ADD74CD045DE936C66CD1DEB9CC424A82C65
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});var r=u(52322),_=u(19552),a=u(53145),c=!0;t.default=function(n){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(a.Z,{}),(0,r.jsx)(_.Z,{data:n.data})]})}}},function(n){n.O(0,[404,9774,2888,179],(function(){return t=79711,n(n.s=t);var t}));var t=n.O();_N_E=t}]);

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNn,time:4508,type:e,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4508,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2053~0%5D,as:%5B2132~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,4%5D%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5500
Entropy (8bit):	5.217919540081293
Encrypted:	false
SSDEEP:	96:D/xCiqH3FeYKOzqH3FeYKEAPqRGqetKE9FfVDebYKV2Cxa3qnrpeoKrASSFjSme9:9quah
MD5:	AFC3E4BC6A3478E7C2F0BB0B0D0CB7AF
SHA1:	A398074A9114D6AF63AEBC294A75847F21497CED
SHA-256:	4380E7DC2835765FFB8A685C7ADFDB47F8A6BD227F40FD9B61582F65BD78B9F0
SHA-512:	B2B808673BBBFBCB1C6ACD66BF2938261E41FC983F7D57D9847260563687DD6023DCF56293331000BA27B3D06D17818AD51F7BED2154A83B4F82E5F594ABA7DB
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/api/v4/nu_subscriptions/tiers?country_code=US
Preview:	{. "free": {. "package_code": "ACCOUNT_FREE_V1",. "product_display_name": "WeTransfer",. "year": {. "error": null,. "plan_id": 107,. "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZMnRoWjJWZlkyOWtaVWtpRkVGRFEwOVZUbFJmUmxKRlJWOVdNUVk2QmtWVU9neHdiR0Z1WDJsa2FYQT0iLCJleHAiOiIyMDI0LTA1LTAxVDAyOjE3OjA0Ljk3MloiLCJwdXIiOm51bGx9fQ==--2c23f746713a02482a30c48bf67523cb534feb2468f2707a5e1dea85ccb7a67b",. "available_for_upgrade": true,. "country_code": null,. "state_code": null,. "currency": "usd",. "interval": "year",. "tax_percent": null,. "coupon_code": null,. "total_cents": 0,. "subtotal": 0.0,. "discount": 0.0,. "discount_percent": null,. "tax": 0.0,. "total": 0.0,. "total_excluding_discount": 0.0,. "quantity": 1,. "total_cents_per_seat": 0,. "total_per_seat": 0.0,. "skip_payment": true. },. "month": {. "error": null,.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55219), with no line terminators
Category:	downloaded
Size (bytes):	55228
Entropy (8bit):	5.612935260424234
Encrypted:	false
SSDEEP:	768:SrIj9Gihkfw/0kaYyTjuTAz+JsxcRJCB7KCkixzQXtQa/qP9YN9Y/h+ZB+:SQVke0vTju2VzQXtQZPCNCIi
MD5:	0B78D6907A453FD3129A453F4358D908
SHA1:	B16AFED8238BC6FC862FEDCA89CFAACE8A49951F
SHA-256:	30616B01922A2635BBB025CFD3A3EA5B3ED9B5132CEEAFFFB945D6B50E3A384A
SHA-512:	844C6E00F755A140F2A1FDC94B16833935970B9579447E99BB2C28EDA8BD3F3811073F55C55AF2E50AD588C3BF50901F6B299CCED02F248CDB490055ED8F7F3E
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/bundle.ed3fd0b1c92c6af2e45d.js
Preview:	!function(){var t,e,r={4339:function(t){t.exports={title:"",platform:"desktop",variants:["eu","uk","us","ca"],tags:[],deployPathOverride:!1}},5514:function(t,e,r){"use strict";var n=r(8389),i=r(4983),o=TypeError;t.exports=function(t){if(n(t))return t;throw new o(i(t)+" is not a function")}},9330:function(t,e,r){"use strict";var n=r(8600).has;t.exports=function(t){return n(t),t}},312:function(t,e,r){"use strict";var n=r(8706).has;t.exports=function(t){return n(t),t}},1373:function(t,e,r){"use strict";var n=r(5315).has;t.exports=function(t){return n(t),t}},1461:function(t,e,r){"use strict";var n=r(8979),i=r(8584),o=r(9617).f,u=n("unscopables"),c=Array.prototype;void 0===c[u]&&o(c,u,{configurable:!0,value:i(null)}),t.exports=function(t){c[u][t]=!0}},5735:function(t,e,r){"use strict";var n=r(962),i=String,o=TypeError;t.exports=function(t){if(n(t))return t;throw new o(i(t)+" is not an object")}},1409:function(t,e,r){"use strict";var n=r(6805),i=r(2170),o=r(8742),u=function(t){return functio

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51045)
Category:	downloaded
Size (bytes):	51078
Entropy (8bit):	5.141058818793268
Encrypted:	false
SSDEEP:	1536:5ppKcuPIOik/8c1MUd9nK0TdOCnfEBjZp89r:5ppK5Jt
MD5:	CFC33ECAFE0A3D20ED59BA16C0BE3987
SHA1:	69A2A370257DA98E3A9D04D8600CB5CFAE2858B7
SHA-256:	AFD11AAE5379E2C2E70A4929FC43CF784FAD93C96474BCCEDAA953A9F99E8C54
SHA-512:	8BC134F0726F0E57BC0DC710361F5E0A042912CBBFB483C4BC8E25CAFEBB29A7A438BB1B2A4D078D083A3AD397227F61B7EBFE92AC5D6432EC8AFA7253D67159
Malicious:	false
Reputation:	low
URL:	https://cdn.lamp.avct.cloud/attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Image__Static
Preview:	(()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function r(){this.constructor=t}e(t,i),t.prototype=null===i?Object.create(i):(r.prototype=i.prototype,new r)}function i(e,t,i,r){return new(i\|\|(i=Promise))((function(n,o){function s(e){try{c(r.next(e))}catch(e){o(e)}}function a(e){try{c(r.throw(e))}catch(e){o(e)}}function c(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(s,a)}c((r=r.apply(e,t\|\|[])).next())}))}function r(e,t){var i,r,n,o,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function a(a)

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 32124, version 1.6554
Category:	downloaded
Size (bytes):	32124
Entropy (8bit):	7.98651557872162
Encrypted:	false
SSDEEP:	384:9KqyAC8A/DfD+jM4dELqNANmz6tHTp9cQkHusYuItzXpWiwhXG+l9dmUbggofHJ5:9JY8A/74miY9uQATzi8t9dmMgdU8p7j
MD5:	868AEDEEFE7669E8A4F7196F7DF5D058
SHA1:	45BD20EF2C6B717A2526EFD98A01207979B2A623
SHA-256:	D8700B022EF56752CD12FF224B3F409E84AEB8A43AC68BA052167096BAF46555
SHA-512:	45557B3F328F014FCBF09A848B2F22E66C41968B03523976F66F9381B0408461766F1B837CAAA67A26C4B707EA81EF32CF59776244D19BF0D569C63753B5C0B6
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff
Preview:	wOFF......}\|................................GDEF..m..........o.]GPOS..m4......3....5GSUB..x........8-.jQOS/2.......Z...`.5`.cmap............;.<.cvt ...d........K.1.fpgm.............0.6gasp..m.............glyf......X.....Z![.head.......6...6.qC.hhea....... ...$.8.khmtx...T.......b.8d.loca...........:#..Omaxp....... ... .q..name..k....&....E.j.post..l........ .~.Dprep...........J.-...........o._.<..........#.........I...(..............x.c`d``>.............@...$.............g...g......./.a..........x.c`ard..............B3.f.a..........,....;0(T..(0.....#.........;...\|...(1.$...t.....M.....x....%9...$.m.=.....m.m.m..n....V...AW}...9.Ob~.........Fh.+..4...h.F#.D.Y.q.eND%...S..C....Hg[....n.@&....wk.`y..Hf.?..^d.5..!a.C.B].L#..$.....QcO.NE.A}.........v...m..3...v.p..i.D........Y..~....9...1..d......?..`<~.n.mc...3..~.A......l.<.}.m.o.'...{~..3.....j.o!.xO>.>4....O...B..wJ].F.d&.=..1..'}..E:.....3.-..(..8..=.~...;A.&S..)$sI..c......t....d..~..\|....fVG..o.B.....,

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://dt.adsafeprotected.com/dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNi,time:4503,type:e,im:%7Bimprf:%7Bttecl:5421,ecd:1537,tsecr:2%7D%7D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4503,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2048~0%5D,as:%5B2127~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,0%5D%7D&br=c"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.23231667526817
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+C3:zMZnH/l8NhHJ0M2J7dCH
MD5:	16057A2D3B51238BBD5F3EEF09BF2908
SHA1:	F95AF15D2F0D970E12867B367C124E657F8E3C71
SHA-256:	35DE7FE53F23B7B4842EA3ACBA895B4B5AB7D957EFD2C3FBC0B4D7BDA4D3C182
SHA-512:	C2DFF4B6B447099067CEDF2A24FCD210173318B2F17318AC361D2231C4C98597484E81DC587E7DE9548823EF632A35FDFAB040869F20A31C1D4F5256EBF05CFE
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	63700
Entropy (8bit):	4.4176199471613975
Encrypted:	false
SSDEEP:	768:08hiu3wLz/UBJqtIF3y9pUMKBJqtIF3y9pUMd:rALL0X3+uX3+d
MD5:	78F2F1D9FC142BA241608CABDE68ACF0
SHA1:	D84C6C11F7CAA19266F862D1D0CADCD1C0DA0CC2
SHA-256:	5ED7ED1A24852486E222E7EA737DAA3DC7E006B6CF47F41825F149A262D39CB6
SHA-512:	5CDFF9A95B7FD025E07E64C3D7DCB0E3EA00DE88909C43D105D6A15400F31A8C7E459D1AB7D0BC43F17042CED2AF211917388CB5A6BA3A6F7120C11620FA28A9
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460">. <style>. .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b}. </style>. <symbol id="Spiral_New" viewBox="-374.7 -374.6 749.4 749.2">. <path class="st0" d="M262.1 219c12.7-15.3 24.1-31.7 34.1-48.9l28.6 16.4c-10.9 18.9-23.4 36.8-37.4 53.6L262.1 219z"/>. <path class="st1" d="M220.1 261.3c15.2-12.8 29.2-27 41.9-42.3l25.3 21.1c-13.9 16.8-29.3 32.3-46 46.4l-21.2-25.2z"/>. <path class="st2" d="M171.4 295.4c17.2-10 33.6-21.4 48.8-34.2l21.2 25.2c-16.7 14-34.6 26.6-53.5 37.5l-16.5-28.5z"/>. <path class="st3" d="M117.5 320.7c18.7-6.9 36.8-15.3 54-25.3l16.5 28.5c-18.9 10.9-38.7 20.2-59.1 27.7l-11.4-30.9z"/>. <path class="st0" d="M60 336.2l7.3-1.4 3.7-.7c1.2-.2 2.5-.5 3.6-.8l14.5-3.5 14.3-4.2c1.2-.3 2.4-.8 3.5-1.2l3.5-1.2 7-2.5 11.3 31-7.7 2.7-3.8 1.3c-1.3.5-2.6.9-3.9 1.3l-15.7 4.6-15.9 3.9c-1.3.3-2.6.6-4 .9l-4 .8-8 1.6-5.7-32.6z"/>. <p

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10327), with no line terminators
Category:	downloaded
Size (bytes):	10327
Entropy (8bit):	5.113381938908243
Encrypted:	false
SSDEEP:	192:4v6U5M2p7pBrfCpfqFk8GCpTmSy4OxxhkHONIR/:4v68M2p7DCJfCVmpxuONk/
MD5:	4B0B7D731B18D770C7C8E83CCBB777F8
SHA1:	964049D22CDCA011868EB2C04BC0CCB00A618B1C
SHA-256:	D9D514698510CE26A6EE97639D1E85562B24F6D2DECBCB0671C4B8BBC0D60FB8
SHA-512:	1F2884DCCE819FB86527978BBAB1658D75BC4D116E6B949A73A048D4F680399D0314E9BE5B92F24E0C4B8DB7F2ECC9C09583CFD17E45078BE4792DB71DD69197
Malicious:	false
Reputation:	low
URL:	https://prod-cdn.wetransfer.net/packs/js/wallpaper-api-v2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/packs/",n(n.s=150)}({150:function(e,t,n){"use strict";n.r(t),function(e){n.d(t,"WallpaperApi",(funct

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	222391
Entropy (8bit):	5.344142360655465
Encrypted:	false
SSDEEP:	3072:JheWRF6dGwOiq3IsnP+Opt9xUDnEDvuonj1ZQh:OWP6dCh9WEGDEDvuonj1ZQh
MD5:	6C07A28FF53ED915F74A27FE90616D61
SHA1:	56E2A7D8C58D8E747F7749AD39DF9F350890ECF2
SHA-256:	9E99390CC332463F6B8D849556EF7AF375A305B1F7A8AB91335924C3D0739052
SHA-512:	EB5DAB5890701B44C3178474E86120965A91FBCCE87E7EBD40FB8A8D8E44B680AA617E39B65C63A91E24C74E56BFFD1946E2CDA046136740AEEB342C717A0A80
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js
Preview:	(()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding:0}.creative-title{font-family:"Actief Grotesque",sans-serif;font-weight:500;bottom:14px;color:#fff;display:inline-block;font-size:0.875em;max-width:123ch;overflow:hidden;position:absolute;right:14px;text-decoration:none;text-overflow:ellipsis;text-shadow:0 1px 4px rgba(0,0,0,.5);user-select:none;white-space:nowrap;z-index:3;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;text-size-adjust:100%}@media(max-width: 30em){.creative-title{bottom:14px;font-size:0.8125em;right:14px}}@keyframes transition-creative{66%{opacity:0}100%{opacity:1}}.creative__content{opacity:0}.creative__content--exit-active{animation:transition-creative 900ms forwards}',""]);const l=i},9950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent=&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168399
Entropy (8bit):	5.548360604120223
Encrypted:	false
SSDEEP:	3072:mA95TZmETDjAjT8M+z4VrenF6xvX9fFdffS:mAPdm0HAjIIfq
MD5:	5439E51F20378DE7D73BA350C0B4B85B
SHA1:	2BFA3D60287D28A0F536FA1D020BFE52CA1395F1
SHA-256:	912D615762F03B1F694F98FF9F3E7A59D0D8F1CA3732F67BE89DF8D2E3F38ADB
SHA-512:	6C9DDD77FDF111CFAB5D6086A497334F274E20F3AF8DE2D116DED4988E57EA3DDA9FB90AA6EB7945173879ACFE1AA2C9601CA47C0F738BFB8A654E4FEC20556E
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/03a1f34a.cb7471b34076195a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.prototype.hasOwnProperty,l=e=>s(e,"__esModule",{value:!0}),f=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports),d=e=>((e,t,n)=>{if(t&&"object"==typeof t\|\|"function"==typeof t)for(let r of c(t))!g.call(e,r)&&"default"!==r&&s(e,r,{get:()=>t[r],enumerable:!(n=a(t,r))\|\|n.enumerable});return e})(l(s(null!=e?i(u(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e),h=f((e=>{!function(e){"use strict";function t(e){for(var t=0,n=Math.min(65536,e.length+1),r=new Uint16Array(n),o=[],i=0;;){var s=t<e.length;if(!s\|\|i>=n-1){var a=r.subarray(0,i);if(o.push(String.fromCharCode.apply(null,a)),!s)return o.join("");e=e.subarray(t),t=0,i=0}var c=e[t++];if(0==(128&c))r[i++]=c;else if(192==(224&

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x2048, components 3
Category:	dropped
Size (bytes):	580328
Entropy (8bit):	7.987310721475111
Encrypted:	false
SSDEEP:	12288:9WY8z8Ax7x2stWE9fwNH5bO5hd1g1tTtWvQW6IPJdSqt8nfzJISa:az8Cx2sB9fwdA9CtJQQISZfJa
MD5:	F70DFA1ADEFDDE209493A1B273BAB92D
SHA1:	A116DD677B2333101F2D32D391283A21C59FB7C5
SHA-256:	14FA49B3B26F5A562B069A59A49B503D34C2A1DC3CC025EDB80FC7ED9DD18C3C
SHA-512:	373190467F667CEA019BA637BB191D3C5C9EEADBAA7E45267BB19CF45A95AFE91FB0D93129FB6D850C8B158B4235D1A69E38F71515E5CA929CDAA7B9F53690E1
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"....................................................$..w..../+n..'mI/+j.I......r.s...I$.I$.I$.I$.V...k$..........v.....`....C...;$..''gy9;...ZN...'d..d.u..y..et..m[V.v.%.:...,.I$.cO+>..H%...z......d...{..I;.ZrI.9.s.vI...I..-[vNw..i$.I-+i%......fI$.I$.I$.I$.I$.NS.N.99)..v.okN..NR..f?5O.e.\|.d..;$...$.....y.vK.;;..$.......<.. $.g'd......l...$.I$.....4....g9;...i[N.I..I;$...s..r.....;....{9;..J.I;..5..p.SOe..I$.I$.I$.I$.I$...;-;.Y.IYn...w.Nr...~}.9........NR.w....rI9.w.Ks.Z.'/N..i~..j..z...ev..A.$..6..!.=3.I$.I$...,. 0....;'d.....y....xBS...j...;%.Y;.....$.'%o$.ge..v9..uv.7d.I$.I$.I$.I$.A.....Ns.NK[...$.V.]._8....n.nRv.E...I''d.;'$..[..d..'d.....}n...1...8...q.......MI$.I$.I9....[0u.....o.;.$.%^.."yyDh.E..$.g..{[NNvs........y.;;9..F....}]3...I$.I'$..d.I$.I.Q.....%o;9.V..d..'..?....

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4777), with no line terminators
Category:	downloaded
Size (bytes):	4777
Entropy (8bit):	5.431444827871345
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwNLMpn02MGkdtOveV1pecbt:9++2y7CpRNyfM+v6wcbt
MD5:	AB32572E3176C9FF9C0AE3577598EC88
SHA1:	16A28D0ADA2C0F856E830DF6039668939A19F9FE
SHA-256:	C77E75E9D92043C886B83F6D609CA350DF9C57BA82212BAD16B99C52EE13DF7E
SHA-512:	38AC0704EFE189556FC28CC638A2366800FD1AEE7040836D1A2956EEC2366B4A12293F2ED07A18BFF7C562E53F5D38AA3DA89DF0B960FF9234EBA65B6FAD6AF9
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=4IUXGOHqEohEx4lTXZ1VcdKVllc%2BRurvKRG3yaMU%2Fkb%2BNR6DImYGFuiQhMnDBfPA8YhH2BmqqTEjrrq5ct0bej%2Berj6WNnK1KBPMMPgcU1YtvoX1ZpIeowzLkiUSPmwvnhKtumpg610mc26mEUy4PlaRR3T2jzlwUeoJYjuUwI3PXlR7yVictO6kK3cxOhp8mIk%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	60910
Entropy (8bit):	5.344492858708231
Encrypted:	false
SSDEEP:	1536:Jd82/Pobzfha4zCDlorEF65WCQBDsGZpICEYg:82YbbFzCDh+yDYCEz
MD5:	940EF40A6F1B1FD52FF305A4B7D3895A
SHA1:	F6DBEBB738DCCFB5305BB01DC06ADB6284098564
SHA-256:	53603404415E3EB2E45CC723B33094242CFA49E78A7DBD9D0FA2884250B64053
SHA-512:	08D83F8060CC8DB24A9B7CA76B3ED7EC783F899FBC525019A24DC550DB313EC2286C01B1C72CA3D3E7968BD2C205B4E71EC3F23756C4C1243007B5C88C0E37C5
Malicious:	false
Reputation:	low
URL:	https://pixel.adsafeprotected.com/rjss/st/1566598/79010620/skeleton.js
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url += '&anId:' + config.anId \|\| '';........url += '&advEntityId:' + config.advEntityId \|\| '';........url += '&pubEntityId:' + config.pubEntityId \|\| '';........url += '&mobOrTab:' + config.mobOrTab \|\| '';..

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	dropped
Size (bytes):	2250
Entropy (8bit):	5.650444173750152
Encrypted:	false
SSDEEP:	48:ja8++ex+/teG9puICaZex+/teG9pulAEppWY6zG9/Jdi00pdkQUBK6JRaPdR5:+8+/YltZeYlfEpyyXekQwo5
MD5:	5AA3427ED6B1D58AF8AB8B674D4D26AC
SHA1:	730EC76F0964C023C56E31FC649A52F4F44B1349
SHA-256:	96915D16825E73FBD77F1D1002030C818F12316D6784FC2E2EBD9CA7C9BFFDB1
SHA-512:	9B22FE24D13CFFA743C01560112CF66779D9B57E80A4B653E102F4E35F093534D129EAFEA12BF35AAC33E480CC98EF4AD7CB45DDB81292333839B13EEE313C4C
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58253), with no line terminators
Category:	downloaded
Size (bytes):	58253
Entropy (8bit):	5.415335549957313
Encrypted:	false
SSDEEP:	1536:dN7qIHbb3fmatiEsWtNMx3VNW5hATqe3lqe:PWI7b3ftsUNMx3jOM3t
MD5:	633A43876F294113B67A16BAC7C21511
SHA1:	BF8890FBC058EC22431A37F9D4B2319F218C1E9D
SHA-256:	7F2AE99BB573FFEAE39EB900E6EF4230D1522AA22BCB23F7F7074823173A1A58
SHA-512:	C229C582369587C979CCAE141C785F8B5901C091431968DB40AB72CA34FBFA1EDB42761AC9A4ED6A1948988988FA2888A16927CC025A992F7BFFB5A1E68DF3C0
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/c1b503a2.3fbd78ae07846694.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==typeof globalThis?globalThis:"undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:{},o=function(e){try{return!!e()}catch(t){return!0}},i=!o((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),a=i,u=Function.prototype,s=u.call,c=a&&u.bind.bind(s,s),f=a?c:function(e){return function(){return s.apply(e,arguments)}},l=f,h=l({}.toString),p=l("".slice),d=function(e){return p(h(e),8,-1)},v=o,g=d,m=Object,y=f("".split),b=v((function(){return!m("z").propertyIsEnumerable(0)}))?function(e){return"String"===g(e)?y(e,""):m(e)}:m,w=function(e){return null===e\|\|void 0===e},S=w,P=TypeError,E=function(e){if(S(e))throw new P("Can't call method on "+e);return e},

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (638)
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	5.644711986614393
Encrypted:	false
SSDEEP:	48:ja8++ec+WIeG9p4CaZec+WIeG9p1AEpSvW56zG9/Jdi00LKdR5:+8+/DDuZeDDKEpSryXH5
MD5:	A573C69D46B9D73474D8B41EB3DB3ECA
SHA1:	6B32FC2924442BEB264EA04ADB0B72BD41EB83FC
SHA-256:	AFF9000B24F87CC4D574C35E0DEE8C5D801DEB1B59445D7CB50A45DB065EC8EE
SHA-512:	2D1EC32C99C580EE8CCDD2C7B28661428369E7D10E705DE4064CB436D84ABBD1877611A3136A2208D713233C165EDD0FC35210A5846C3A11EAA55B3CAF38EBCD
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1845618367;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1845618367;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (996)
Category:	dropped
Size (bytes):	2314
Entropy (8bit):	5.618879274813561
Encrypted:	false
SSDEEP:	48:ja8++e2+4QvzhiQvz/LUTeG9piQvz/LUTZCaZe2+4QvzhiQvz/LUTeG9piQvz/L5:+8+/l4HmKKmKjZel4HmKKmKgj795
MD5:	510C3FBE308E1B894B1C057F7D085D66
SHA1:	2DB54CCD27EF9E2930D4CE01D02E0F07194B1B98
SHA-256:	22FFBC7E775F1128C15C29D40F33C486376A7C1504AC256D7ACB5235149AA3CE
SHA-512:	F348F330FC6BF7B67920D9CD26A375339AC2B879469FC5FE73F93AB6B4516EFD48D4BC6156C2B42A57F9E225FA939608265BDE28CC1B00994A26368AB9FD458C
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1158372871;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05?"],"options":{"attribution_report

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	223553
Entropy (8bit):	5.406860696691629
Encrypted:	false
SSDEEP:	3072:pT/L5hCPULmoMlbyjj20a5Pk7Jc+xY58FhYUXJVZ:pMT0j20a3+TZ
MD5:	FA6DE7DCEFC3499FE291B30908E6B762
SHA1:	CF869DABF48D895CD4995CD94B764FDFFCBE9D71
SHA-256:	54CD4ED31797696A7833201FBC2E19664898975E28E425117DFA77184D787FE6
SHA-512:	8ABDAD36A3A7C8FD41C3EABD6A0CD7367849F6DC7B0777AD30AAC787A3CD7F6F18708A1568BEDB2B619787021C671CD86BB374E62716B146F6C9EF10BA3DC020
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/main.19.8.499.js
Preview:	__IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.499"]=__IASScope.__IntegralASExec["19.8.499"]\|\|{},__IASScope.__IntegralASExec["19.8.499"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({storeModelName:e,key:t,value:n,timeStamp:r}){this.logs.push({storeModelName:e,key:t,value:n,timeStamp:r})}getHistory(){return this.logs}logHistory(){}}class i{constructor({storeModelName:e}){this.storeModelName=e,this.storeModelHistory=new r}set(e,t,n={locked:!0}){try{Object.defineProperty(this,e,{value:t,writable:!n.locked,configurable:!1}),this.storeModelHistory.add({storeModelName:this.storeModelName,key:e,value:t,timeStamp:Date.now()})}catch(e){}}get(e){return this[e]}getHistory(){return this.storeModelHistory.getHistory()}logHistory(){this.storeModelHistory.logHistory()}}class o extends i{constructor(){super({storeModelName:"jsConfigRequest"}),this.contentType="",this.url="",this.verificationParameters={},this.contentType=""}buildRequ

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.edb6538d.js", last modified: Mon Apr 22 20:43:42 2024, from Unix, original size modulo 2^32 70669
Category:	downloaded
Size (bytes):	23080
Entropy (8bit):	7.991464879958175
Encrypted:	true
SSDEEP:	384:CoJAmWxXkqVzQi6rSbzPZgjJfZAWqEhHsybRQk2PasNYerN8CUUH:CoKdXkl3jJfZVprb85Nrz7H
MD5:	43CA97012B8F925B548EA31836A36CEA
SHA1:	8C043AA689A205B069C7140F240C35890B42A9D6
SHA-256:	28FBA19CFABBA70C27A66AF060EC44C83538B5A30E73C551EC95B8727F562CCF
SHA-512:	088DBA32369424366E671A8A360F0C47865B9E9787FE5CF949D8BB297A35D4A184377FEC6F587F1D3C7886DD3C65C7F525EE270822E65D7DA03445ACEC8CF285
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.edb6538d.js
Preview:	......&f..main.edb6538d.js..\.o......b%...8.,.Hw3..[[..... Pl:..Py..,7.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;9...)^.$..:<.]..M..<\|.n]....x....lw.[_g.n...s9!.u...)s..&.sA+d.^.t.0.K..\|.....p...g...e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX..}...L....=....%..k\|..w.....v...Z...b.-q.^..K.>..JQ....L.....>.;..Y.q_....$.t.O.T.`Q=........h.e..X0...5A..X.....%.......a...K..,.d.f...^.(..+.K\s-4D....2....M.)e..5...R&).)..zP...@....V.F8.b....8J....37YR..p.....v\|.i.P.r3`jN}.l.3..7.3J_.z.+X.......H...O....#R+%....~.....N~...../.}..........G..Q.{G.............;P.8..,..qv..5.W.4.`...V7Y.p..^.e.}o...XY...o...~K.8>..Pr....{..tU.1....Dw./..o(.P.DA.j.+m.....:.f#VI......Q.W...I^.@..@./YVKk.Y..T\.k)...L..Z............'..X'V...2.r......w]..%...z.....sO.p...z+...0....Z;c..WQy...b.../.K..51.j<QB.Q....2.../...Y..[D.fc.DE..J...W....=..2.`.Ev.F.c'..G.H).j%U.9..)....W...u2....<t....B....K..I...7..Rg.....Pi.W.$WK`'..........z........j.....<...F.....$X

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3034
Entropy (8bit):	5.283071395189717
Encrypted:	false
SSDEEP:	48:TtVVoBF662EPLG8DXMXVbGtLd87L6HOzw3BSMxHHOzw3BSvwHtWXM7yjHtWXMm3w:gYlKhNcENcI82w
MD5:	E8D839E4446A45008DDDB79785E8A3E5
SHA1:	C2DBD3B07779F2F36E63CDA56A3A33D64091FB22
SHA-256:	166942AFA262652520CC27F01389561FB69916D1FDC797715B80A61E09D9185B
SHA-512:	9FA1FB0531FABFBDFA34BBDB8D560B05B525C414C32773A2896B84C96D02BEF0D62B078818938B335005C05AF6B567393150869F0CCD21B1A360CF94A44047B7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/media/PricingBackground.74fe38a7.svg
Preview:	<svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2188_43155)">.<g filter="url(#filter0_f_2188_43155)">.<path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.344 524.917 143.107C456.937 185.298 352.637 199.242 207.335 199.552C62.0228 199.862 -42.293 186.358 -110.351 144.473C-171.23 107.007 -213.484 39.5985 -214.045 -102.124L-214.046 -102.507L-214.044 -103.847C-213.843 -245.562 -171.761 -313.206 -110.916 -350.97C-42.9374 -393.162 61.362 -407.106 206.663 -407.411L206.665 -407.411C351.977 -407.721 456.293 -394.217 524.351 -352.332C585.23 -314.866 627.484 -247.458 628.045 -105.735L628.046 -105.358Z" stroke="url(#paint0_linear_2188_43155)" stroke-opacity="0.2" stroke-width="115.88"/>.</g>.<g filter="url(#filter1_f_2188_43155)">.<path d="M1484.05 641.28L1484.04 642.626C1483.84 784.341 1441.76 851.982 1380.92 889.745C1312.94 931.936 1208.64 945.88 1063.34 946.19C918.023 946.5 813.707 932.996 745.649

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	179
Entropy (8bit):	5.13628962461118
Encrypted:	false
SSDEEP:	3:XzOYNRfdHhOYNRfcZqVRNqXVSJbPYfxP5DebYfNDebYfXecEPYfe2dqYfbMMYf2:XzjbdHhjbzrqFuPIxP5AINAIXD4IxAI1
MD5:	67FA077BA9AAC616309835EC3D822DBB
SHA1:	24F1263B9A442ACA1BF2A18D9378BFDD19D96D9D
SHA-256:	AEA8789655048C94CB0FD004BE64E6D5E5A9FDFB6696BCDA1FE227F0C64A24E1
SHA-512:	B64C62DA92FC1DAC420C5CBC5E2AD2A88829AF01FA6644D43BF2AF5E9DAEDF613216E8FEEDA111ED624A3E228BE1AFAAFB253E07C7292A0A113CB57B028AEAA7
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/9200.140ecd3d50fcc245.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (637)
Category:	downloaded
Size (bytes):	2240
Entropy (8bit):	5.653439450217947
Encrypted:	false
SSDEEP:	48:ja8++e3+WIeG9p4CaZe3+WIeG9p1AEptW56zG9/Jdi0054nyTsdR5:+8+/ODuZeODKEphyX55
MD5:	5C8E5C0B55D460722A135F15BB819252
SHA1:	0F5BBED2C5C97A5CAB41D5A03681CD39BB9A2884
SHA-256:	D87841C98ABDAAFA920E4AB1CB1B100488D6F2A3149B851483D2507AC1326CA2
SHA-512:	4C9DF8116F0BC62BC49DF80875D8FDF246E15FBE3B425C2E0137F1D19DED8E7EDA0C73454029AAFAD07A3051978E7B46C4828CC30537A391A7F7A9913DB9B289
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925092439&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=361605886.1713925093&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925092439&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A18%3A12.608%2B02%3A00&epn.hit_timestamp_unix=1713925092608&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925092439-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925092439-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=10&tfd=3323&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;u

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://di.rlcdn.com/api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9917), with no line terminators
Category:	downloaded
Size (bytes):	9917
Entropy (8bit):	5.0784446530941825
Encrypted:	false
SSDEEP:	192:4qz/HkJ8Y9vU9cbjzzTcxpq4xd5LDZmrC+okxGod7stpNvB:4qDkJ8Yy9cbjzzTcxpq4xdZDzkBd7stV
MD5:	5B03575B6D4E43F997E8080E4765BD87
SHA1:	1B96AD45E5A193FC9E8ED9ED5DB9AEE1D408A027
SHA-256:	BFF105625801438D901210A93D48C652B1FDF2A0F1726E031B2F10004AD9FED5
SHA-512:	879C63BA8B169B90B640F5E17215618E54F1F3D79E7F8B07BB902D9920B178B16B01DDBB052F077D2CC4EEB279DB080DC07ED12CAE10465CD5DE372E7AD689BF
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{source:"/paypal/update_payment_method"},{source:"/auth0/mfa_enrollment_callback"},{source:"/previews/:id/:security_hash/:file_id"},{source:"/unfurl/:id/:security_hash"},{source:"/unlisted/quarantined/:id/:security_hash"},{source:"/emails"},{source:"/override"},{source:"/docs/:path"},{source:"/events/:path"},{source:"/explore/:path"},{source:"/:locale([a-z]{2}-[A-Z]{2})/explore/:path"},{source:"/:locale([a-z]{2})/explore/:path"},{source:"/blog/:path"},{source:"/ideas-report/2022/:path"},{source:"/ideas-report/2021/:path"},{source:"/ideas-report/2020/:path"},{source:"/ideas-report/2019/:path"},{source:"/ideas-report/2018/:path"},{source:"/ideas-report/:path"},{source:"/emerging-creative-hubs-index-2022/:path*"},{source:"/collec

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1336)
Category:	dropped
Size (bytes):	5005
Entropy (8bit):	5.584537611737238
Encrypted:	false
SSDEEP:	96:+8+/gC7ZegCD8+/6C7Ze6CVZfaJ+T6asieMGEpNJyX615:+8+g8Zegu8+68Ze6oaasiespOm5
MD5:	0961356574296487EDCF1F3136EF5E59
SHA1:	BB458C5C5E58E123924AD354E712FA12B4AB1A63
SHA-256:	534A3BF37B5A2E358BCF69124CBEFBE80C26D18D98D4E5D79A2224F6A8563E70
SHA-512:	5AEAEE3BCB1E8AE919C2766115F4A57DF3B752C52ED13410E7FEB13C620F21553BC77BF5D0D7C86865E640587BA686ECEE000D3434DAB938B6BF3D9C1C201876
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=523130626;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=523130626;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176
Preview:	{}

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28464, version 1.0
Category:	downloaded
Size (bytes):	28464
Entropy (8bit):	7.992106511690401
Encrypted:	true
SSDEEP:	768:C2FrF4DIfgszvE0Eo4/2jiTmmn+c7T5hkPWMAZhoqg6qm6Q:C2/8s7Elx/Uun+5PWM8iqgPm6Q
MD5:	FF4429FEBA146D5A8E608DB1B13CD9B2
SHA1:	D459521F7418A066C06D1FBFFD02F86101CEA571
SHA-256:	234796A01DD3B44E82E1868F1DDD7C8A2EA603C29D7DD36E97F849CB058C13DC
SHA-512:	CB13406328F7BD8C382F8A6DDEECAF6BE43922535231FA8C30CD07BED58238F160E37F924DC709F635DADD7C8BB3138ACFA2A99D38E1247AD8C3B23388CD7469
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2
Preview:	wOF2......o0......Y...n.........................?FFTM..l..H..<.`..f.....8..6.....6.$..6. ../...[..q..m.Bt'..Zm.]..6...y.J.y.e.w~p...=..&......k.l...i..\.,<..&..L..u................5.]..._OsVU..ww..{.2U.<....ye..r.X...I..\.$..t....LT..m......!:!.....Y...r...`..B...F4.").......W.u.....s..\|.2?"#..\|i-Y..4.Zl.`.n..,r.sx~n.....b.....#J...q.,.`0..Uw.....)F..X.Q\.zQ.M...YX...,%$.."....w....z....g.hlT.H.U,.4@..q.B-....pR..'...}.M.....x...$.``.hn.....c.,..X.X$.$F.&)#Z.PPL...T\|..+^1.+..S.......5....mg....gE...x..6.:U.S....X?!..5}w".....a./..%.i...K.-.V.,..)>.........y.....g....Q.I.A.Z..`.L.,Z.b2./f.u.....?.../CT..rV%v.....o..W...../@......xKO_...p.z...9.o.~&B..P.MO.gw"W(.O91..O....+....D..Xvg".\......09g#....e.E.(T.y'.l........J2.`...S..=K,qH..!..U..wqdAZ...t7...mo.K@.9....W.....g.d..`,,....T.=..]...T.PJ~]..jj.........z....E;..a....n..a{.~.A.T....!...{.....N.1a.@...SN.v...<...N[......K....dVf.R.Ig.`v.$.h.....)}...XirW.....23..*U)...YhX........._.(.y.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2875
Entropy (8bit):	4.234858738363522
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+2:zMZnH/l8NhHJ0M2J7dCV
MD5:	B6CCAC9B551B7B9844A81399FF998226
SHA1:	8801F95565D85463055AAFBF34B80D5EAB2252BB
SHA-256:	FC521D5BA9BEB0409568782B83FA18E61E43F28B1D59DF999D884A19EB87E696
SHA-512:	2436E77698FC59D57EFA28E9879481F646148F049CC1E0C5F319504436E71F37019A40B3204C9BA9AFF6BD5C2BBF31734A0C7C296711E6BCFCB2AD02FA7E7F68
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4652), with no line terminators
Category:	downloaded
Size (bytes):	4652
Entropy (8bit):	5.203462580641697
Encrypted:	false
SSDEEP:	96:GbJ0U8jqkSfDw5g51b5CBlE7yows1Qq7HL:GbJ9ky/1FuCjw+Qq7r
MD5:	391C9D61ECC3C4B44602309F89C72C0F
SHA1:	A096BAC18D2249E4C98554DBF8B2361393CAB77F
SHA-256:	DA75B56739B991E3DEDFA13A4D761A022A3325550707B792A07B74D105B07FAB
SHA-512:	640AA10D094435A1E8DE6BBA207922052B9A6CCE8EB9C30324006B4D2A6C617A38C39C2E9791609F3056F2CDF293D20D098338A208E2C9025F04D1AD627B293C
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US
Preview:	"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(l){if(void 0===l.api){l.api=null;var n,r="unknown";l.bootstrap=function(e,t,n){void 0===n&&(n=!1);var o=function(){window._brandmetrics_initiated&&window._brandmetrics_initiated(window.brandmetrics.api),t&&t(window.brandmetrics.api)};"unknown"===r\|\|n?(r="strapping",i(e,function(e,t){var n;if(e&&!(null===(n=window.brandmetrics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function(){return!0}},o()}})):o()},l.register=function(e){o[e.id]=e.ctor,n&&n(e)},l.getModule=function(e){return o[e],o[e]},l.defaultOption

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601), with no line terminators
Category:	downloaded
Size (bytes):	1601
Entropy (8bit):	5.547222245066974
Encrypted:	false
SSDEEP:	48:oXQwJEK/mH1nwOK+YG4Xfu4JWoSoCd9ntsg8QtM:oAwJ9yjK+Y3lJub9ndz+
MD5:	C606E09C6B90B4BB085A58EF18C40AD7
SHA1:	A3FA8FF5C425F51BE24973BB61245F403C157A40
SHA-256:	03C3BEC22645FD080A1812F3B5E06D76A220551EB1581AF1EEBD5E1F89D16BC7
SHA-512:	A6B68D88F7AC7585FB8D78E29B5BE2FD4FAD5837863B52C6CDEAE98C91585EBB77C9F04A758005DDBBF3636C5F1F45511997D58E5EE21C5C5E4152533834C995
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js
Preview:	(function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLIC_AMPLITUDE_EXPERIMENTS_PROXY_DOMAIN":"experiments.wetransfer.net","NEXT_PUBLIC_SAFETY_DOMAIN":"safety.wetransfer.com","NEXT_PUBLIC_AUTH_DOMAIN":"auth.wetransfer.com","NEXT_PUBLIC_LD_CLIENT_ID":"5b82f23280914154b163996e","NEXT_PUBLIC_PROFIT_WELL_API_TOKEN":"1a33eb12b20b92f6b89c398e023e2ca1","NEXT_PUBLIC_DD_RUM_APPLICATION_ID":"8ad3b331-fdf8-4935-a93a-63500a0ac535","NEXT_PUBLIC_CUSTOM_WALLPAPER_SERVICE_URL":"https://ekstrom.wetransfer.net","NEXT_PUBLIC_PORTALS_DOMAIN":"portals.wetransfer.com","NEXT_PUBLIC_AUTH_CLIENT_ID":"dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc","NEXT_PUBLIC_SNOWPLOW_NAMESPACE":"0497","NEXT_PUBLIC_LD_ENABLE":"true","NEXT_PUBLIC_REVISION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_AUTH_AUDIENCE":"aud://transfer-api

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	327216
Entropy (8bit):	5.597886950405377
Encrypted:	false
SSDEEP:	6144:KnBB2AxJGDI0sN6CcwsN6Njxx2c9sN6Nsd6Hj7xlsd8Xj7xtJ+fIPXddO/wLDC95:wrGDI0sN6CcwsN6Njxx2c9sN6Nsd6HjE
MD5:	AAA8F2C6387138702E0BBCF502FACABD
SHA1:	7AB87AF689B9AE95A5C2F3112B6BA149DF22887D
SHA-256:	84456382157F610AD3CFE910A483C23E179EAFD769367843E98A1406C5AC71FC
SHA-512:	C06581795AB079192ED5E182B6A570DBBBA3FEC1F028580E752FCB2860F78C79B43D19D32ECBD4222FD21B0724B8C97C66A25C78049C793AE41F0D5020BBEB37
Malicious:	false
Reputation:	low
URL:	https://z.moatads.com/wetransferadzerk716769425458/moatad.js
Preview:	/Copyright (c) 2011, 2024, Oracle and/or its affiliates. All rights reserved./.try{(function(D,w){function Qb(b){if(a.b.x())return AB_SCAFFOLD.sampling.onReady(function(){qb(b)});qb(b)}function qb(b,n){a.n.a.sxaz("trackingReady",{callback:Qb});if(!a.b.x()\|\|!AB_SCAFFOLD.sampling.tagShouldNotTrack()){ab=z.h;z.h++;z.i[ab]=!1;"undefined"===typeof b&&(b=a.y.e&&a.y.e(P,"display"));var r=b&&a.w.b(null,b,{},null,!0);r&&r.qs&&r.qs.d&&"string"===typeof r.qs.d&&(a.j=r.qs.d.split(":")[0]);r=null;r=!1;rb&&(delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0);if(r=a.b.x()?!AB_SCAFFOLD.sampling.isEnabled():.a.d.aa().isInApp&&!a.d.cw())delete a.d._sprg,delete a.d._sdrc,qa=!1,a.d.fl=!0,a.d.fk=!0;a.b.x()&&(AB_SCAFFOLD.sampling.isActiveSampling()?a.h=1:(delete a.h,delete a.i));rb&&(delete a.h,delete a.i);r&&(delete a.h,delete a.i);a.h&&(qa=!0);a.r.v()?a.v.n()():a.v.i();a.d.aw.c\|\|(a.d.aw.c=!0,a.d.bd?z.dcsx.ynds(window,"pagehide","unload-"+a.d.aw.a,"unloadFn"+a.d.aw.a):a.d.bc&&(z.dcsx.ynds(windo

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.82790978214397
Encrypted:	false
SSDEEP:	3:YWR4bDY9Y:YWyb09Y
MD5:	A2783B6DB93FC82A9998806F97207470
SHA1:	E8A7C5137DB6509F2810238D258CDAF6507D7803
SHA-256:	858B8A6408A3C9A457C831CE91D3DCC273E12AE41991523890F87E58CE4FC5F1
SHA-512:	F73581E3662E599E9F498A9EA0ECDF45A3ACD6F449EB0B397A547EA06A634B5A02B5F016D77285A2C7F69A57D17EC7AB95C07E95126F4CF9754EE4827C1B794E
Malicious:	false
Reputation:	low
URL:	https://auth-session-caching.wetransfer.net/v1/login-status
Preview:	{"status":"LOGGED_OUT"}

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://wetransfer.com/_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14839
Entropy (8bit):	3.9396585325160705
Encrypted:	false
SSDEEP:	384:aJE0vA/24P2dSBnJv72Fg9UVwm4ghzdu559FD0XJr:AE0Js2dynJ9AwmzGHFIX9
MD5:	922E44A701439AB0A02B2DC32355CD01
SHA1:	E4549CEBD0114BCFBEE4708A0581AAFA8F157B96
SHA-256:	65E00C941729B4F895B23BEBF147B3F56B521B7EF7352009FA5873BE44F9F1FB
SHA-512:	D36123F844909F1C523826194BFC23CFA2BF001C9EB71C12DF9D98A2EA5A41D164D2878179A283734476475EB1E50090362F9BF0E2B10D6EE49047FA46F1717B
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg
Preview:	<svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.2634 14.0054L25.836 12.5269C24.1225 6.334 23.1646 3.86984 21.287 1.19556V1.0542H32.4763V1.19556C31.6176 3.23565 30.9231 7.59855 32.3694 12.8783L39.8607 40.8169L45.9667 16.3282C47.9473 8.23273 46.9818 3.44959 45.8599 1.19556V1.0542H52.1643V1.19556C49.6494 4.63392 49.1113 7.95385 47.6802 14.0054L37.9908 53.1339H36.9184L26.8015 16.0455L15.6657 53.1339H14.5972L4.54897 12.5269Z" fill="#161616"/>.<path d="M54.9424 52.5685V52.4271C56.3353 48.2247 57.0299 45.3212 57.0299 40.6756V12.9471C57.0299 8.23273 56.3353 5.48969 54.9424 1.19556V1.0542H79.6755L81.763 13.5813L81.3317 13.7914C78.4963 9.85258 74.6419 2.8154 72.2872 2.60528L63.2389 2.11245V25.8983H67.8413C70.4669 25.8983 72.6078 21.1839 74.4816 18.5096H74.9624V34.4139H74.4816C72.7681 31.9498 70

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247
Preview:	{}

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	874
Entropy (8bit):	4.875686790492149
Encrypted:	false
SSDEEP:	24:hYdKgqF2VQtczlSZYOJDzZnoX3OHYZY6CLNlMU:UK2WYOF1oX3RY6qNl5
MD5:	1FD37564188B6300561C262233E5A63B
SHA1:	29CCC2EFBDBC9CB12EE903DEDAEABE33AD40855A
SHA-256:	6EBEE5330E31DBE7FA90DE512912913BC8C4370B5BEE82E345C9B2C9AE8CAE0D
SHA-512:	DBBB744DF7CB69D833CDFCEAE4857E20C80CB7507F3AE0CAB9D5EB7A4B622C60D88B7E687758A25B0D632C2CFDD65B7BAFD8A7CEB1B8D7E00F52130933F47457
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8" />. <title>The page you were looking for doesn't exist (404)</title>. <meta name="viewport" content="width=device-width,initial-scale=1">. <link rel="stylesheet" media="all" href="/css/error-page.css">.</head>..<body>. <div class="error-page error-page-404">. <a href="https://wetransfer.com" class="error-page__logo">. <img src="https://email.wetransfer.net/Logos/wetransfer-logo.svg" alt="WeTransfer logo" />. </a>. <div class="error-page__content">. <img class="spiral" src="/images/404-spiral.svg" alt="Something went wrong">. <h1>Yikes, that page can.t be found.</h1>. <p>Head back to <a href="https://wetransfer.com/">wetransfer.com</a> or cheer up your eyes with some <a href="https://wepresent.wetransfer.com/">nice things we wrote</a>.</p>. </div>. </div>.</body>.</html>.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.486168662202929
Encrypted:	false
SSDEEP:	3:YAQRZFp9mkQbKMRA6dvp4HETgQWohkZBA9HATuw:YAKZFMzmmp4H6HSrZ
MD5:	E05D1BC91E0789AF3223C00EC177A612
SHA1:	C0232AB740108C8A74A8398E50B35D86E22D068F
SHA-256:	4732FAA058830E30D333076EFFEFB8D03A8B5A41AFEE081B2D7F278366EAF6E4
SHA-512:	D2E55F4D393C66435576CF1F8A2F6703087B766FF68FB675CC0845A430C3124FFEDA9EDA1596FAC388F40B98C16F0CC3EB36A6BD7FBBD3B63CC80A22AD27E783
Malicious:	false
Reputation:	low
Preview:	{"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	4.676377390728746
Encrypted:	false
SSDEEP:	24:hYephRICWjuR0aLT7chl+SG38yJoI6qNEnVj96o:Fiu7gkxJoIp8pv
MD5:	79898CF2D7F9F4EE1057CAA970572DDC
SHA1:	8CF738A4B6CDC9040BC39F229464ED6012E4C943
SHA-256:	A39AB9758322757ADDF195F1FE166B691670A729CFB339D853A627843589947D
SHA-512:	6C138AB3DC81E297500CAB4FCDEA0FAECE5DAD5CEF54D28D5B1E8E500395E517DBD136EC5F567E57FC6B327985B80A445F1D40E8E583574A7C0E920A8704F918
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <title>desktop-web-renderer</title>. <meta. name="viewport". content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no". />. <style>. *,. :after,. :before {. -webkit-tap-highlight-color: transparent;. box-sizing: border-box;. }.. html {. height: 100%;. }.. body {. -webkit-font-smoothing: antialiased;. margin: 0;. overflow: hidden;. text-size-adjust: 100%;. height: 100%;. }.. iframe {. width: 100%;. height: 100%;. position: absolute;. border: 0;. }. </style>. <script. src="https://www.datadoghq-browser-agent.com/eu1/v5/datadog-rum-slim.js". type="text/javascript". ></script>. </head>. <body>. <desktop-web-renderer></desktop-web-renderer>. <script src="./main.ec3e19d7acef7c17.js" type="module"></

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8501
Entropy (8bit):	4.258565533608946
Encrypted:	false
SSDEEP:	192:aXgJ8+t17vDSnwiP4fWaNc2uua9wi0Al9tjR1:8+Sw/fpa2vtE1
MD5:	88427786DD0EE3F573E163D406446C1A
SHA1:	FF46B0FCD219130D596F18141D664664E6462D69
SHA-256:	BE0986D4B440BED755241354BB77EFFF35F13F08C9575BC563EF7F8A47F82637
SHA-512:	C4A6334F07C9C324B6BB66250DA22358910FFBAC3380BBDEFA6F5EF712FB39CA3A51C01BD404B0075015D53EBC045376D64F4F1C01210059919DB688CB87A96F
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 555.52 148.14">. <defs>. <style>. .cls-1 {. fill: #241c15;. stroke-width: 0px;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1">. <g>. <path class="cls-1" d="m105,70.01c1.08-.13,2.12-.13,3.07,0,.55-1.26.65-3.44.15-5.81-.74-3.53-1.73-5.66-3.79-5.33-2.06.33-2.14,2.89-1.4,6.41.41,1.98,1.15,3.68,1.97,4.73Z"/>. <path class="cls-1" d="m87.31,72.8c1.47.65,2.38,1.08,2.73.7.23-.23.16-.68-.19-1.25-.73-1.19-2.22-2.39-3.81-3.07-3.25-1.4-7.12-.93-10.11,1.21-.99.72-1.92,1.72-1.79,2.33.04.2.19.34.54.39.81.09,3.65-1.34,6.93-1.54,2.31-.14,4.22.58,5.7,1.23Z"/>. <path class="cls-1" d="m84.34,74.49c-1.92.3-2.98.94-3.66,1.52-.58.51-.94,1.07-.94,1.46,0,.19.08.3.15.35.09.08.19.12.32.12.43,0,1.4-.39,1.4-.39,2.67-.96,4.43-.84,6.18-.64.97.11,1.42.17,1.63-.16.06-.09.14-.3-.05-.61-.45-.73-2.39-1.96-5.03-1.65Z"/>. <path clas

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1718), with no line terminators
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	5.232778425215442
Encrypted:	false
SSDEEP:	24:TZsHd3Eq6yf8TVdbaYiFjfijUj1nmHLnw5Lxj2OjE8TVVaYMU5m0sWt:0E1JBaYcfICA6PjDVaYxRXt
MD5:	7BC594D2F21C7B14C2BBB8EA785276A0
SHA1:	09AF153336077FE213A635BB0C525B393C74D85C
SHA-256:	785DE61722B87A114F1B7FD56B9985DB96AE470FF3BB6D2516A2A34F3BCD02F0
SHA-512:	D27883B73933A5504C12649C8DA60A917E32072A43F633B9E099F32D4AF313A4C02CC798441A276943FCB1A1688DFF73B9C451C973707E4E2F76CBAE18CABC34
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/css/bacf6ffa65b559f2.css
Preview:	.ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;color:red}.ErrorState_Wrapper__2I4Fn{max-width:60%;height:100vh;margin:auto;display:flex;flex-direction:column;justify-content:center;align-items:center}.ErrorState_Spiral__r95B2{max-height:40%;margin-bottom:2em}.ErrorState_Title__vQu0D{margin:1em 0 .2em;font-size:1em}.ErrorState_Description__qoe_n{font-size:1em;line-height:1.25em}.ErrorState_Description__qoe_n a{color:#000}.ErrorState_Description__qoe_n a:hover{color:#5268ff}.ErrorState_Loader__7kFn1{margin:auto;display:block;height:31px;width:65px;animation:ErrorState_loading-pulse__N4RI1 3.5s infinite}@keyframes ErrorState_loading-pulse__N4RI1{0%{opacity:0}35%{opacity:1}70%{opacity:0}to{opacity:0}}.AppLoader_AppLoader___e83q{height:100vh;width:100vw;z-index:0;background:#fff;display:fl

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71691
Entropy (8bit):	5.290510613874029
Encrypted:	false
SSDEEP:	1536:m2uB0DdnFpVMQfuhkGT0iCfWXRFGY+9Ti:WAVm6GT0BuhFSTi
MD5:	42EACEAA10CED1BC091C1D9097C4897F
SHA1:	15DF0C2CCF5DB8E1A2705BA4DC4F60F0DE01FC49
SHA-256:	4CD6686277A3ABE85C63ED695019CAC862CC54702184108DE1DA819271B1FCA0
SHA-512:	980ADC2F8AC61BF853E250C83405716DDE44592A0D1ABC7A41A35E52A9CF366100CD4CFA95DDDD4BB031A46986387516C3B9ED0D18D9990DB4CC471184BB08EA
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/2edb282b.45c56c19221816df.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=NaN,g=4294967295,y=[["ary",s],["bind",1],["bindKey",2],["curry",8],["curryRight",a],["flip",512],["partial",c],["partialRight",l],["rearg",h]],d="[object Arguments]",b="[object Array]",w="[object Boolean]",m="[object Date]",x="[object Error]",j="[object Function]",A="[object GeneratorFunction]",k="[object Map]",O="[object Number]",I="[object Object]",E="[object Promise]",R="[object RegExp]",z="[object Set]",S="[object String]",C="[object Symbol]",W="[object WeakMap]",L="[object ArrayBuffer]",U="[object DataView]",B="[object Float32Array]",T="[object Float64Array]",$="[object Int8Array]",D="[object Int16Array]",N="[object Int32Array]",M="[object Uint8Array]",F="[object Uint8ClampedArray]",P="[object Uint16Array]",q="[object Uint32Array]

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2771
Entropy (8bit):	4.1793291897420355
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyQ:zMZnH/l8NhHJ0M2J7dCJ
MD5:	214BDB61302D057CE107A09F29CA5AB2
SHA1:	0AA1B917CF16B3CFCFCF637432146FDA4BE11F77
SHA-256:	58A20FE1CA5C5B06513720E9772AF80A0324BFF84D9AAA21DCD88F2AA58AE96F
SHA-512:	D535A966F9539F187CC8E1055B0FD4D9366A3DF2537BE5DD2BB64564F72D0F3BC89C304CB21C54AF00A17A0E28D7E3F11323BCBFCE3FE92A802BDA8278E07292
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	4.234190158377756
Encrypted:	false
SSDEEP:	48:0gthi2SBP5LfxnH/lotNhHJATwnrGvJqAnHtdCyBC+A:zMZnH/l8NhHJ0M2J7dCv
MD5:	48D0405834EA5AD28701CF9E867C8C6B
SHA1:	340FACCFABDF04CDFF4E605F954B88A023EA96B4
SHA-256:	237470D8A1BB4056B5055CE5359E0D9020D56987A53AD9654D7E0FDCA186F124
SHA-512:	C42235ACEA4EA2F05F11A1D4EC6B559EF1ECF2B3010D705A1439F3EDBC4153852D486107821C705934B51C005A6BA2A31E6E593DEBF4C85E9455F89A2D9BF6CA
Malicious:	false
Reputation:	low
URL:	https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer
Preview:	<!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {. box-sizing: border-box;. }.. body {. margin: 0;. height: 100%;. overflow: hidden;. box-sizing: border-box;. text-rendering: optimizeLegibility;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. cursor: pointer;. -webkit-user-drag: none;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica,. Arial, sans-serif, Apple Color Emoji, Segoe UI Emoji;. }.. ,. :before,. *:after {. box-sizing: inherit;. }.. html,. body,. div,. span,. bu

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21801), with no line terminators
Category:	downloaded
Size (bytes):	21801
Entropy (8bit):	5.424702702668222
Encrypted:	false
SSDEEP:	384:Xk27rQKtjGGjcVDLC4AWxohaHCK3xo9ECML04M8OVMvC5n:Xk27rQKtjGGw9eaeMLUBDd
MD5:	FC8D876A973A29258C6F89B62BED455A
SHA1:	2B90A982E34633074A6A5F7F97545FF5AE1F39B9
SHA-256:	DCCE4E8FB0B6FC709858B0A571E511FABBF585BEFA8AF7CF142833DDDD28F48A
SHA-512:	823266DF71FC66E6CF5ED01CB3328082BD78B97B5DB83DFF983D774A42835F12930DCFA55ADAA5ACB2A73E8183B187982E2E48F5E048794DBEC161C085A99EBF
Malicious:	false
Reputation:	low
URL:	https://cdn.wetransfer.com/_next/static/chunks/5835-418bbb9fccea5315.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/translation.json":[94180,3,4180],"./da.js":[85921,9,5921],"./de":[41879,9,1879],"./de-DE/translation":[96703,3,6703],"./de-DE/translation.json":[96703,3,6703],"./de.js":[41879,9,1879],"./en":[8745,9,8745],"./en.js":[8745,9,8745],"./en/translation":[89123,3],"./en/translation.json":[89123,3],"./es":[51716,9,1716],"./es-419":[79073,9,9073],"./es-419.js":[79073,9,9073],"./es-ES/translation":[2816,3,2816],"./es-ES/translation.json":[2816,3,2816],"./es-LA/translation":[24287,3,4287],"./es-LA/translation.json":[24287,3,4287],"./es.js":[51716,9,1716],"./fr":[62870,9,2870],"./fr-FR/translation":[81880,3,1880],"./fr-FR/translation.json":[81880,3,1880],"./fr.js":[62870,9,2870],"./index":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://tagging.wetransfer.com/_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.811069047639795
Encrypted:	false
SSDEEP:	6:wuwwtmiInUJaKTuLEEbL2G5KQncdMEBtHCZrBhUidytiJWcdyd+ALxeXxnUJaKCY:hbAirAQEbyG5DncdLTClUidytiJddyd5
MD5:	CAC32D9560401B59BCB621F1346A1691
SHA1:	348663339B889E5D67C85EF5E9AAC4B2D4663BA7
SHA-256:	194166EF31C404797B31347665DCCEEB62FCDA65620A9211E8683050FAF98C05
SHA-512:	451880E42490E8ACFB7A826866B1ED21A793FB9F6AEBD61E724765AD5AFCB633156DE900F4F356F3AF2B09BBC4C2CD2353C41B1B1CCF5A8F2157D48A5EFBD8C9
Malicious:	false
Reputation:	low
URL:	https://nolan.wetransfer.net/apps/desktop-wallpaper/asset-manifest.json
Preview:	{. "files": {. "main.js": "0.1.47/main.7532df0ed7cdb64f.js",. "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt",. "index.html": "0.1.47/index.html",. "package.json": "0.1.47/package.json",. "assets/.gitkeep": "0.1.47/assets/.gitkeep". },. "entrypoints": [. "0.1.47/main.7532df0ed7cdb64f.js". ].}

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 04:17:42.234849930 CEST	192.168.2.5	1.1.1.1	0x5981	Standard query (0)	we.tl	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:42.235219955 CEST	192.168.2.5	1.1.1.1	0x5302	Standard query (0)	we.tl	65	IN (0x0001)	false
Apr 24, 2024 04:17:43.216815948 CEST	192.168.2.5	1.1.1.1	0x9fc2	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:43.216948032 CEST	192.168.2.5	1.1.1.1	0xd1b8	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:44.151170969 CEST	192.168.2.5	1.1.1.1	0xc37f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.151591063 CEST	192.168.2.5	1.1.1.1	0xe465	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:44.320154905 CEST	192.168.2.5	1.1.1.1	0x9af	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.320326090 CEST	192.168.2.5	1.1.1.1	0xbeaa	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:46.373872042 CEST	192.168.2.5	1.1.1.1	0x5a85	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.374532938 CEST	192.168.2.5	1.1.1.1	0xe061	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:46.375931978 CEST	192.168.2.5	1.1.1.1	0x9b9f	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.376363993 CEST	192.168.2.5	1.1.1.1	0xbe92	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:50.109818935 CEST	192.168.2.5	1.1.1.1	0x8ce2	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.109976053 CEST	192.168.2.5	1.1.1.1	0x852d	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:50.938659906 CEST	192.168.2.5	1.1.1.1	0x6ed9	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.938813925 CEST	192.168.2.5	1.1.1.1	0xaba3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:52.851769924 CEST	192.168.2.5	1.1.1.1	0xb7f0	Standard query (0)	public.profitwell.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:52.851912975 CEST	192.168.2.5	1.1.1.1	0xd47c	Standard query (0)	public.profitwell.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:53.009371042 CEST	192.168.2.5	1.1.1.1	0x852	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.010024071 CEST	192.168.2.5	1.1.1.1	0x9c2f	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:53.080949068 CEST	192.168.2.5	1.1.1.1	0x8667	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.081104994 CEST	192.168.2.5	1.1.1.1	0x4b8d	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:53.960486889 CEST	192.168.2.5	1.1.1.1	0x289d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.960628986 CEST	192.168.2.5	1.1.1.1	0x5360	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:54.771171093 CEST	192.168.2.5	1.1.1.1	0x7e7a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.771392107 CEST	192.168.2.5	1.1.1.1	0x1816	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:54.843509912 CEST	192.168.2.5	1.1.1.1	0x8a92	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.843509912 CEST	192.168.2.5	1.1.1.1	0x8419	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:54.845393896 CEST	192.168.2.5	1.1.1.1	0x4ccb	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.845393896 CEST	192.168.2.5	1.1.1.1	0x3eac	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:54.847429991 CEST	192.168.2.5	1.1.1.1	0xd14c	Standard query (0)	cdn.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.847667933 CEST	192.168.2.5	1.1.1.1	0x8c50	Standard query (0)	cdn.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:55.635885000 CEST	192.168.2.5	1.1.1.1	0xbefc	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.636118889 CEST	192.168.2.5	1.1.1.1	0xc8e5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:55.708349943 CEST	192.168.2.5	1.1.1.1	0x8be7	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.708594084 CEST	192.168.2.5	1.1.1.1	0x8080	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:55.721577883 CEST	192.168.2.5	1.1.1.1	0xfc3e	Standard query (0)	auth-session-caching.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.721712112 CEST	192.168.2.5	1.1.1.1	0xb886	Standard query (0)	auth-session-caching.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:55.724348068 CEST	192.168.2.5	1.1.1.1	0x83bd	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.724538088 CEST	192.168.2.5	1.1.1.1	0x6499	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:55.862860918 CEST	192.168.2.5	1.1.1.1	0x1a1e	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.863024950 CEST	192.168.2.5	1.1.1.1	0x2d88	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:56.547717094 CEST	192.168.2.5	1.1.1.1	0xa58d	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.548059940 CEST	192.168.2.5	1.1.1.1	0x5527	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:56.552752018 CEST	192.168.2.5	1.1.1.1	0x60c7	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.553041935 CEST	192.168.2.5	1.1.1.1	0x3864	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:57.984532118 CEST	192.168.2.5	1.1.1.1	0x6980	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.985203981 CEST	192.168.2.5	1.1.1.1	0x1791	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:57.993180037 CEST	192.168.2.5	1.1.1.1	0x523e	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.993870020 CEST	192.168.2.5	1.1.1.1	0xff6	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:57.998568058 CEST	192.168.2.5	1.1.1.1	0xe96c	Standard query (0)	api.lab.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.999000072 CEST	192.168.2.5	1.1.1.1	0x5f40	Standard query (0)	api.lab.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:58.006309032 CEST	192.168.2.5	1.1.1.1	0x9e53	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.006719112 CEST	192.168.2.5	1.1.1.1	0xa0a8	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:58.494903088 CEST	192.168.2.5	1.1.1.1	0x1e89	Standard query (0)	eu01.in.treasuredata.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.495450974 CEST	192.168.2.5	1.1.1.1	0x469a	Standard query (0)	eu01.in.treasuredata.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:58.640234947 CEST	192.168.2.5	1.1.1.1	0xe611	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.640731096 CEST	192.168.2.5	1.1.1.1	0x9f07	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:58.726893902 CEST	192.168.2.5	1.1.1.1	0x5437	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.727535009 CEST	192.168.2.5	1.1.1.1	0x19d	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:58.727993965 CEST	192.168.2.5	1.1.1.1	0x3f8a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.728132010 CEST	192.168.2.5	1.1.1.1	0xa7c6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:17:59.682403088 CEST	192.168.2.5	1.1.1.1	0xb36f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:59.682852030 CEST	192.168.2.5	1.1.1.1	0x1b90	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:17:59.683442116 CEST	192.168.2.5	1.1.1.1	0xe1fd	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:59.683954000 CEST	192.168.2.5	1.1.1.1	0x6722	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.281115055 CEST	192.168.2.5	1.1.1.1	0x7172	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.281383991 CEST	192.168.2.5	1.1.1.1	0x1a62	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.650722027 CEST	192.168.2.5	1.1.1.1	0x36dc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.650887966 CEST	192.168.2.5	1.1.1.1	0x5cd8	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.854733944 CEST	192.168.2.5	1.1.1.1	0x9e69	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.854991913 CEST	192.168.2.5	1.1.1.1	0x30ec	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.857372999 CEST	192.168.2.5	1.1.1.1	0x154d	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.857556105 CEST	192.168.2.5	1.1.1.1	0x6ae2	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.873724937 CEST	192.168.2.5	1.1.1.1	0xb9d6	Standard query (0)	e-10220.adzerk.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.873888016 CEST	192.168.2.5	1.1.1.1	0x638b	Standard query (0)	e-10220.adzerk.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:00.874723911 CEST	192.168.2.5	1.1.1.1	0x8cb8	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.874859095 CEST	192.168.2.5	1.1.1.1	0xa68f	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:01.573894978 CEST	192.168.2.5	1.1.1.1	0x8beb	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.574295998 CEST	192.168.2.5	1.1.1.1	0x71b4	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:01.673021078 CEST	192.168.2.5	1.1.1.1	0xbadd	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.673443079 CEST	192.168.2.5	1.1.1.1	0x9228	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:01.677305937 CEST	192.168.2.5	1.1.1.1	0x3209	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.677443981 CEST	192.168.2.5	1.1.1.1	0xf4f8	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:01.857861996 CEST	192.168.2.5	1.1.1.1	0x243e	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.858092070 CEST	192.168.2.5	1.1.1.1	0x7b85	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 04:18:02.211728096 CEST	192.168.2.5	1.1.1.1	0x839d	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.211889982 CEST	192.168.2.5	1.1.1.1	0x3dbb	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:02.458118916 CEST	192.168.2.5	1.1.1.1	0xe77a	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.458369017 CEST	192.168.2.5	1.1.1.1	0x5d17	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:02.707377911 CEST	192.168.2.5	1.1.1.1	0xd959	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.707516909 CEST	192.168.2.5	1.1.1.1	0x1dee	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:02.707926035 CEST	192.168.2.5	1.1.1.1	0x3ab0	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.708198071 CEST	192.168.2.5	1.1.1.1	0x5d9b	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 24, 2024 04:18:03.337416887 CEST	192.168.2.5	1.1.1.1	0xd481	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.338222980 CEST	192.168.2.5	1.1.1.1	0x999f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:03.378987074 CEST	192.168.2.5	1.1.1.1	0xa35d	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.379190922 CEST	192.168.2.5	1.1.1.1	0x4c59	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:03.392503977 CEST	192.168.2.5	1.1.1.1	0x3b42	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.393232107 CEST	192.168.2.5	1.1.1.1	0x368f	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:03.519819021 CEST	192.168.2.5	1.1.1.1	0xc5	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.520000935 CEST	192.168.2.5	1.1.1.1	0xa3b5	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:04.267615080 CEST	192.168.2.5	1.1.1.1	0x7c41	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.267767906 CEST	192.168.2.5	1.1.1.1	0xb2a4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:04.287605047 CEST	192.168.2.5	1.1.1.1	0xba77	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.287797928 CEST	192.168.2.5	1.1.1.1	0x5a0b	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:04.313713074 CEST	192.168.2.5	1.1.1.1	0x96f0	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.313903093 CEST	192.168.2.5	1.1.1.1	0x7985	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:04.321212053 CEST	192.168.2.5	1.1.1.1	0x13db	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.321424961 CEST	192.168.2.5	1.1.1.1	0x899a	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:05.462799072 CEST	192.168.2.5	1.1.1.1	0x3196	Standard query (0)	cdn.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:05.462991953 CEST	192.168.2.5	1.1.1.1	0xd073	Standard query (0)	cdn.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:06.339378119 CEST	192.168.2.5	1.1.1.1	0xa389	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.339499950 CEST	192.168.2.5	1.1.1.1	0xfd87	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:06.348283052 CEST	192.168.2.5	1.1.1.1	0x4827	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.348406076 CEST	192.168.2.5	1.1.1.1	0xd123	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:07.053024054 CEST	192.168.2.5	1.1.1.1	0xa3af	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:07.053143978 CEST	192.168.2.5	1.1.1.1	0x9991	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:07.170902967 CEST	192.168.2.5	1.1.1.1	0xc8b9	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:07.171119928 CEST	192.168.2.5	1.1.1.1	0xce95	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:08.748034000 CEST	192.168.2.5	1.1.1.1	0x37d3	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:08.748186111 CEST	192.168.2.5	1.1.1.1	0x9608	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:09.564367056 CEST	192.168.2.5	1.1.1.1	0xc0e0	Standard query (0)	prod-cdn.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:09.564563990 CEST	192.168.2.5	1.1.1.1	0x92e7	Standard query (0)	prod-cdn.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:10.639456034 CEST	192.168.2.5	1.1.1.1	0xd483	Standard query (0)	rum.browser-intake-datadoghq.eu	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:10.639580965 CEST	192.168.2.5	1.1.1.1	0xe464	Standard query (0)	rum.browser-intake-datadoghq.eu	65	IN (0x0001)	false
Apr 24, 2024 04:18:11.480626106 CEST	192.168.2.5	1.1.1.1	0x47a2	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:11.480760098 CEST	192.168.2.5	1.1.1.1	0x2667	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:13.410628080 CEST	192.168.2.5	1.1.1.1	0xc2fe	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:13.410804033 CEST	192.168.2.5	1.1.1.1	0xf670	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:13.998536110 CEST	192.168.2.5	1.1.1.1	0xcf9d	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:13.998680115 CEST	192.168.2.5	1.1.1.1	0x40c2	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:15.561516047 CEST	192.168.2.5	1.1.1.1	0x112	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:15.561784029 CEST	192.168.2.5	1.1.1.1	0xa591	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:15.576458931 CEST	192.168.2.5	1.1.1.1	0x3ad1	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:15.576690912 CEST	192.168.2.5	1.1.1.1	0x285f	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:16.183146000 CEST	192.168.2.5	1.1.1.1	0x1763	Standard query (0)	donny.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:16.183291912 CEST	192.168.2.5	1.1.1.1	0x5be8	Standard query (0)	donny.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:18.956018925 CEST	192.168.2.5	1.1.1.1	0x591b	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:18.956157923 CEST	192.168.2.5	1.1.1.1	0xc3a8	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:18:19.975817919 CEST	192.168.2.5	1.1.1.1	0xa1bb	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:19.975948095 CEST	192.168.2.5	1.1.1.1	0xdc0	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 04:18:20.833141088 CEST	192.168.2.5	1.1.1.1	0x6842	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:20.833496094 CEST	192.168.2.5	1.1.1.1	0x48	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:21.035670996 CEST	192.168.2.5	1.1.1.1	0xc4a5	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.036021948 CEST	192.168.2.5	1.1.1.1	0x24cf	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:21.275094986 CEST	192.168.2.5	1.1.1.1	0x13a9	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.275273085 CEST	192.168.2.5	1.1.1.1	0x7605	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:27.166387081 CEST	192.168.2.5	1.1.1.1	0x24c1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:27.166528940 CEST	192.168.2.5	1.1.1.1	0xc405	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:29.074503899 CEST	192.168.2.5	1.1.1.1	0x6d89	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:29.074805021 CEST	192.168.2.5	1.1.1.1	0x33da	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:29.095494986 CEST	192.168.2.5	1.1.1.1	0x6ec5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:29.095941067 CEST	192.168.2.5	1.1.1.1	0x2938	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:32.691781998 CEST	192.168.2.5	1.1.1.1	0xd6f9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:32.691953897 CEST	192.168.2.5	1.1.1.1	0x12fb	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:44.699763060 CEST	192.168.2.5	1.1.1.1	0xc63c	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.701435089 CEST	192.168.2.5	1.1.1.1	0xc8b	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:44.701984882 CEST	192.168.2.5	1.1.1.1	0x6d24	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.702197075 CEST	192.168.2.5	1.1.1.1	0xc540	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:46.982745886 CEST	192.168.2.5	1.1.1.1	0x5a66	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:46.986388922 CEST	192.168.2.5	1.1.1.1	0xf4c1	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:47.535945892 CEST	192.168.2.5	1.1.1.1	0xd7c1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.536206961 CEST	192.168.2.5	1.1.1.1	0x53fd	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:49.034392118 CEST	192.168.2.5	1.1.1.1	0x9270	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.034627914 CEST	192.168.2.5	1.1.1.1	0xcd2c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:49.942914009 CEST	192.168.2.5	1.1.1.1	0x4d1d	Standard query (0)	track.activemetering.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.943234921 CEST	192.168.2.5	1.1.1.1	0xa893	Standard query (0)	track.activemetering.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:49.947818995 CEST	192.168.2.5	1.1.1.1	0x737e	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.947969913 CEST	192.168.2.5	1.1.1.1	0x55f5	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:49.952469110 CEST	192.168.2.5	1.1.1.1	0x5a1f	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.952613115 CEST	192.168.2.5	1.1.1.1	0x348d	Standard query (0)	pixel.adsafeprotected.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:50.899400949 CEST	192.168.2.5	1.1.1.1	0xa7db	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.899738073 CEST	192.168.2.5	1.1.1.1	0x55df	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:50.902510881 CEST	192.168.2.5	1.1.1.1	0xf160	Standard query (0)	cdn.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.902731895 CEST	192.168.2.5	1.1.1.1	0xb6ef	Standard query (0)	cdn.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:18:50.911640882 CEST	192.168.2.5	1.1.1.1	0x5688	Standard query (0)	track.activemetering.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.911773920 CEST	192.168.2.5	1.1.1.1	0x9d64	Standard query (0)	track.activemetering.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:51.240343094 CEST	192.168.2.5	1.1.1.1	0x7816	Standard query (0)	tagging.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.240497112 CEST	192.168.2.5	1.1.1.1	0x4661	Standard query (0)	tagging.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:51.704641104 CEST	192.168.2.5	1.1.1.1	0x4b1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.704803944 CEST	192.168.2.5	1.1.1.1	0x9b82	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:52.155848980 CEST	192.168.2.5	1.1.1.1	0xa95a	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.156016111 CEST	192.168.2.5	1.1.1.1	0xfe5f	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:52.163664103 CEST	192.168.2.5	1.1.1.1	0x8b16	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.163804054 CEST	192.168.2.5	1.1.1.1	0x9f95	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:18:52.166188002 CEST	192.168.2.5	1.1.1.1	0xebfd	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.166322947 CEST	192.168.2.5	1.1.1.1	0x74a4	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:53.091732979 CEST	192.168.2.5	1.1.1.1	0x856f	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.092034101 CEST	192.168.2.5	1.1.1.1	0x2efe	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:53.252538919 CEST	192.168.2.5	1.1.1.1	0x9310	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.252661943 CEST	192.168.2.5	1.1.1.1	0x8d86	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:53.519968033 CEST	192.168.2.5	1.1.1.1	0x2634	Standard query (0)	measure.lamp.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.520162106 CEST	192.168.2.5	1.1.1.1	0x21e3	Standard query (0)	measure.lamp.avct.cloud	65	IN (0x0001)	false
Apr 24, 2024 04:18:53.885839939 CEST	192.168.2.5	1.1.1.1	0x597a	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.885974884 CEST	192.168.2.5	1.1.1.1	0x5574	Standard query (0)	dt.adsafeprotected.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:53.915004969 CEST	192.168.2.5	1.1.1.1	0x442b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.915144920 CEST	192.168.2.5	1.1.1.1	0x17e1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 04:18:54.700814962 CEST	192.168.2.5	1.1.1.1	0xf5b0	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.700954914 CEST	192.168.2.5	1.1.1.1	0x2110	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:55.055326939 CEST	192.168.2.5	1.1.1.1	0xf608	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.055480003 CEST	192.168.2.5	1.1.1.1	0x4df5	Standard query (0)	dt.adsafeprotected.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:55.511657953 CEST	192.168.2.5	1.1.1.1	0x2a9a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.511929035 CEST	192.168.2.5	1.1.1.1	0x419d	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:55.615878105 CEST	192.168.2.5	1.1.1.1	0x194	Standard query (0)	wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.616010904 CEST	192.168.2.5	1.1.1.1	0xceaf	Standard query (0)	wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:57.680012941 CEST	192.168.2.5	1.1.1.1	0xf801	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.680147886 CEST	192.168.2.5	1.1.1.1	0x201b	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:58.881788969 CEST	192.168.2.5	1.1.1.1	0x8444	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:58.881900072 CEST	192.168.2.5	1.1.1.1	0x87e0	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Apr 24, 2024 04:18:59.567276955 CEST	192.168.2.5	1.1.1.1	0xe381	Standard query (0)	cdn.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.567404032 CEST	192.168.2.5	1.1.1.1	0x39ae	Standard query (0)	cdn.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:02.037233114 CEST	192.168.2.5	1.1.1.1	0x8348	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:02.037379026 CEST	192.168.2.5	1.1.1.1	0x914b	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:03.706285954 CEST	192.168.2.5	1.1.1.1	0xde79	Standard query (0)	snowplow.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:03.706659079 CEST	192.168.2.5	1.1.1.1	0x8194	Standard query (0)	snowplow.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:04.327213049 CEST	192.168.2.5	1.1.1.1	0x2ec7	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.327347994 CEST	192.168.2.5	1.1.1.1	0xef17	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:04.788305044 CEST	192.168.2.5	1.1.1.1	0x475a	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.788454056 CEST	192.168.2.5	1.1.1.1	0xa6fe	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:04.977013111 CEST	192.168.2.5	1.1.1.1	0xe81c	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.977125883 CEST	192.168.2.5	1.1.1.1	0x4882	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:07.733294964 CEST	192.168.2.5	1.1.1.1	0x273b	Standard query (0)	lebowski.wetransfer.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.734468937 CEST	192.168.2.5	1.1.1.1	0x7792	Standard query (0)	lebowski.wetransfer.com	65	IN (0x0001)	false
Apr 24, 2024 04:19:07.750868082 CEST	192.168.2.5	1.1.1.1	0xa56d	Standard query (0)	nolan.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.751116991 CEST	192.168.2.5	1.1.1.1	0x2433	Standard query (0)	nolan.wetransfer.net	65	IN (0x0001)	false
Apr 24, 2024 04:19:09.254446030 CEST	192.168.2.5	1.1.1.1	0x45b2	Standard query (0)	backgrounds.wetransfer.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:09.254645109 CEST	192.168.2.5	1.1.1.1	0xb79e	Standard query (0)	backgrounds.wetransfer.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 04:17:42.388386011 CEST	1.1.1.1	192.168.2.5	0x5981	No error (0)	we.tl		18.65.3.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:42.388386011 CEST	1.1.1.1	192.168.2.5	0x5981	No error (0)	we.tl		18.65.3.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:42.388386011 CEST	1.1.1.1	192.168.2.5	0x5981	No error (0)	we.tl		18.65.3.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:42.388386011 CEST	1.1.1.1	192.168.2.5	0x5981	No error (0)	we.tl		18.65.3.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:43.371006966 CEST	1.1.1.1	192.168.2.5	0x9fc2	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:43.371006966 CEST	1.1.1.1	192.168.2.5	0x9fc2	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:43.371006966 CEST	1.1.1.1	192.168.2.5	0x9fc2	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:43.371006966 CEST	1.1.1.1	192.168.2.5	0x9fc2	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.305568933 CEST	1.1.1.1	192.168.2.5	0xc37f	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.306322098 CEST	1.1.1.1	192.168.2.5	0xe465	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:17:44.474631071 CEST	1.1.1.1	192.168.2.5	0x9af	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.474631071 CEST	1.1.1.1	192.168.2.5	0x9af	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.474631071 CEST	1.1.1.1	192.168.2.5	0x9af	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:44.474631071 CEST	1.1.1.1	192.168.2.5	0x9af	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.528050900 CEST	1.1.1.1	192.168.2.5	0x5a85	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:46.528050900 CEST	1.1.1.1	192.168.2.5	0x5a85	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.528050900 CEST	1.1.1.1	192.168.2.5	0x5a85	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.528050900 CEST	1.1.1.1	192.168.2.5	0x5a85	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.528050900 CEST	1.1.1.1	192.168.2.5	0x5a85	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.530463934 CEST	1.1.1.1	192.168.2.5	0xe061	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:46.530487061 CEST	1.1.1.1	192.168.2.5	0x9b9f	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.530487061 CEST	1.1.1.1	192.168.2.5	0x9b9f	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.530487061 CEST	1.1.1.1	192.168.2.5	0x9b9f	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:46.530487061 CEST	1.1.1.1	192.168.2.5	0x9b9f	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.264117002 CEST	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.264117002 CEST	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.264117002 CEST	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:50.264117002 CEST	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:51.092698097 CEST	1.1.1.1	192.168.2.5	0x6ed9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:51.092698097 CEST	1.1.1.1	192.168.2.5	0x6ed9	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:51.092726946 CEST	1.1.1.1	192.168.2.5	0xaba3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:53.006145000 CEST	1.1.1.1	192.168.2.5	0xb7f0	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:53.006145000 CEST	1.1.1.1	192.168.2.5	0xb7f0	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.006145000 CEST	1.1.1.1	192.168.2.5	0xb7f0	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.006145000 CEST	1.1.1.1	192.168.2.5	0xb7f0	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.87	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.006145000 CEST	1.1.1.1	192.168.2.5	0xb7f0	No error (0)	dna8twue3dlxq.cloudfront.net		18.154.206.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.012443066 CEST	1.1.1.1	192.168.2.5	0xd47c	No error (0)	public.profitwell.com	dna8twue3dlxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:53.179788113 CEST	1.1.1.1	192.168.2.5	0x852	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.179788113 CEST	1.1.1.1	192.168.2.5	0x852	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.179788113 CEST	1.1.1.1	192.168.2.5	0x852	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.234890938 CEST	1.1.1.1	192.168.2.5	0x8667	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.234890938 CEST	1.1.1.1	192.168.2.5	0x8667	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.234890938 CEST	1.1.1.1	192.168.2.5	0x8667	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:53.234890938 CEST	1.1.1.1	192.168.2.5	0x8667	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.113782883 CEST	1.1.1.1	192.168.2.5	0x5360	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.114388943 CEST	1.1.1.1	192.168.2.5	0x289d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.114388943 CEST	1.1.1.1	192.168.2.5	0x289d	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.924873114 CEST	1.1.1.1	192.168.2.5	0x7e7a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.924873114 CEST	1.1.1.1	192.168.2.5	0x7e7a	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.924922943 CEST	1.1.1.1	192.168.2.5	0x1816	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997350931 CEST	1.1.1.1	192.168.2.5	0x8419	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997637987 CEST	1.1.1.1	192.168.2.5	0x8a92	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997637987 CEST	1.1.1.1	192.168.2.5	0x8a92	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997637987 CEST	1.1.1.1	192.168.2.5	0x8a92	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997637987 CEST	1.1.1.1	192.168.2.5	0x8a92	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.997637987 CEST	1.1.1.1	192.168.2.5	0x8a92	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.998972893 CEST	1.1.1.1	192.168.2.5	0x4ccb	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.998972893 CEST	1.1.1.1	192.168.2.5	0x4ccb	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.998972893 CEST	1.1.1.1	192.168.2.5	0x4ccb	No error (0)	dualstack.pinterest.map.fastly.net		146.75.92.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:54.999618053 CEST	1.1.1.1	192.168.2.5	0x3eac	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.999618053 CEST	1.1.1.1	192.168.2.5	0x3eac	No error (0)	s-pinimg-com.gslb.pinterest.com	static.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:54.999618053 CEST	1.1.1.1	192.168.2.5	0x3eac	No error (0)	static.gslb.pinterest.net	s.pinimg.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:55.001532078 CEST	1.1.1.1	192.168.2.5	0xd14c	No error (0)	cdn.treasuredata.com		13.226.225.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.001532078 CEST	1.1.1.1	192.168.2.5	0xd14c	No error (0)	cdn.treasuredata.com		13.226.225.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.001532078 CEST	1.1.1.1	192.168.2.5	0xd14c	No error (0)	cdn.treasuredata.com		13.226.225.77	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.001532078 CEST	1.1.1.1	192.168.2.5	0xd14c	No error (0)	cdn.treasuredata.com		13.226.225.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.789422035 CEST	1.1.1.1	192.168.2.5	0xbefc	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.789422035 CEST	1.1.1.1	192.168.2.5	0xbefc	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.789422035 CEST	1.1.1.1	192.168.2.5	0xbefc	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.789422035 CEST	1.1.1.1	192.168.2.5	0xbefc	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		52.43.31.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		44.238.142.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		44.235.149.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		52.32.35.160	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		52.26.6.175	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		35.80.203.208	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		54.71.232.169	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.861504078 CEST	1.1.1.1	192.168.2.5	0x8be7	No error (0)	api.amplitude.com		44.240.232.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.875709057 CEST	1.1.1.1	192.168.2.5	0xfc3e	No error (0)	auth-session-caching.wetransfer.net		34.248.204.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.875709057 CEST	1.1.1.1	192.168.2.5	0xfc3e	No error (0)	auth-session-caching.wetransfer.net		52.30.32.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.875709057 CEST	1.1.1.1	192.168.2.5	0xfc3e	No error (0)	auth-session-caching.wetransfer.net		54.76.94.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878484011 CEST	1.1.1.1	192.168.2.5	0x6499	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878509045 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878509045 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878509045 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878509045 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:55.878509045 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.023495913 CEST	1.1.1.1	192.168.2.5	0x1a1e	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.023495913 CEST	1.1.1.1	192.168.2.5	0x1a1e	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.701224089 CEST	1.1.1.1	192.168.2.5	0xa58d	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:56.701224089 CEST	1.1.1.1	192.168.2.5	0xa58d	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.701224089 CEST	1.1.1.1	192.168.2.5	0xa58d	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.701224089 CEST	1.1.1.1	192.168.2.5	0xa58d	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.701224089 CEST	1.1.1.1	192.168.2.5	0xa58d	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.702933073 CEST	1.1.1.1	192.168.2.5	0x5527	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:56.705949068 CEST	1.1.1.1	192.168.2.5	0x60c7	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.705949068 CEST	1.1.1.1	192.168.2.5	0x60c7	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.705949068 CEST	1.1.1.1	192.168.2.5	0x60c7	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:56.705949068 CEST	1.1.1.1	192.168.2.5	0x60c7	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.748323917 CEST	1.1.1.1	192.168.2.5	0x8bcc	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.748323917 CEST	1.1.1.1	192.168.2.5	0x8bcc	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:57.788891077 CEST	1.1.1.1	192.168.2.5	0xc5ca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:57.788891077 CEST	1.1.1.1	192.168.2.5	0xc5ca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.138712883 CEST	1.1.1.1	192.168.2.5	0x6980	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.138712883 CEST	1.1.1.1	192.168.2.5	0x6980	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.138712883 CEST	1.1.1.1	192.168.2.5	0x6980	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.139825106 CEST	1.1.1.1	192.168.2.5	0x1791	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.146827936 CEST	1.1.1.1	192.168.2.5	0x523e	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.152190924 CEST	1.1.1.1	192.168.2.5	0xe96c	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.152190924 CEST	1.1.1.1	192.168.2.5	0xe96c	No error (0)	amplitude.map.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.152190924 CEST	1.1.1.1	192.168.2.5	0xe96c	No error (0)	amplitude.map.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.152190924 CEST	1.1.1.1	192.168.2.5	0xe96c	No error (0)	amplitude.map.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.152190924 CEST	1.1.1.1	192.168.2.5	0xe96c	No error (0)	amplitude.map.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.153199911 CEST	1.1.1.1	192.168.2.5	0x5f40	No error (0)	api.lab.amplitude.com	amplitude.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		44.240.232.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		44.238.142.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		35.80.203.208	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		44.235.149.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		52.43.31.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		54.71.232.169	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		52.26.6.175	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.159763098 CEST	1.1.1.1	192.168.2.5	0x9e53	No error (0)	api.amplitude.com		52.32.35.160	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.649125099 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	eu01.in.treasuredata.com		3.126.72.131	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.649125099 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	eu01.in.treasuredata.com		18.195.184.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.794255972 CEST	1.1.1.1	192.168.2.5	0xe611	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.794255972 CEST	1.1.1.1	192.168.2.5	0xe611	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.794255972 CEST	1.1.1.1	192.168.2.5	0xe611	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.794255972 CEST	1.1.1.1	192.168.2.5	0xe611	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.881830931 CEST	1.1.1.1	192.168.2.5	0x3f8a	No error (0)	googleads.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.881830931 CEST	1.1.1.1	192.168.2.5	0x3f8a	No error (0)	googleads.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.881830931 CEST	1.1.1.1	192.168.2.5	0x3f8a	No error (0)	googleads.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.881830931 CEST	1.1.1.1	192.168.2.5	0x3f8a	No error (0)	googleads.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.881946087 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:17:58.914030075 CEST	1.1.1.1	192.168.2.5	0x5437	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914030075 CEST	1.1.1.1	192.168.2.5	0x5437	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914030075 CEST	1.1.1.1	192.168.2.5	0x5437	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914030075 CEST	1.1.1.1	192.168.2.5	0x5437	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914030075 CEST	1.1.1.1	192.168.2.5	0x5437	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914488077 CEST	1.1.1.1	192.168.2.5	0x19d	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:58.914488077 CEST	1.1.1.1	192.168.2.5	0x19d	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:59.836046934 CEST	1.1.1.1	192.168.2.5	0xb36f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:59.836046934 CEST	1.1.1.1	192.168.2.5	0xb36f	No error (0)	d1ykf07e75w7ss.cloudfront.net		52.85.204.136	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:59.836220980 CEST	1.1.1.1	192.168.2.5	0x1b90	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:59.837181091 CEST	1.1.1.1	192.168.2.5	0xe1fd	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:17:59.837181091 CEST	1.1.1.1	192.168.2.5	0xe1fd	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:17:59.837193012 CEST	1.1.1.1	192.168.2.5	0x6722	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:00.434932947 CEST	1.1.1.1	192.168.2.5	0x7172	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.804251909 CEST	1.1.1.1	192.168.2.5	0x5cd8	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:00.804565907 CEST	1.1.1.1	192.168.2.5	0x36dc	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:00.804565907 CEST	1.1.1.1	192.168.2.5	0x36dc	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.008321047 CEST	1.1.1.1	192.168.2.5	0x9e69	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.008321047 CEST	1.1.1.1	192.168.2.5	0x9e69	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.008321047 CEST	1.1.1.1	192.168.2.5	0x9e69	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.008321047 CEST	1.1.1.1	192.168.2.5	0x9e69	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.011300087 CEST	1.1.1.1	192.168.2.5	0x154d	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.011300087 CEST	1.1.1.1	192.168.2.5	0x154d	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.011300087 CEST	1.1.1.1	192.168.2.5	0x154d	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.011300087 CEST	1.1.1.1	192.168.2.5	0x154d	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028029919 CEST	1.1.1.1	192.168.2.5	0x638b	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028029919 CEST	1.1.1.1	192.168.2.5	0x638b	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028394938 CEST	1.1.1.1	192.168.2.5	0x8cb8	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028394938 CEST	1.1.1.1	192.168.2.5	0x8cb8	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028394938 CEST	1.1.1.1	192.168.2.5	0x8cb8	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028542995 CEST	1.1.1.1	192.168.2.5	0xb9d6	No error (0)	e-10220.adzerk.net	e-10220-us-east-1.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028542995 CEST	1.1.1.1	192.168.2.5	0xb9d6	No error (0)	e-10220-us-east-1.adzerk.net	e-prod-alb-s105-us-east-1-01.adzerk.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028542995 CEST	1.1.1.1	192.168.2.5	0xb9d6	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		3.218.116.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028542995 CEST	1.1.1.1	192.168.2.5	0xb9d6	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		44.195.207.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028542995 CEST	1.1.1.1	192.168.2.5	0xb9d6	No error (0)	e-prod-alb-s105-us-east-1-01.adzerk.net		54.81.241.151	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.028595924 CEST	1.1.1.1	192.168.2.5	0xa68f	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:01.727782965 CEST	1.1.1.1	192.168.2.5	0x8beb	No error (0)	adservice.google.com		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.727782965 CEST	1.1.1.1	192.168.2.5	0x8beb	No error (0)	adservice.google.com		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.727782965 CEST	1.1.1.1	192.168.2.5	0x8beb	No error (0)	adservice.google.com		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.727782965 CEST	1.1.1.1	192.168.2.5	0x8beb	No error (0)	adservice.google.com		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.728022099 CEST	1.1.1.1	192.168.2.5	0x71b4	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:01.826561928 CEST	1.1.1.1	192.168.2.5	0xbadd	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.826561928 CEST	1.1.1.1	192.168.2.5	0xbadd	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.826781988 CEST	1.1.1.1	192.168.2.5	0x9228	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:01.830760956 CEST	1.1.1.1	192.168.2.5	0x3209	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.830760956 CEST	1.1.1.1	192.168.2.5	0x3209	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:01.832551956 CEST	1.1.1.1	192.168.2.5	0xf4f8	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:02.011912107 CEST	1.1.1.1	192.168.2.5	0x243e	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.79	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.011912107 CEST	1.1.1.1	192.168.2.5	0x243e	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.011912107 CEST	1.1.1.1	192.168.2.5	0x243e	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.011912107 CEST	1.1.1.1	192.168.2.5	0x243e	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.366167068 CEST	1.1.1.1	192.168.2.5	0x839d	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.366167068 CEST	1.1.1.1	192.168.2.5	0x839d	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.366167068 CEST	1.1.1.1	192.168.2.5	0x839d	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.366167068 CEST	1.1.1.1	192.168.2.5	0x839d	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.611567974 CEST	1.1.1.1	192.168.2.5	0xe77a	No error (0)	adservice.google.com		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.611567974 CEST	1.1.1.1	192.168.2.5	0xe77a	No error (0)	adservice.google.com		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.611567974 CEST	1.1.1.1	192.168.2.5	0xe77a	No error (0)	adservice.google.com		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.611567974 CEST	1.1.1.1	192.168.2.5	0xe77a	No error (0)	adservice.google.com		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.611996889 CEST	1.1.1.1	192.168.2.5	0x5d17	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:02.861314058 CEST	1.1.1.1	192.168.2.5	0x1dee	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:02.861378908 CEST	1.1.1.1	192.168.2.5	0xd959	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:02.861378908 CEST	1.1.1.1	192.168.2.5	0xd959	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.861378908 CEST	1.1.1.1	192.168.2.5	0xd959	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.861378908 CEST	1.1.1.1	192.168.2.5	0xd959	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.861378908 CEST	1.1.1.1	192.168.2.5	0xd959	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.866873980 CEST	1.1.1.1	192.168.2.5	0x3ab0	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.866873980 CEST	1.1.1.1	192.168.2.5	0x3ab0	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.866873980 CEST	1.1.1.1	192.168.2.5	0x3ab0	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.79	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:02.866873980 CEST	1.1.1.1	192.168.2.5	0x3ab0	No error (0)	ara.paa-reporting-advertising.amazon		54.230.21.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.490844965 CEST	1.1.1.1	192.168.2.5	0xd481	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.491384983 CEST	1.1.1.1	192.168.2.5	0x999f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:03.533204079 CEST	1.1.1.1	192.168.2.5	0xa35d	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.533204079 CEST	1.1.1.1	192.168.2.5	0xa35d	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.533204079 CEST	1.1.1.1	192.168.2.5	0xa35d	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.545856953 CEST	1.1.1.1	192.168.2.5	0x3b42	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.555442095 CEST	1.1.1.1	192.168.2.5	0x368f	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.555442095 CEST	1.1.1.1	192.168.2.5	0x368f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.555442095 CEST	1.1.1.1	192.168.2.5	0x368f	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674151897 CEST	1.1.1.1	192.168.2.5	0xa3b5	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674189091 CEST	1.1.1.1	192.168.2.5	0xc5	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674189091 CEST	1.1.1.1	192.168.2.5	0xc5	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674189091 CEST	1.1.1.1	192.168.2.5	0xc5	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674189091 CEST	1.1.1.1	192.168.2.5	0xc5	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:03.674189091 CEST	1.1.1.1	192.168.2.5	0xc5	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421031952 CEST	1.1.1.1	192.168.2.5	0xb2a4	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.421257019 CEST	1.1.1.1	192.168.2.5	0x7c41	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.440843105 CEST	1.1.1.1	192.168.2.5	0xba77	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.441924095 CEST	1.1.1.1	192.168.2.5	0x5a0b	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.441924095 CEST	1.1.1.1	192.168.2.5	0x5a0b	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.441924095 CEST	1.1.1.1	192.168.2.5	0x5a0b	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467694044 CEST	1.1.1.1	192.168.2.5	0x96f0	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467730999 CEST	1.1.1.1	192.168.2.5	0x7985	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467730999 CEST	1.1.1.1	192.168.2.5	0x7985	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.467730999 CEST	1.1.1.1	192.168.2.5	0x7985	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.475621939 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:04.475621939 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.475621939 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.475621939 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.475621939 CEST	1.1.1.1	192.168.2.5	0x13db	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:04.476192951 CEST	1.1.1.1	192.168.2.5	0x899a	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:05.616545916 CEST	1.1.1.1	192.168.2.5	0xd073	No error (0)	cdn.brandmetrics.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:05.616890907 CEST	1.1.1.1	192.168.2.5	0x3196	No error (0)	cdn.brandmetrics.com		172.67.69.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:05.616890907 CEST	1.1.1.1	192.168.2.5	0x3196	No error (0)	cdn.brandmetrics.com		104.26.1.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:05.616890907 CEST	1.1.1.1	192.168.2.5	0x3196	No error (0)	cdn.brandmetrics.com		104.26.0.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.493596077 CEST	1.1.1.1	192.168.2.5	0xa389	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.493596077 CEST	1.1.1.1	192.168.2.5	0xa389	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.493596077 CEST	1.1.1.1	192.168.2.5	0xa389	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.502346992 CEST	1.1.1.1	192.168.2.5	0x4827	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.502346992 CEST	1.1.1.1	192.168.2.5	0x4827	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.502346992 CEST	1.1.1.1	192.168.2.5	0x4827	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:06.502346992 CEST	1.1.1.1	192.168.2.5	0x4827	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:07.207459927 CEST	1.1.1.1	192.168.2.5	0xa3af	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.207459927 CEST	1.1.1.1	192.168.2.5	0xa3af	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.207459927 CEST	1.1.1.1	192.168.2.5	0xa3af	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.271155119 CEST	1.1.1.1	192.168.2.5	0x9991	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.271155119 CEST	1.1.1.1	192.168.2.5	0x9991	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.271155119 CEST	1.1.1.1	192.168.2.5	0x9991	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:07.325033903 CEST	1.1.1.1	192.168.2.5	0xc8b9	No error (0)	www.datadoghq-browser-agent.com		18.164.171.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:08.902846098 CEST	1.1.1.1	192.168.2.5	0x37d3	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:08.902846098 CEST	1.1.1.1	192.168.2.5	0x37d3	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:08.902846098 CEST	1.1.1.1	192.168.2.5	0x37d3	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:08.902846098 CEST	1.1.1.1	192.168.2.5	0x37d3	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:09.736649036 CEST	1.1.1.1	192.168.2.5	0xc0e0	No error (0)	prod-cdn.wetransfer.net		13.226.228.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:09.736649036 CEST	1.1.1.1	192.168.2.5	0xc0e0	No error (0)	prod-cdn.wetransfer.net		13.226.228.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:09.736649036 CEST	1.1.1.1	192.168.2.5	0xc0e0	No error (0)	prod-cdn.wetransfer.net		13.226.228.94	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:09.736649036 CEST	1.1.1.1	192.168.2.5	0xc0e0	No error (0)	prod-cdn.wetransfer.net		13.226.228.74	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:10.847764015 CEST	1.1.1.1	192.168.2.5	0xd483	No error (0)	rum.browser-intake-datadoghq.eu		34.149.169.145	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:11.635492086 CEST	1.1.1.1	192.168.2.5	0x47a2	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:11.635492086 CEST	1.1.1.1	192.168.2.5	0x47a2	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:11.635492086 CEST	1.1.1.1	192.168.2.5	0x47a2	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:11.635492086 CEST	1.1.1.1	192.168.2.5	0x47a2	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:12.044970989 CEST	1.1.1.1	192.168.2.5	0x7d02	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:12.044970989 CEST	1.1.1.1	192.168.2.5	0x7d02	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:13.570666075 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:14.153188944 CEST	1.1.1.1	192.168.2.5	0xcf9d	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:14.153188944 CEST	1.1.1.1	192.168.2.5	0xcf9d	No error (0)	donny.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:14.153188944 CEST	1.1.1.1	192.168.2.5	0xcf9d	No error (0)	donny.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:15.715080023 CEST	1.1.1.1	192.168.2.5	0x112	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:15.715080023 CEST	1.1.1.1	192.168.2.5	0x112	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:15.715147018 CEST	1.1.1.1	192.168.2.5	0xa591	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:15.731249094 CEST	1.1.1.1	192.168.2.5	0x3ad1	No error (0)	di.rlcdn.com		34.49.212.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:16.336951017 CEST	1.1.1.1	192.168.2.5	0x1763	No error (0)	donny.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:16.336951017 CEST	1.1.1.1	192.168.2.5	0x1763	No error (0)	donny.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:16.336951017 CEST	1.1.1.1	192.168.2.5	0x1763	No error (0)	donny.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:19.109349012 CEST	1.1.1.1	192.168.2.5	0x591b	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:19.109349012 CEST	1.1.1.1	192.168.2.5	0x591b	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:19.109349012 CEST	1.1.1.1	192.168.2.5	0x591b	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:19.109349012 CEST	1.1.1.1	192.168.2.5	0x591b	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:20.129137039 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:20.129195929 CEST	1.1.1.1	192.168.2.5	0xa1bb	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:20.129195929 CEST	1.1.1.1	192.168.2.5	0xa1bb	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:20.986649990 CEST	1.1.1.1	192.168.2.5	0x6842	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:20.986855984 CEST	1.1.1.1	192.168.2.5	0x48	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:21.189233065 CEST	1.1.1.1	192.168.2.5	0xc4a5	No error (0)	cm.g.doubleclick.net		74.125.137.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.189233065 CEST	1.1.1.1	192.168.2.5	0xc4a5	No error (0)	cm.g.doubleclick.net		74.125.137.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.189233065 CEST	1.1.1.1	192.168.2.5	0xc4a5	No error (0)	cm.g.doubleclick.net		74.125.137.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.189233065 CEST	1.1.1.1	192.168.2.5	0xc4a5	No error (0)	cm.g.doubleclick.net		74.125.137.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.428741932 CEST	1.1.1.1	192.168.2.5	0x7605	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 04:18:21.428792000 CEST	1.1.1.1	192.168.2.5	0x13a9	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:21.428792000 CEST	1.1.1.1	192.168.2.5	0x13a9	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:27.319787979 CEST	1.1.1.1	192.168.2.5	0xc405	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:27.319813013 CEST	1.1.1.1	192.168.2.5	0x24c1	No error (0)	ad.doubleclick.net		142.250.101.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:27.319813013 CEST	1.1.1.1	192.168.2.5	0x24c1	No error (0)	ad.doubleclick.net		142.250.101.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:29.227890015 CEST	1.1.1.1	192.168.2.5	0x6d89	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:29.227890015 CEST	1.1.1.1	192.168.2.5	0x6d89	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:29.227890015 CEST	1.1.1.1	192.168.2.5	0x6d89	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:29.229537010 CEST	1.1.1.1	192.168.2.5	0x33da	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:29.229537010 CEST	1.1.1.1	192.168.2.5	0x33da	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:29.248979092 CEST	1.1.1.1	192.168.2.5	0x6ec5	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:29.248979092 CEST	1.1.1.1	192.168.2.5	0x6ec5	No error (0)	user-data-us-west.bidswitch.net		35.212.133.238	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:29.250492096 CEST	1.1.1.1	192.168.2.5	0x2938	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:32.845171928 CEST	1.1.1.1	192.168.2.5	0xd6f9	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:32.845171928 CEST	1.1.1.1	192.168.2.5	0xd6f9	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:32.845540047 CEST	1.1.1.1	192.168.2.5	0x12fb	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:33.137213945 CEST	1.1.1.1	192.168.2.5	0x2792	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:33.137213945 CEST	1.1.1.1	192.168.2.5	0x2792	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.853379011 CEST	1.1.1.1	192.168.2.5	0xc63c	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.853379011 CEST	1.1.1.1	192.168.2.5	0xc63c	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.853379011 CEST	1.1.1.1	192.168.2.5	0xc63c	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.853379011 CEST	1.1.1.1	192.168.2.5	0xc63c	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.870470047 CEST	1.1.1.1	192.168.2.5	0x6d24	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.870470047 CEST	1.1.1.1	192.168.2.5	0x6d24	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.870470047 CEST	1.1.1.1	192.168.2.5	0x6d24	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:44.870470047 CEST	1.1.1.1	192.168.2.5	0x6d24	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.156161070 CEST	1.1.1.1	192.168.2.5	0x5a66	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.156161070 CEST	1.1.1.1	192.168.2.5	0x5a66	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.156161070 CEST	1.1.1.1	192.168.2.5	0x5a66	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.156161070 CEST	1.1.1.1	192.168.2.5	0x5a66	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.689747095 CEST	1.1.1.1	192.168.2.5	0xd7c1	No error (0)	ad.doubleclick.net		142.250.101.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.689747095 CEST	1.1.1.1	192.168.2.5	0xd7c1	No error (0)	ad.doubleclick.net		142.250.101.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:47.690037966 CEST	1.1.1.1	192.168.2.5	0x53fd	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:49.188127995 CEST	1.1.1.1	192.168.2.5	0x9270	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.188127995 CEST	1.1.1.1	192.168.2.5	0x9270	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:49.188465118 CEST	1.1.1.1	192.168.2.5	0xcd2c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:50.096884966 CEST	1.1.1.1	192.168.2.5	0x4d1d	No error (0)	track.activemetering.com	d3k6gt80y743t4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.096884966 CEST	1.1.1.1	192.168.2.5	0x4d1d	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.096884966 CEST	1.1.1.1	192.168.2.5	0x4d1d	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.096884966 CEST	1.1.1.1	192.168.2.5	0x4d1d	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.096884966 CEST	1.1.1.1	192.168.2.5	0x4d1d	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.097063065 CEST	1.1.1.1	192.168.2.5	0xa893	No error (0)	track.activemetering.com	d3k6gt80y743t4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.101937056 CEST	1.1.1.1	192.168.2.5	0x55f5	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.102093935 CEST	1.1.1.1	192.168.2.5	0x737e	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106488943 CEST	1.1.1.1	192.168.2.5	0x348d	No error (0)	pixel.adsafeprotected.com	orpixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106488943 CEST	1.1.1.1	192.168.2.5	0x348d	No error (0)	orpixel.adsafeprotected.com	vapixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106488943 CEST	1.1.1.1	192.168.2.5	0x348d	No error (0)	vapixel.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	pixel.adsafeprotected.com	orpixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	orpixel.adsafeprotected.com	vapixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	vapixel.adsafeprotected.com	firewall-external-1524972847.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		34.196.145.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		44.197.45.203	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.5.224.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.210.217.48	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.205.72.179	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		54.175.164.48	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		3.223.177.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:50.106532097 CEST	1.1.1.1	192.168.2.5	0x5a1f	No error (0)	firewall-external-1524972847.us-east-1.elb.amazonaws.com		52.4.202.240	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.053698063 CEST	1.1.1.1	192.168.2.5	0x55df	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.053698063 CEST	1.1.1.1	192.168.2.5	0x55df	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.053698063 CEST	1.1.1.1	192.168.2.5	0x55df	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.054349899 CEST	1.1.1.1	192.168.2.5	0xa7db	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.054349899 CEST	1.1.1.1	192.168.2.5	0xa7db	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.054349899 CEST	1.1.1.1	192.168.2.5	0xa7db	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065047979 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	track.activemetering.com	d3k6gt80y743t4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065047979 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.11	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065047979 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065047979 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.42	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065047979 CEST	1.1.1.1	192.168.2.5	0x5688	No error (0)	d3k6gt80y743t4.cloudfront.net		13.226.228.89	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.065706968 CEST	1.1.1.1	192.168.2.5	0x9d64	No error (0)	track.activemetering.com	d3k6gt80y743t4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:51.072127104 CEST	1.1.1.1	192.168.2.5	0xf160	No error (0)	cdn.lamp.avct.cloud		18.65.25.70	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.072127104 CEST	1.1.1.1	192.168.2.5	0xf160	No error (0)	cdn.lamp.avct.cloud		18.65.25.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.072127104 CEST	1.1.1.1	192.168.2.5	0xf160	No error (0)	cdn.lamp.avct.cloud		18.65.25.15	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.072127104 CEST	1.1.1.1	192.168.2.5	0xf160	No error (0)	cdn.lamp.avct.cloud		18.65.25.72	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.394771099 CEST	1.1.1.1	192.168.2.5	0x7816	No error (0)	tagging.wetransfer.com		13.33.21.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.394771099 CEST	1.1.1.1	192.168.2.5	0x7816	No error (0)	tagging.wetransfer.com		13.33.21.123	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.394771099 CEST	1.1.1.1	192.168.2.5	0x7816	No error (0)	tagging.wetransfer.com		13.33.21.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.394771099 CEST	1.1.1.1	192.168.2.5	0x7816	No error (0)	tagging.wetransfer.com		13.33.21.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.858083010 CEST	1.1.1.1	192.168.2.5	0x4b1	No error (0)	ad.doubleclick.net		142.250.101.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.858083010 CEST	1.1.1.1	192.168.2.5	0x4b1	No error (0)	ad.doubleclick.net		142.250.101.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:51.858254910 CEST	1.1.1.1	192.168.2.5	0x9b82	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:52.309344053 CEST	1.1.1.1	192.168.2.5	0xa95a	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:52.309344053 CEST	1.1.1.1	192.168.2.5	0xa95a	No error (0)	d162h6x3rxav67.cloudfront.net		18.164.174.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.309344053 CEST	1.1.1.1	192.168.2.5	0xa95a	No error (0)	d162h6x3rxav67.cloudfront.net		18.164.174.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.309344053 CEST	1.1.1.1	192.168.2.5	0xa95a	No error (0)	d162h6x3rxav67.cloudfront.net		18.164.174.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.309344053 CEST	1.1.1.1	192.168.2.5	0xa95a	No error (0)	d162h6x3rxav67.cloudfront.net		18.164.174.62	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.310736895 CEST	1.1.1.1	192.168.2.5	0xfe5f	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:52.319595098 CEST	1.1.1.1	192.168.2.5	0x74a4	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:52.320260048 CEST	1.1.1.1	192.168.2.5	0xebfd	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:52.326899052 CEST	1.1.1.1	192.168.2.5	0x8b16	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.326899052 CEST	1.1.1.1	192.168.2.5	0x8b16	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:52.326899052 CEST	1.1.1.1	192.168.2.5	0x8b16	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.245269060 CEST	1.1.1.1	192.168.2.5	0x856f	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.245790958 CEST	1.1.1.1	192.168.2.5	0x2efe	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407376051 CEST	1.1.1.1	192.168.2.5	0x9310	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407376051 CEST	1.1.1.1	192.168.2.5	0x9310	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407376051 CEST	1.1.1.1	192.168.2.5	0x9310	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407656908 CEST	1.1.1.1	192.168.2.5	0x8d86	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407656908 CEST	1.1.1.1	192.168.2.5	0x8d86	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.407656908 CEST	1.1.1.1	192.168.2.5	0x8d86	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:53.676470995 CEST	1.1.1.1	192.168.2.5	0x2634	No error (0)	measure.lamp.avct.cloud		99.80.74.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.676470995 CEST	1.1.1.1	192.168.2.5	0x2634	No error (0)	measure.lamp.avct.cloud		34.253.35.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:53.676470995 CEST	1.1.1.1	192.168.2.5	0x2634	No error (0)	measure.lamp.avct.cloud		34.240.239.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt.adsafeprotected.com	ordt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	ordt.adsafeprotected.com	dt-external-521234871.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		34.215.30.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		52.40.41.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		34.213.57.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		44.241.27.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		35.164.65.2	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		44.240.64.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		35.167.8.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040234089 CEST	1.1.1.1	192.168.2.5	0x597a	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		54.201.42.168	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040342093 CEST	1.1.1.1	192.168.2.5	0x5574	No error (0)	dt.adsafeprotected.com	vadt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:54.040342093 CEST	1.1.1.1	192.168.2.5	0x5574	No error (0)	vadt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:54.068459988 CEST	1.1.1.1	192.168.2.5	0x442b	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.068459988 CEST	1.1.1.1	192.168.2.5	0x442b	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.069164991 CEST	1.1.1.1	192.168.2.5	0x17e1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 04:18:54.855820894 CEST	1.1.1.1	192.168.2.5	0xf5b0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:54.855820894 CEST	1.1.1.1	192.168.2.5	0xf5b0	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:54.855843067 CEST	1.1.1.1	192.168.2.5	0x2110	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209036112 CEST	1.1.1.1	192.168.2.5	0x4df5	No error (0)	dt.adsafeprotected.com	vadt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209036112 CEST	1.1.1.1	192.168.2.5	0x4df5	No error (0)	vadt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt.adsafeprotected.com	ordt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	ordt.adsafeprotected.com	dt-external-521234871.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		34.215.30.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		52.40.41.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		34.213.57.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		44.241.27.90	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		35.167.8.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		44.240.64.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		35.164.65.2	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.209645033 CEST	1.1.1.1	192.168.2.5	0xf608	No error (0)	dt-external-521234871.us-west-2.elb.amazonaws.com		54.201.42.168	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.665517092 CEST	1.1.1.1	192.168.2.5	0x2a9a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.665517092 CEST	1.1.1.1	192.168.2.5	0x2a9a	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.665576935 CEST	1.1.1.1	192.168.2.5	0x419d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:18:55.770020008 CEST	1.1.1.1	192.168.2.5	0x194	No error (0)	wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.770020008 CEST	1.1.1.1	192.168.2.5	0x194	No error (0)	wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.770020008 CEST	1.1.1.1	192.168.2.5	0x194	No error (0)	wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:55.770020008 CEST	1.1.1.1	192.168.2.5	0x194	No error (0)	wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		52.88.50.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		44.237.30.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		54.218.244.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		44.238.108.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		44.228.164.153	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		54.201.201.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		52.39.50.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:57.833309889 CEST	1.1.1.1	192.168.2.5	0xf801	No error (0)	api.amplitude.com		44.240.111.24	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		54.218.244.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		52.88.50.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		44.228.164.153	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		44.238.108.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		44.237.30.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		54.201.201.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		44.240.111.24	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.035599947 CEST	1.1.1.1	192.168.2.5	0x8444	No error (0)	api.amplitude.com		52.39.50.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.721908092 CEST	1.1.1.1	192.168.2.5	0xe381	No error (0)	cdn.wetransfer.com		18.154.132.120	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.721908092 CEST	1.1.1.1	192.168.2.5	0xe381	No error (0)	cdn.wetransfer.com		18.154.132.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.721908092 CEST	1.1.1.1	192.168.2.5	0xe381	No error (0)	cdn.wetransfer.com		18.154.132.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:18:59.721908092 CEST	1.1.1.1	192.168.2.5	0xe381	No error (0)	cdn.wetransfer.com		18.154.132.38	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:02.191787958 CEST	1.1.1.1	192.168.2.5	0x914b	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:02.193866968 CEST	1.1.1.1	192.168.2.5	0x8348	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:02.193866968 CEST	1.1.1.1	192.168.2.5	0x8348	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:02.193866968 CEST	1.1.1.1	192.168.2.5	0x8348	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:03.860074043 CEST	1.1.1.1	192.168.2.5	0xde79	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:03.860074043 CEST	1.1.1.1	192.168.2.5	0xde79	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		52.210.6.56	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:03.860074043 CEST	1.1.1.1	192.168.2.5	0xde79	No error (0)	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		34.250.136.134	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:03.860486031 CEST	1.1.1.1	192.168.2.5	0x8194	No error (0)	snowplow.wetransfer.com	sp-20200324121949090600000008-54648268.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:04.480880976 CEST	1.1.1.1	192.168.2.5	0x2ec7	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:04.480880976 CEST	1.1.1.1	192.168.2.5	0x2ec7	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.480880976 CEST	1.1.1.1	192.168.2.5	0x2ec7	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.480880976 CEST	1.1.1.1	192.168.2.5	0x2ec7	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.480880976 CEST	1.1.1.1	192.168.2.5	0x2ec7	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.481157064 CEST	1.1.1.1	192.168.2.5	0xef17	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:04.942320108 CEST	1.1.1.1	192.168.2.5	0x475a	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.942320108 CEST	1.1.1.1	192.168.2.5	0x475a	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:04.942320108 CEST	1.1.1.1	192.168.2.5	0x475a	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131357908 CEST	1.1.1.1	192.168.2.5	0x4882	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131503105 CEST	1.1.1.1	192.168.2.5	0xe81c	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131503105 CEST	1.1.1.1	192.168.2.5	0xe81c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131503105 CEST	1.1.1.1	192.168.2.5	0xe81c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131503105 CEST	1.1.1.1	192.168.2.5	0xe81c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:05.131503105 CEST	1.1.1.1	192.168.2.5	0xe81c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.890214920 CEST	1.1.1.1	192.168.2.5	0x273b	No error (0)	lebowski.wetransfer.com		52.213.228.117	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.890214920 CEST	1.1.1.1	192.168.2.5	0x273b	No error (0)	lebowski.wetransfer.com		34.246.249.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.890214920 CEST	1.1.1.1	192.168.2.5	0x273b	No error (0)	lebowski.wetransfer.com		99.80.201.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.906461000 CEST	1.1.1.1	192.168.2.5	0xa56d	No error (0)	nolan.wetransfer.net		18.154.206.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.906461000 CEST	1.1.1.1	192.168.2.5	0xa56d	No error (0)	nolan.wetransfer.net		18.154.206.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.906461000 CEST	1.1.1.1	192.168.2.5	0xa56d	No error (0)	nolan.wetransfer.net		18.154.206.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:07.906461000 CEST	1.1.1.1	192.168.2.5	0xa56d	No error (0)	nolan.wetransfer.net		18.154.206.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:09.408868074 CEST	1.1.1.1	192.168.2.5	0x45b2	No error (0)	backgrounds.wetransfer.net		18.154.132.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:09.408868074 CEST	1.1.1.1	192.168.2.5	0x45b2	No error (0)	backgrounds.wetransfer.net		18.154.132.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:09.408868074 CEST	1.1.1.1	192.168.2.5	0x45b2	No error (0)	backgrounds.wetransfer.net		18.154.132.39	A (IP address)	IN (0x0001)	false
Apr 24, 2024 04:19:09.408868074 CEST	1.1.1.1	192.168.2.5	0x45b2	No error (0)	backgrounds.wetransfer.net		18.154.132.128	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	18.65.3.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:42 UTC	736	OUT	GET /t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05 HTTP/1.1 Host: we.tl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:43 UTC	774	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close Cache-Control: public, max-age=3600 Date: Wed, 24 Apr 2024 02:17:43 GMT Expires: Wed, 24 Apr 2024 03:17:43 GMT Location: https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05 Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-request-id: 1162decbcd08b1558aa2e4af7650118f x-xss-protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 22fad7950a6073b04b079f0ae040a8dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P1 X-Amz-Cf-Id: ZOWiGPWp2IOHYRfjxmvmufbyV-Wz4AmFxdXxdEO1_4ZtoSkgEbYE9w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:43 UTC	796	OUT	GET /downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05 HTTP/1.1 Host: wetransfer.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:44 UTC	890	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10479 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:17:44 GMT ETag: "28ef-Uo8zus1boBahys1z4NvxA6kxJu0" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Yc3-IYrHPGTxxpH-li3Qg9j4OUWHfAvDn_SSCJVQWhR6R2gv7eGmHw==
2024-04-24 02:17:44 UTC	10479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:44 UTC	660	OUT	GET /c98be9eb9f206547aea10d46f253ea37ea3d3db7/config.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
2024-04-24 02:17:44 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1601 Connection: close Cache-Control: public, max-age=315360000, s-maxage=31530000 Date: Tue, 23 Apr 2024 14:52:26 GMT Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; Max-Age=63072000; Domain=.wetransfer.com; Path=/ Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KNreXqysjvyt3cgKaqH_WnlOxciMqsvHeiX8mfIA-LS54Pux4WRBnQ== Age: 41118
2024-04-24 02:17:44 UTC	1601	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 77 2e 5f 5f 61 70 70 5f 63 6f 6e 66 69 67 3d 7b 65 6e 76 3a 7b 22 56 45 52 53 49 4f 4e 22 3a 22 63 39 38 62 65 39 65 62 39 66 32 30 36 35 34 37 61 65 61 31 30 64 34 36 66 32 35 33 65 61 33 37 65 61 33 64 33 64 62 37 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 54 52 49 50 45 5f 4b 45 59 22 3a 22 70 6b 5f 6c 69 76 65 5f 4d 72 32 4c 71 50 73 77 73 46 6a 7a 43 6a 42 54 4a 43 6d 4f 58 42 30 53 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 4e 4f 57 50 4c 4f 57 5f 43 4f 4c 4c 45 43 54 4f 52 22 3a 22 73 6e 6f 77 70 6c 6f 77 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 43 5f 53 45 52 56 45 52 5f 45 4e 56 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 4e 45 58 54 5f 50 55 42 4c 49 Data Ascii: (function(w){w.__app_config={env:{"VERSION":"c98be9eb9f206547aea10d46f253ea37ea3d3db7","NEXT_PUBLIC_STRIPE_KEY":"pk_live_Mr2LqPswsFjzCjBTJCmOXB0S","NEXT_PUBLIC_SNOWPLOW_COLLECTOR":"snowplow.wetransfer.com","NEXT_PUBLIC_SERVER_ENV":"production","NEXT_PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:44 UTC	663	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
2024-04-24 02:17:45 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 11:40:40 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hfO2NzMGyrQuC_M6R16Ul4y7t-KQt87m5xtUlD5LnwhHoYk6mFpi0Q== Age: 52626
2024-04-24 02:17:45 UTC	15784	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 3a 33 2e 37 35 65 6d 20 61 75 74 6f 20 30 3b 77 69 64 74 68 3a 31 30 2e 31 32 35 65 6d 7d 7d 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 32 2e 35 65 6d 7d 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 2d 2d 65 6e 61 62 6c 65 64 3a 68 Data Ascii: tica Neue,Lucida Grande,sans-serif}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons{margin:3.75em auto 0;width:10.125em}}.onboarding__form-buttons .button{margin-top:0;width:12.5em}.onboarding__form-buttons .button--enabled:h
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4e 6f 72 6d 61 6c 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 72 65 64 3b Data Ascii: ly:-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Normal,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;color:red;
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 2c 23 66 66 66 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 72 65 6d 3b 6c 65 66 74 3a 2d 31 72 65 6d 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 34 38 34 61 34 64 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f Data Ascii: ound:linear-gradient(90deg,hsla(0,0%,100%,0),#fff);content:"";display:block;width:1rem;left:-1rem;height:100%;position:absolute}.contact-item .contact-item__option{color:#484a4d;font-weight:400;font-family:-apple-system,\.SFNSText-Regular,San Francisco,Ro
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 61 63 63 6f 75 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 6d 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 70 61 79 6d 65 6e 74 3e 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 61 63 63 6f 75 6e 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 70 61 79 6d 65 6e 74 3e 61 20 2e 62 75 74 74 6f 6e 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 Data Ascii: ile-ready .account__content .accountInformation form button[type=submit],.is-mobile-ready .account__content .changepassword .button,.is-mobile-ready .account__content .payment>.button,.is-mobile-ready .account__content .payment>a .button,.is-mobile-ready
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 61 67 65 2d 6c 69 6e 6b 2c 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 20 61 5b 68 72 65 66 2a 3d 75 70 6c 6f 61 64 5d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 2e 38 31 32 35 65 6d 3b 6d 61 72 67 69 6e 3a 2e 39 33 37 35 65 6d 20 30 20 30 20 31 2e 31 32 35 65 6d 3b 77 69 64 74 68 3a 2e 38 31 32 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 20 73 76 67 7b 68 65 69 67 68 74 3a 31 2e 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 37 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 Data Ascii: age-link,.form-notification__message a[href*=upload].form-notification__message-link{color:#fff}.form-notification__icon{float:left;height:.8125em;margin:.9375em 0 0 1.125em;width:.8125em}.form-notification__icon svg{height:1.875em;width:.75em}.form-notif
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 73 5f 5f 6c 69 73 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 37 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 37 2e 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 Data Ascii: ustify-content:center}.is-mobile-ready .free-account-tiers .tiers__list{flex-direction:column;align-items:center}.free-account-tiers .tier{display:flex;flex-direction:column;justify-content:space-between;width:17.5em;max-width:17.5em;background-color:#fff
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 2e 37 35 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 3a 31 2e 35 36 32 35 65 6d 20 31 2e 32 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 2d 2d 69 6e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 36 38 66 66 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 2e 32 35 65 6d 7d 7d 2e 61 63 63 6f 75 6e 74 77 61 72 6e 69 6e 67 20 68 32 7b 66 6f 6e 74 2d 77 Data Ascii: in-bottom:1.25em;margin-top:-3.75em;min-height:6.25em;padding:1.5625em 1.25em;position:relative;width:100%;z-index:1}.accountwarning--inactive{background-color:#5268ff}@media(max-width:48em){.accountwarning{padding-bottom:6.25em}}.accountwarning h2{font-w
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 20 2d 31 70 78 20 30 20 30 20 23 65 38 65 62 65 64 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 73 75 62 69 74 65 6d 5f 5f 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 72 65 6d 3b 74 6f 70 3a 31 2e 31 32 35 72 65 6d 3b 77 69 64 74 68 3a 2e 36 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 2e 36 32 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 63 6f 6c 6f 72 3a 23 31 36 31 36 31 36 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 Data Ascii: -1px 0 0 #e8ebed}.is-mobile-ready .nav__subitem{display:block;position:relative}.is-mobile-ready .nav__subitem__arrow{position:absolute;right:1rem;top:1.125rem;width:.625rem;height:.625rem;transition:transform .25s ease-in-out;color:#161616;flex-shrink:0
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 68 3a 31 30 30 25 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 20 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 3a 68 6f 76 65 72 2c 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 2d 2d 67 72 61 62 62 65 64 20 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 7d 2e 73 63 72 6f 6c 6c 61 62 6c 65 5f 5f 77 69 64 74 68 2d 74 65 73 74 7b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f Data Ascii: h:100%}.scrollable .scrollable__scrollbar-thumb:hover,.scrollable__scrollbar-thumb--grabbed .scrollable__scrollbar-thumb{background:rgba(0,0,0,.25)}.scrollable__width-test{-ms-overflow-style:none;-webkit-overflow-scrolling:touch;height:100px;overflow:scro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:44 UTC	663	OUT	GET /_next/static/css/bacf6ffa65b559f2.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
2024-04-24 02:17:45 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1718 Connection: close Date: Sun, 11 Feb 2024 18:16:35 GMT Last-Modified: Sat, 10 Feb 2024 08:28:19 GMT ETag: "7bc594d2f21c7b14c2bbb8ea785276a0" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hcUKIUNwZ0ooqdQ2QLttHh2j1Mo86pSTUkoXx3ft33Dc3Wq3cN0UgQ== Age: 6249671
2024-04-24 02:17:45 UTC	1718	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:44 UTC	659	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=6d20076f-1863-4967-aaf6-7aa9b3744bd2.1713925064012.0.1713925064012.
2024-04-24 02:17:45 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: A21SN4l6R8SDgxfixDBW5_2qZLLrBFxgnEwXz2eQz-9H01s1dXrHOA== Age: 41119
2024-04-24 02:17:45 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	661	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:45 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Thu, 22 Feb 2024 02:45:11 GMT Last-Modified: Wed, 21 Feb 2024 21:08:01 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sqVDfsRZtsY8xjaQbUw_RTSBGP0UCGjvn_OmgzJOVbI4Ryw5dIC0ng== Age: 5355155
2024-04-24 02:17:45 UTC	15775	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 4d 6f 75 73 65 45 6e 74 65 72 22 3a 28 72 3d 21 72 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 72 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 28 65 3d 65 2e 74 79 70 65 29 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 65 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 65 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 65 29 29 2c 65 3d 21 72 3b 62 72 65 61 6b 20 65 3b 64 65 66 61 75 6c 74 3a 65 3d 21 31 7d 69 66 28 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 33 31 2c 74 2c 74 79 70 65 6f 66 20 6e 29 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 6a 65 3d 21 31 3b 69 66 28 66 29 74 72 79 7b 76 61 72 20 42 65 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: MouseEnter":(r=!r.disabled)\|\|(r=!("button"===(e=e.type)\|\|"input"===e\|\|"select"===e\|\|"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!==typeof n)throw Error(o(231,t,typeof n));return n}var je=!1;if(f)try{var Be={};Object.defineP
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 29 2e 61 6e 63 68 6f 72 4e 6f 64 65 2c 61 6e 63 68 6f 72 4f 66 66 73 65 74 3a 72 2e 61 6e 63 68 6f 72 4f 66 66 73 65 74 2c 66 6f 63 75 73 4e 6f 64 65 3a 72 2e 66 6f 63 75 73 4e 6f 64 65 2c 66 6f 63 75 73 4f 66 66 73 65 74 3a 72 2e 66 6f 63 75 73 4f 66 66 73 65 74 7d 2c 6b 72 26 26 64 72 28 6b 72 2c 72 29 7c 7c 28 6b 72 3d 72 2c 30 3c 28 72 3d 44 72 28 77 72 2c 22 6f 6e 53 65 6c 65 63 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 74 3d 6e 65 77 20 70 6e 28 22 6f 6e 53 65 6c 65 63 74 22 2c 22 73 65 6c 65 63 74 22 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 65 2e 70 75 73 68 28 7b Data Ascii: wnerDocument&&r.ownerDocument.defaultView\|\|window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&dr(kr,r)\|\|(kr=r,0<(r=Dr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 29 7b 69 66 28 65 3d 74 2e 65 66 66 65 63 74 73 2c 74 2e 65 66 66 65 63 74 73 3d 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 65 29 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 2c 6c 3d 72 2e 63 61 6c 6c 62 61 63 6b 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 29 7b 69 66 28 72 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 72 3d 6e 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 39 31 2c 6c 29 29 3b 6c 2e 63 61 6c 6c 28 72 29 7d 7d 7d 76 61 72 20 6d 61 3d 28 6e 65 77 20 72 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2e 72 65 66 73 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 65 2c 74 2c 6e 2c 72 29 7b 6e 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 28 72 2c 74 3d 65 2e 6d 65 6d Data Ascii: ){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],l=r.callback;if(null!==l){if(r.callback=null,r=n,"function"!==typeof l)throw Error(o(191,l));l.call(r)}}}var ma=(new r.Component).refs;function va(e,t,n,r){n=null===(n=n(r,t=e.mem
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 65 72 72 65 64 56 61 6c 75 65 3a 6c 6f 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 6c 6f 2c 75 73 65 4d 75 74 61 62 6c 65 53 6f 75 72 63 65 3a 6c 6f 2c 75 73 65 4f 70 61 71 75 65 49 64 65 6e 74 69 66 69 65 72 3a 6c 6f 2c 75 6e 73 74 61 62 6c 65 5f 69 73 4e 65 77 52 65 63 6f 6e 63 69 6c 65 72 3a 21 31 7d 2c 52 6f 3d 7b 72 65 61 64 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 6f 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 5d 2c 65 7d 2c 75 73 65 43 6f 6e 74 65 78 74 3a 6f 61 2c 75 73 65 45 66 66 65 63 74 3a 53 6f 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: erredValue:lo,useTransition:lo,useMutableSource:lo,useOpaqueIdentifier:lo,unstable_isNewReconciler:!1},Ro={readContext:oa,useCallback:function(e,t){return uo().memoizedState=[e,void 0===t?null:t],e},useContext:oa,useEffect:So,useImperativeHandle:function(
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 29 2c 74 2e 6c 61 6e 65 73 3d 33 33 35 35 34 34 33 32 29 7d 65 6c 73 65 7b 69 66 28 21 75 29 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 55 61 28 73 29 29 29 7b 69 66 28 74 2e 66 6c 61 67 73 7c 3d 36 34 2c 75 3d 21 30 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 28 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 2c 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6f 75 28 72 2c 21 30 29 2c 6e 75 6c 6c 3d 3d 3d 72 2e 74 61 69 6c 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 72 2e 74 61 69 6c 4d 6f 64 65 26 26 21 73 2e 61 6c 74 65 72 6e 61 74 65 26 26 21 6a 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 6c 61 73 74 45 66 66 65 63 74 3d 72 2e 6c 61 73 74 45 66 66 65 63 74 29 26 26 28 74 2e 6e 65 78 74 45 66 66 65 63 74 3d 6e 75 6c 6c Data Ascii: ),t.lanes=33554432)}else{if(!u)if(null!==(e=Ua(s))){if(t.flags\|=64,u=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags\|=4),ou(r,!0),null===r.tail&&"hidden"===r.tailMode&&!s.alternate&&!ja)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 3d 61 2e 70 69 6e 67 43 61 63 68 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 62 3f 28 62 3d 61 2e 70 69 6e 67 43 61 63 68 65 3d 6e 65 77 20 66 75 2c 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 3a 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 62 2e 67 65 74 28 73 29 29 26 26 28 69 3d 6e 65 77 20 53 65 74 2c 62 2e 73 65 74 28 73 2c 69 29 29 2c 21 69 2e 68 61 73 28 75 29 29 7b 69 2e 61 64 64 28 75 29 3b 76 61 72 20 77 3d 6a 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 2c 73 2c 75 29 3b 73 2e 74 68 65 6e 28 77 2c 77 29 7d 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 64 2e 6c 61 6e 65 73 3d 74 3b 62 72 65 61 6b 20 65 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 3b 69 3d 45 72 72 6f 72 28 28 71 28 75 2e 74 79 70 65 29 7c 7c 22 41 20 Data Ascii: =a.pingCache;if(null===b?(b=a.pingCache=new fu,i=new Set,b.set(s,i)):void 0===(i=b.get(s))&&(i=new Set,b.set(s,i)),!i.has(u)){i.add(u);var w=ji.bind(null,a,s,u);s.then(w,w)}d.flags\|=4096,d.lanes=t;break e}d=d.return}while(null!==d);i=Error((q(u.type)\|\|"A
2024-04-24 02:17:46 UTC	15917	IN	Data Raw: 3d 75 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 63 72 28 69 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 72 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 69 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 75 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 6c 2e 63 68 69 6c 64 72 65 6e 26 26 21 68 6c 2e 63 75 72 72 65 6e 74 29 7b 74 3d 61 75 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 69 3d 74 2e 63 68 69 6c 64 29 26 26 28 69 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 69 3b 29 7b 76 61 72 20 73 3d 69 2e 64 65 70 65 6e 64 65 6e 63 69 65 73 3b 69 66 28 Data Ascii: =u.value,0===(a=cr(i,a)?0:0\|("function"===typeof r._calculateChangedBits?r._calculateChangedBits(i,a):1073741823))){if(u.children===l.children&&!hl.current){t=au(e,t,n);break e}}else for(null!==(i=t.child)&&(i.return=t);null!==i;){var s=i.dependencies;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	656	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:45 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Sat, 21 Oct 2023 16:35:10 GMT Last-Modified: Fri, 20 Oct 2023 16:44:07 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fstt5M7gYEgUZF-0p-QYfENeJfMVUiuyMMcTlyvIdBmlwnJF3xKJ0g== Age: 16018955
2024-04-24 02:17:45 UTC	15774	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 29 2c 54 2e 69 73 53 73 72 26 26 22 2f 34 30 34 22 21 3d 3d 44 2e 70 61 67 65 26 26 22 2f 5f 65 72 72 6f 72 22 21 3d 3d 44 2e 70 61 67 65 26 26 28 44 2e 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 44 2e 6e 65 78 74 45 78 70 6f 72 74 26 26 28 76 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 54 2e 70 61 74 68 6e 61 6d 65 29 7c 7c Data Ascii: guments)}return a(r,[{key:"componentDidCatch",value:function(e,t){this.props.fn(e,t)}},{key:"componentDidMount",value:function(){this.scrollToHash(),T.isSsr&&"/404"!==D.page&&"/_error"!==D.page&&(D.isFallback\|\|D.nextExport&&(v.isDynamicRoute(T.pathname)\|\|
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 63 72 69 70 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 29 7d 2c 74 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 29 7d 28 65 29 29 2c 74 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 63 2e 73 65 74 28 65 2c 74 3d 66 65 74 63 68 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 74 79 6c 65 73 68 65 65 74 3a 20 22 2e 63 6f Data Ascii: new Error("Failed to load script: ".concat(e))))},t.crossOrigin=void 0,t.src=e,document.body.appendChild(t)}))}(e)),t))},r=function(e){var t=c.get(e);return t\|\|(c.set(e,t=fetch(e).then((function(t){if(!t.ok)throw new Error("Failed to load stylesheet: ".co
2024-04-24 02:17:45 UTC	16384	IN	Data Raw: 2b 31 29 3b 65 2e 68 61 73 28 75 29 3f 6f 3d 21 31 3a 65 2e 61 64 64 28 75 29 7d 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 62 61 73 65 22 3a 74 2e 68 61 73 28 61 2e 74 79 70 65 29 3f 6f 3d 21 31 3a 74 2e 61 64 64 28 61 2e 74 79 70 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 65 74 61 22 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 73 3d 70 2e 6c 65 6e 67 74 68 3b 63 3c 73 3b 63 2b 2b 29 7b 76 61 72 20 6c 3d 70 5b 63 5d 3b 69 66 28 61 2e 70 72 6f 70 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 69 66 28 22 63 68 61 72 53 65 74 22 3d 3d 3d 6c 29 72 2e 68 61 73 28 6c 29 3f 6f 3d 21 31 3a 72 2e 61 64 64 28 6c 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 70 72 6f 70 73 5b 6c 5d 2c 64 3d 6e 5b 6c 5d Data Ascii: +1);e.has(u)?o=!1:e.add(u)}switch(a.type){case"title":case"base":t.has(a.type)?o=!1:t.add(a.type);break;case"meta":for(var c=0,s=p.length;c<s;c++){var l=p[c];if(a.props.hasOwnProperty(l))if("charSet"===l)r.has(l)?o=!1:r.add(l);else{var f=a.props[l],d=n[l]
2024-04-24 02:17:46 UTC	16384	IN	Data Raw: 34 3a 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 3b 63 61 73 65 20 32 35 3a 69 66 28 22 2f 61 70 69 22 21 3d 3d 67 26 26 21 67 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 61 70 69 2f 22 29 29 7b 65 2e 6e 65 78 74 3d 32 38 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 4b 28 7b 75 72 6c 3a 69 2c 72 6f 75 74 65 72 3a 79 7d 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 3b 63 61 73 65 20 32 38 3a 69 66 28 65 2e 74 30 3d 4f 2c 65 2e 74 30 29 7b 65 2e 6e 65 78 74 3d 33 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 33 32 2c 79 2e 66 65 74 63 68 43 6f 6d 70 6f 6e 65 6e 74 28 67 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: 4:O=S&&!("initial"in S)?S:void 0;case 25:if("/api"!==g&&!g.startsWith("/api/")){e.next=28;break}return K({url:i,router:y}),e.abrupt("return",new Promise((function(){})));case 28:if(e.t0=O,e.t0){e.next=33;break}return e.next=32,y.fetchComponent(g).then((fu
2024-04-24 02:17:46 UTC	16384	IN	Data Raw: 30 5d 26 26 28 6c 3d 22 3f 22 2b 6c 29 2c 69 3d 69 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 23 5d 2f 67 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6c 3d 6c 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 25 32 33 22 29 2c 22 22 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 75 29 7d 74 2e 75 72 6c 4f 62 6a 65 63 74 4b 65 79 73 3d 5b 22 61 75 74 68 22 2c 22 68 61 73 68 22 2c 22 68 6f 73 74 22 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 22 68 72 65 66 22 2c 22 70 61 74 68 22 2c 22 70 61 74 68 6e 61 6d 65 22 2c 22 70 6f 72 74 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 2c 22 71 75 65 72 79 22 2c 22 73 65 61 72 63 68 22 2c 22 73 6c 61 73 68 65 73 22 5d 7d 2c 38 38 37 33 Data Ascii: 0]&&(l="?"+l),i=i.replace(/[?#]/g,encodeURIComponent),l=l.replace("#","%23"),"".concat(a).concat(s).concat(i).concat(l).concat(u)}t.urlObjectKeys=["auth","hash","host","hostname","href","path","pathname","port","protocol","query","search","slashes"]},8873
2024-04-24 02:17:46 UTC	16384	IN	Data Raw: 64 72 65 6e 2e 73 65 74 28 61 2c 6e 65 77 20 65 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 28 61 29 2e 5f 69 6e 73 65 72 74 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 2c 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 21 31 7d 7d 5d 29 2c 65 7d 28 29 7d 2c 39 36 31 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 65 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: dren.set(a,new e),this.children.get(a)._insert(t.slice(1),r,n)}else this.placeholder=!1}}]),e}()},96112:function(e,t){"use strict";var r;Object.defineProperty(t,"__esModule",{value:!0}),t.setConfig=function(e){r=e},t.default=void 0;t.default=function(){re
2024-04-24 02:17:46 UTC	6334	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 21 3d 3d 72 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 72 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 6d 61 78 28 65 5b 72 5d 2d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 63 28 29 3b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 Data Ascii: avigationStart"!==r&&"toJSON"!==r&&(t[r]=Math.max(e[r]-e.navigationStart,0));return t}())},s=function(e,t){var r=c();return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	662	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:45 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 03 Feb 2024 10:04:07 GMT Last-Modified: Fri, 02 Feb 2024 17:50:15 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oAi4salsCMtsINxlKmbblnK8QjZ82E1ESHHlngCWxfQLtsMYD0PxBA== Age: 6970419
2024-04-24 02:17:45 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	655	OUT	GET /_next/static/chunks/404-d60ba40552f46991.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:45 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 17274 Connection: close Date: Tue, 23 Apr 2024 10:53:31 GMT Last-Modified: Tue, 23 Apr 2024 10:34:49 GMT ETag: "227dcd2826f29b0374c5cda69996b745" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _ZUfU3E3cN5RUETUgYNn9IPjkIe_BFbPEIxjsBlprmQWkk9yfTQGnw== Age: 55455
2024-04-24 02:17:45 UTC	15778	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 34 5d 2c 7b 37 30 33 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 36 31 31 32 29 7d 2c 31 39 35 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 37 30 38 36 35 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 69 3d 6e 28 32 35 32 33 37 29 2c 61 3d 6e 2e 6e 28 69 29 2c 75 3d 6e 28 32 37 38 34 29 2c 73 3d 6e 28 36 32 32 32 35 29 2c 6c 3d 6e 28 33 38 35 37 37 29 2c 63 3d 6e 28 37 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[404],{70314:function(e,t,n){e.exports=n(96112)},19552:function(e,t,n){"use strict";n.d(t,{Z:function(){return S}});var r=n(70865),o=n(52322),i=n(25237),a=n.n(i),u=n(2784),s=n(62225),l=n(38577),c=n(7
2024-04-24 02:17:45 UTC	1496	IN	Data Raw: 72 5f 5f 73 52 52 4e 39 22 2c 53 70 69 72 61 6c 3a 22 41 70 70 4c 6f 61 64 65 72 5f 53 70 69 72 61 6c 5f 5f 66 55 52 31 43 22 2c 54 69 74 6c 65 3a 22 41 70 70 4c 6f 61 64 65 72 5f 54 69 74 6c 65 5f 5f 54 4e 39 61 31 22 2c 44 65 73 63 72 69 70 74 69 6f 6e 3a 22 41 70 70 4c 6f 61 64 65 72 5f 44 65 73 63 72 69 70 74 69 6f 6e 5f 5f 43 65 77 79 4a 22 2c 4c 6f 61 64 65 72 3a 22 41 70 70 4c 6f 61 64 65 72 5f 4c 6f 61 64 65 72 5f 5f 31 31 46 6c 35 22 2c 22 6c 6f 61 64 69 6e 67 2d 70 75 6c 73 65 22 3a 22 41 70 70 4c 6f 61 64 65 72 5f 6c 6f 61 64 69 6e 67 2d 70 75 6c 73 65 5f 5f 4f 4a 4f 79 6b 22 7d 7d 2c 31 34 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 45 72 72 6f 72 53 74 61 74 65 3a 22 45 72 72 6f 72 53 74 61 74 65 5f 45 72 Data Ascii: r__sRRN9",Spiral:"AppLoader_Spiral__fUR1C",Title:"AppLoader_Title__TN9a1",Description:"AppLoader_Description__CewyJ",Loader:"AppLoader_Loader__11Fl5","loading-pulse":"AppLoader_loading-pulse__OJOyk"}},14148:function(e){e.exports={ErrorState:"ErrorState_Er

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	702	OUT	GET /_next/static/chunks/pages/downloads/%5BtransferId%5D/%5BrecipientId%5D-b3651c4c5a99e92b.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:45 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1193 Connection: close Date: Sat, 24 Feb 2024 15:29:17 GMT Last-Modified: Fri, 23 Feb 2024 20:10:35 GMT ETag: "65123faaba2e6ce6af74685759b7c08a" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9sJRlEl0FNJw3cJQbroIhlc6woxJROM_NxNqSbLw5f8dYJnOoD6dUQ== Age: 5136509
2024-04-24 02:17:45 UTC	1193	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 30 5d 2c 7b 31 35 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 64 6f 77 6e 6c 6f 61 64 73 2f 5b 74 72 61 6e 73 66 65 72 49 64 5d 2f 5b 72 65 63 69 70 69 65 6e 74 49 64 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 34 36 35 34 29 7d 5d 29 7d 2c 31 38 34 36 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 65 28 32 37 38 34 29 3b 6e 2e 5a 3d 66 75 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9210],{15184:function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/downloads/[transferId]/[recipientId]",function(){return e(4654)}])},18469:function(t,n,e){"use strict";var i=e(2784);n.Z=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	23.40.26.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 02:17:46 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/254A) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=17211 Date: Wed, 24 Apr 2024 02:17:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	683	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:46 UTC	605	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XzRTAQyklZmQY7J9vMqgGaUIp8GjgdtRlm4i_Cz_5f0zWNtn7qzaHw== Age: 41120
2024-04-24 02:17:46 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	681	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:46 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FKMZec3NnhNym8vGrZEfOEkBkCKbuSd0ihRwKxjNBkXhFhzRk2-xJQ== Age: 41120
2024-04-24 02:17:46 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	663	OUT	GET /_next/static/css/03d589055b9fa8a0.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	601	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 501856 Connection: close Date: Mon, 22 Apr 2024 16:53:08 GMT Last-Modified: Mon, 22 Apr 2024 16:51:34 GMT ETag: "7bbf99584cacbc02a1d6ee0813153c1d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 db5074d02aa0b9851d4e5d66a6fc3826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wvlxxyXowIkRye2NueI9oqq3yALI3LSRJ4GJX_vxTQ98O3TnbirkKw== Age: 120279
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 42 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 5f 5f 48 37 6f 4b 52 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 6e 61 72 72 6f 77 5f 5f 6a 74 57 33 4f 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 79 2d 68 65 61 64 69 6e 67 2d 6c 61 72 67 65 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 49 34 76 51 33 2c 2e 57 61 6c 6c 70 61 70 65 72 53 6f 63 69 61 6c 4c 69 6e 6b 73 5f 77 74 2d 64 69 73 70 6c 61 Data Ascii: .WallpaperSocialLinkButton_button__H7oKR{background:none;padding:0;border:none;cursor:pointer}.WallpaperSocialLinks_wt-display-heading-large-bold-narrow__jtW3O,.WallpaperSocialLinks_wt-display-heading-large-bold-wide__I4vQ3,.WallpaperSocialLinks_wt-displa
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 7d 2e 42 75 74 74 6f 6e 5f 70 72 69 6d 61 72 79 5f 5f 45 76 6c 65 33 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: t,border-color .1s ease-out,box-shadow .1s ease-out}.Button_primary__Evle3{font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:14px;font-weight:500;line-height:
2024-04-24 02:17:47 UTC	2410	IN	Data Raw: 64 65 72 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 74 6f 6e 5f 5f 5f 69 6d 78 41 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 35 70 78 20 72 67 62 61 28 38 32 2c 31 30 34 2c 32 35 35 2c 2e 32 29 7d 2e 42 75 74 74 6f 6e 5f 70 72 6f 42 75 74 Data Ascii: der:none}@media(min-width:768px){.Button_proButton___imxA{font-size:14px}}.Button_proButton___imxA:hover{background-color:transparent}.Button_proButton___imxA:focus{outline:none;background-color:none;box-shadow:0 0 0 5px rgba(82,104,255,.2)}.Button_proBut
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 64 65 6e 7d 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 66 61 64 65 2d 65 78 69 74 3e 2a 2c 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 66 61 64 65 2d 6d 69 6e 69 6d 69 7a 65 2d 65 78 69 74 3e 2a 2c 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 6d 69 6e 69 6d 69 7a 65 2d 65 78 69 74 3e 2a 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 66 61 64 65 2d 65 78 69 74 2d 61 63 74 69 76 65 2c 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 66 61 64 65 2d 6d 69 6e 69 6d 69 7a 65 2d 65 78 69 74 2d 61 63 74 69 76 65 2c 2e 6f 6e 65 75 69 5f 5f 61 6e 69 6d 61 74 69 6f 6e 2d 2d 6d 69 6e 69 6d 69 7a 65 2d 65 78 69 74 2d 61 63 74 69 76 65 7b 6f 76 65 72 66 6c 6f 77 Data Ascii: den}.oneui__animation--fade-exit>,.oneui__animation--fade-minimize-exit>,.oneui__animation--minimize-exit>*{overflow:hidden}.oneui__animation--fade-exit-active,.oneui__animation--fade-minimize-exit-active,.oneui__animation--minimize-exit-active{overflow
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 2e 62 61 6e 6e 65 72 5f 5f 76 61 72 69 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 7d 2e 62 61 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 77 69 64 74 68 3a 34 39 39 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 74 6f 70 3a 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6c 65 78 3a 6e 6f 6e 65 3b 6f 72 64 65 72 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 33 34 34 70 78 29 2c 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 62 61 6e 6e 65 72 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 7d 7d 2e 62 61 6e 6e 65 72 5f 5f 74 65 78 74 7b 66 6c Data Ascii: .banner__variant{background:#333}.banner{position:static;width:499px;height:40px;left:20px;top:20px;display:flex;align-items:center;color:#fff;flex:none;order:0;flex-grow:0}@media(max-width:344px),(max-width:480px){.banner{min-width:100%}}.banner__text{fl
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 61 72 67 65 5f 5f 57 56 57 33 79 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 62 6f 6c 64 2d 77 69 64 65 5f 5f 30 51 7a 6e 70 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 62 6f 6c 64 5f 5f 76 5f 52 6b 73 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 6e 61 72 72 6f 77 5f 5f 6a 6d 57 67 35 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 2d 77 69 64 65 5f 5f 31 73 50 35 42 2c 2e 42 61 6e 6e 65 72 43 73 61 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 6d 65 64 69 75 6d 5f 5f 32 45 43 6d 51 2c 2e 42 61 6e 6e 65 Data Ascii: arge__WVW3y,.BannerCsat_wt-text-heading-medium-bold-wide__0Qznp,.BannerCsat_wt-text-heading-medium-bold__v_Rks,.BannerCsat_wt-text-heading-medium-narrow__jmWg5,.BannerCsat_wt-text-heading-medium-wide__1sP5B,.BannerCsat_wt-text-heading-medium__2ECmQ,.Banne
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 78 2d 6c 61 72 67 65 2d 77 69 64 65 5f 5f 35 70 67 50 48 2c 2e 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 57 69 64 67 65 74 5f 77 74 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2d 78 2d 6c 61 72 67 65 5f 5f 4a 39 34 52 71 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 34 70 78 7d 2e 41 63 63 6f 75 6e 74 53 74 6f Data Ascii: -family:Actief Grotesque,Arial,Helvetica,sans-serif;line-height:1.2;font-size:inherit;font-weight:400}.AccountStorageWidget_wt-text-heading-x-large-wide__5pgPH,.AccountStorageWidget_wt-text-heading-x-large__J94Rq{font-weight:500;font-size:64px}.AccountSto
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 65 6d 5f 5f 6c 6f 67 6f 7b 77 69 64 74 68 3a 32 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 32 2e 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 7d 2e 54 65 61 6d 49 74 65 6d 5f 5f 61 64 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 38 65 62 65 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 54 65 61 6d 49 74 65 6d 5f 5f 61 64 64 20 73 76 67 7b 77 69 64 74 68 3a 31 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 2e 54 65 61 6d 49 74 65 6d 5f 5f 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 Data Ascii: em__logo{width:2.5rem;height:2.5rem;border-radius:.3125rem;margin-right:.75rem}.TeamItem__add{background-color:#e8ebed;display:flex;justify-content:center;align-items:center}.TeamItem__add svg{width:1.5rem;height:1.5rem}.TeamItem__body{display:flex;flex-d
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 50 72 69 63 69 6e 67 50 61 6e 65 6c 5f 5f 66 65 61 74 75 72 65 73 2d 6c 69 73 74 20 6c 69 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 2e 50 72 69 63 69 6e 67 50 61 6e 65 6c 5f 5f 66 65 61 74 75 72 65 73 2d 6c 69 73 74 20 6c 69 20 73 76 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 36 61 36 64 37 30 3b 77 69 64 74 68 3a 31 2e 31 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 2e 31 32 35 72 65 6d 7d 2e 50 72 69 63 69 6e 67 50 61 6e 65 6c 5f 5f 66 65 61 74 75 72 65 73 2d 6c 69 73 74 20 6c 69 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b Data Ascii: height:1.5rem;display:flex}.PricingPanel__features-list li p{margin:0}.PricingPanel__features-list li svg{margin-right:.75rem;color:#6a6d70;width:1.125rem;height:1.5rem;min-height:1.5rem;min-width:1.125rem}.PricingPanel__features-list li:not(:last-child){
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 5f 5f 56 4d 4a 5a 48 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 2d 73 65 6d 69 5f 5f 35 49 33 6e 75 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 4a 75 6d 70 54 6f 46 65 61 74 75 72 65 73 5f 77 74 2d 6c 61 62 65 6c 2d 73 6d 61 6c 6c 2d 62 6f 6c 64 5f 5f 38 75 4d 57 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 4a 75 6d 70 54 Data Ascii: {font-weight:700;font-size:14px}.JumpToFeatures_wt-label-small__VMJZH{font-weight:400;font-size:12px}.JumpToFeatures_wt-label-small-semi__5I3nu{font-weight:500;font-size:12px}.JumpToFeatures_wt-label-small-bold__8uMWg{font-weight:700;font-size:12px}.JumpT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	660	OUT	GET /_next/static/chunks/dde21195-2697a3889c46ad74.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 26464 Connection: close Date: Wed, 20 Dec 2023 13:08:37 GMT Last-Modified: Wed, 20 Dec 2023 11:49:09 GMT ETag: "02cd96af1fe12399200b70e7bf8fa6cd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Gd4QYVDigIpA6XhTvr6bs2uJPM39QIhv3mji5bRVegRm4Fm9NG09xA== Age: 10847350
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 30 5d 2c 7b 34 34 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 6e 65 77 20 42 6c 6f 62 28 5b 22 28 22 2e 63 6f 6e 63 61 74 28 69 2c 22 29 28 73 65 6c 66 29 22 29 5d 29 29 29 2c 6e 65 77 20 57 6f 72 6b 65 72 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[620],{44526:function(t,e,a){var n;function r(){return n\|\|(n=URL.createObjectURL(new Blob(["(".concat(i,")(self)")]))),new Worker(n)}function i(){function t(t){return function(){try{retu
2024-04-24 02:17:47 UTC	10080	IN	Data Raw: 64 5f 6d 61 74 63 68 3d 30 2c 74 68 69 73 2e 6e 69 63 65 5f 6d 61 74 63 68 3d 30 2c 74 68 69 73 2e 64 79 6e 5f 6c 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 50 74 29 2c 74 68 69 73 2e 64 79 6e 5f 64 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 28 32 2a 59 74 2b 31 29 29 2c 74 68 69 73 2e 62 6c 5f 74 72 65 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 32 2a 28 32 2a 4b 74 2b 31 29 29 2c 6f 65 28 74 68 69 73 2e 64 79 6e 5f 6c 74 72 65 65 29 2c 6f 65 28 74 68 69 73 2e 64 79 6e 5f 64 74 72 65 65 29 2c 6f 65 28 74 68 69 73 2e 62 6c 5f 74 72 65 65 29 2c 74 68 69 73 2e 6c 5f 64 65 73 63 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 5f 64 65 73 63 3d 6e 75 6c 6c 2c 74 68 69 73 2e 62 6c 5f 64 65 73 63 3d 6e 75 6c 6c Data Ascii: d_match=0,this.nice_match=0,this.dyn_ltree=new Uint16Array(2Pt),this.dyn_dtree=new Uint16Array(2(2Yt+1)),this.bl_tree=new Uint16Array(2(2*Kt+1)),oe(this.dyn_ltree),oe(this.dyn_dtree),oe(this.bl_tree),this.l_desc=null,this.d_desc=null,this.bl_desc=null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49728	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	660	OUT	GET /_next/static/chunks/c1b503a2.3fbd78ae07846694.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 58253 Connection: close Date: Wed, 17 Apr 2024 14:06:21 GMT Last-Modified: Wed, 17 Apr 2024 14:06:09 GMT ETag: "633a43876f294113b67a16bac7c21511" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zOd0YWw4TauSqVO2o1A-SOgTqu_kJlSVwSzRRg8r4QLPAr9lsDKFBA== Age: 562286
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 35 35 5d 2c 7b 38 30 33 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 61 7d 2c 42 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 61 7d 2c 5a 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 61 7d 2c 67 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 6d 7d 2c 7a 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 6d 7d 7d 29 3b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6155],{80394:function(e,t,n){n.d(t,{$m:function(){return ta},Bf:function(){return ra},ZP:function(){return ea},gh:function(){return tm},z_:function(){return om}});var r="undefined"!==ty
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 65 72 22 2c 65 2e 4d 6f 62 69 6c 65 49 6f 73 52 65 6e 64 65 72 65 72 3d 22 6d 6f 62 69 6c 65 2d 69 6f 73 2d 72 65 6e 64 65 72 65 72 22 2c 65 2e 44 65 73 6b 74 6f 70 57 65 62 52 65 6e 64 65 72 65 72 3d 22 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 22 7d 28 6f 61 7c 7c 28 6f 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 72 74 3d 22 73 74 61 72 74 22 2c 65 2e 46 69 72 73 74 51 75 61 72 74 69 6c 65 3d 22 66 69 72 73 74 51 75 61 72 74 69 6c 65 22 2c 65 2e 4d 69 64 70 6f 69 6e 74 3d 22 6d 69 64 70 6f 69 6e 74 22 2c 65 2e 54 68 69 72 64 51 75 61 72 74 69 6c 65 3d 22 74 68 69 72 64 51 75 61 72 74 69 6c 65 22 2c 65 2e 43 6f 6d 70 6c 65 74 65 3d 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 4d 75 74 65 3d 22 6d 75 74 65 22 2c 65 Data Ascii: er",e.MobileIosRenderer="mobile-ios-renderer",e.DesktopWebRenderer="desktop-web-renderer"}(oa\|\|(oa={})),function(e){e.Start="start",e.FirstQuartile="firstQuartile",e.Midpoint="midpoint",e.ThirdQuartile="thirdQuartile",e.Complete="complete",e.Mute="mute",e
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 38 22 2c 22 29 22 3a 22 25 32 39 22 2c 22 7e 22 3a 22 25 37 45 22 2c 22 25 32 30 22 3a 22 2b 22 7d 2c 5f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 43 70 5b 65 5d 7d 2c 4e 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 45 70 28 62 70 28 65 29 2c 49 70 2c 5f 70 29 7d 2c 4d 70 3d 48 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 70 28 74 68 69 73 2c 7b 74 79 70 65 3a 75 70 2c 74 61 72 67 65 74 3a 63 70 28 65 29 2e 65 6e 74 72 69 65 73 2c 69 6e 64 65 78 3a 30 2c 6b 69 6e 64 3a 74 7d 29 7d 29 2c 61 70 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 70 28 74 68 69 73 29 2c 74 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 65 2e 69 6e 64 Data Ascii: "!":"%21","'":"%27","(":"%28",")":"%29","~":"%7E","%20":"+"},_p=function(e){return Cp[e]},Np=function(e){return Ep(bp(e),Ip,_p)},Mp=Hh((function(e,t){sp(this,{type:up,target:cp(e).entries,index:0,kind:t})}),ap,(function(){var e=fp(this),t=e.target,n=e.ind
2024-04-24 02:17:47 UTC	9101	IN	Data Raw: 29 2c 5a 70 28 78 76 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 48 6f 73 74 6e 61 6d 65 22 2c 22 73 65 74 48 6f 73 74 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 70 6f 72 74 22 2c 6b 76 28 22 67 65 74 50 6f 72 74 22 2c 22 73 65 74 50 6f 72 74 22 29 29 2c 5a 70 28 78 76 2c 22 70 61 74 68 6e 61 6d 65 22 2c 6b 76 28 22 67 65 74 50 61 74 68 6e 61 6d 65 22 2c 22 73 65 74 50 61 74 68 6e 61 6d 65 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 22 2c 22 73 65 74 53 65 61 72 63 68 22 29 29 2c 5a 70 28 78 76 2c 22 73 65 61 72 63 68 50 61 72 61 6d 73 22 2c 6b 76 28 22 67 65 74 53 65 61 72 63 68 50 61 72 61 6d 73 22 29 29 2c 5a 70 28 78 76 2c 22 68 61 73 68 22 2c 6b 76 28 22 67 65 74 48 61 73 68 22 2c 22 Data Ascii: ),Zp(xv,"hostname",kv("getHostname","setHostname")),Zp(xv,"port",kv("getPort","setPort")),Zp(xv,"pathname",kv("getPathname","setPathname")),Zp(xv,"search",kv("getSearch","setSearch")),Zp(xv,"searchParams",kv("getSearchParams")),Zp(xv,"hash",kv("getHash","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49730	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	660	OUT	GET /_next/static/chunks/955cc3f7.47e52b23a8132ed3.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 44642 Connection: close Date: Mon, 15 Apr 2024 16:51:31 GMT Last-Modified: Mon, 15 Apr 2024 16:22:24 GMT ETag: "0117ded66314d5d48929f64d97591068" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e71c7f7563801eb72fe27eb8f7c3e658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YM_zNzpCwimu3L9n7XZTIFKrTcqxvhB5xzUssEmd4cdqTP1aJLg4LQ== Age: 725176
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 35 32 5d 2c 7b 38 39 33 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 2c 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 21 65 2e 6a 51 75 65 72 79 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 66 6e 2e 69 6e 69 74 28 65 2c 72 29 7d 3b 74 2e 69 73 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 74 2e 74 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9252],{89393:function(e,t,r){var a,n;!function(e){"use strict";if(!e.jQuery){var t=function(e,r){return new t.fn.init(e,r)};t.isWindow=function(e){return e&&e===e.window},t.type=function(e){return e
2024-04-24 02:17:47 UTC	9200	IN	Data Raw: 72 65 74 75 72 6e 22 74 72 61 6e 73 66 6f 72 6d 22 3b 63 61 73 65 22 65 78 74 72 61 63 74 22 3a 72 65 74 75 72 6e 20 77 28 72 29 3d 3d 3d 61 7c 7c 77 28 72 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 5b 74 5d 3d 3d 3d 61 3f 2f 5e 73 63 61 6c 65 2f 69 2e 74 65 73 74 28 74 29 3f 31 3a 30 3a 77 28 72 29 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 5b 74 5d 2e 72 65 70 6c 61 63 65 28 2f 5b 28 29 5d 2f 67 2c 22 22 29 3b 63 61 73 65 22 69 6e 6a 65 63 74 22 3a 76 61 72 20 69 3d 21 31 3b 73 77 69 74 63 68 28 74 2e 73 75 62 73 74 72 28 30 2c 74 2e 6c 65 6e 67 74 68 2d 31 29 29 7b 63 61 73 65 22 74 72 61 6e 73 6c 61 74 65 22 3a 69 3d 21 2f 28 25 7c 70 78 7c 65 6d 7c 72 65 6d 7c 76 77 7c 76 68 7c 5c 64 29 24 2f 69 2e 74 65 73 74 28 6e 29 3b 62 72 65 61 6b 3b 63 Data Ascii: return"transform";case"extract":return w(r)===a\|\|w(r).transformCache[t]===a?/^scale/i.test(t)?1:0:w(r).transformCache[t].replace(/[()]/g,"");case"inject":var i=!1;switch(t.substr(0,t.length-1)){case"translate":i=!/(%\|px\|em\|rem\|vw\|vh\|\d)$/i.test(n);break;c
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 65 6e 74 73 5b 4e 5d 29 7c 7c 70 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 4e 5d 29 3f 68 2e 65 61 73 69 6e 67 3d 61 72 67 75 6d 65 6e 74 73 5b 4e 5d 3a 70 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 72 67 75 6d 65 6e 74 73 5b 4e 5d 29 26 26 28 68 2e 63 6f 6d 70 6c 65 74 65 3d 61 72 67 75 6d 65 6e 74 73 5b 4e 5d 29 3a 68 2e 64 75 72 61 74 69 6f 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 4e 5d 7d 73 77 69 74 63 68 28 67 29 7b 63 61 73 65 22 73 63 72 6f 6c 6c 22 3a 6b 3d 22 73 63 72 6f 6c 6c 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 76 65 72 73 65 22 3a 6b 3d 22 72 65 76 65 72 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 61 75 73 65 22 3a 76 61 72 20 48 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 63 2e 65 Data Ascii: ents[N])\|\|p.isArray(arguments[N])?h.easing=arguments[N]:p.isFunction(arguments[N])&&(h.complete=arguments[N]):h.duration=arguments[N]}switch(g){case"scroll":k="scroll";break;case"reverse":k="reverse";break;case"pause":var H=(new Date).getTime();return c.e
2024-04-24 02:17:47 UTC	2674	IN	Data Raw: 2c 6e 29 3b 72 65 74 75 72 6e 20 72 3f 4d 61 74 68 2e 72 6f 75 6e 64 28 69 29 3a 69 7d 3b 45 3d 4e 2e 70 61 74 74 65 72 6e 2e 72 65 70 6c 61 63 65 28 2f 7b 28 5c 64 2b 29 28 21 29 3f 7d 2f 67 2c 4f 29 7d 65 6c 73 65 20 69 66 28 31 3d 3d 3d 78 29 45 3d 4e 2e 65 6e 64 56 61 6c 75 65 3b 65 6c 73 65 7b 76 61 72 20 6a 3d 4e 2e 65 6e 64 56 61 6c 75 65 2d 4e 2e 73 74 61 72 74 56 61 6c 75 65 3b 45 3d 4e 2e 73 74 61 72 74 56 61 6c 75 65 2b 6a 2a 48 28 78 2c 75 2c 6a 29 7d 69 66 28 21 64 26 26 45 3d 3d 3d 4e 2e 63 75 72 72 65 6e 74 56 61 6c 75 65 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 4e 2e 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 45 2c 22 74 77 65 65 6e 22 3d 3d 3d 46 29 67 3d 45 3b 65 6c 73 65 7b 76 61 72 20 71 3b 69 66 28 79 2e 48 6f 6f 6b 73 2e 72 65 67 69 73 74 Data Ascii: ,n);return r?Math.round(i):i};E=N.pattern.replace(/{(\d+)(!)?}/g,O)}else if(1===x)E=N.endValue;else{var j=N.endValue-N.startValue;E=N.startValue+j*H(x,u,j)}if(!d&&E===N.currentValue)continue;if(N.currentValue=E,"tween"===F)g=E;else{var q;if(y.Hooks.regist

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49731	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	660	OUT	GET /_next/static/chunks/2edb282b.45c56c19221816df.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 71691 Connection: close Date: Wed, 17 Apr 2024 19:37:02 GMT Last-Modified: Wed, 17 Apr 2024 18:02:05 GMT ETag: "42eaceaa10ced1bc091c1d9097c4897f" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QIXDZ2phozZUzlcBYjZadDbokkKsLuTO-ngglj8gWJ-Pm4SPgnqkmQ== Age: 542445
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 38 32 5d 2c 7b 37 36 36 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 65 3b 6e 3d 72 2e 6e 6d 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 2c 69 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6f 3d 22 5f 5f 6c 6f 64 61 73 68 5f 68 61 73 68 5f 75 6e 64 65 66 69 6e 65 64 5f 5f 22 2c 66 3d 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 2c 61 3d 31 36 2c 63 3d 33 32 2c 6c 3d 36 34 2c 73 3d 31 32 38 2c 68 3d 32 35 36 2c 70 3d 31 2f 30 2c 76 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 2c 5f 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2182],{76635:function(n,t,r){var e;n=r.nmd(n),function(){var u,i="Expected a function",o="__lodash_hash_undefined__",f="__lodash_placeholder__",a=16,c=32,l=64,s=128,h=256,p=1/0,v=9007199254740991,_=
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 3a 42 6e 2e 63 61 6c 6c 28 74 2c 6e 29 7d 2c 4b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 7a 65 2b 3d 74 68 69 73 2e 68 61 73 28 6e 29 3f 30 3a 31 2c 72 5b 6e 5d 3d 7a 72 26 26 74 3d 3d 3d 75 3f 6f 3a 74 2c 74 68 69 73 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 5b 5d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 56 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 72 3d 65 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 21 28 Data Ascii: :Bn.call(t,n)},Kr.prototype.set=function(n,t){var r=this.__data__;return this.size+=this.has(n)?0:1,r[n]=zr&&t===u?o:t,this},Vr.prototype.clear=function(){this.__data__=[],this.size=0},Vr.prototype.delete=function(n){var t=this.__data__,r=ee(t,n);return!(
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 75 28 63 2c 61 2c 74 5b 34 5d 29 3a 61 2c 6e 5b 34 5d 3d 63 3f 6c 72 28 6e 5b 33 5d 2c 66 29 3a 74 5b 34 5d 7d 28 61 3d 74 5b 35 5d 29 26 26 28 63 3d 6e 5b 35 5d 2c 6e 5b 35 5d 3d 63 3f 52 75 28 63 2c 61 2c 74 5b 36 5d 29 3a 61 2c 6e 5b 36 5d 3d 63 3f 6c 72 28 6e 5b 35 5d 2c 66 29 3a 74 5b 36 5d 29 3b 28 61 3d 74 5b 37 5d 29 26 26 28 6e 5b 37 5d 3d 61 29 3b 65 26 73 26 26 28 6e 5b 38 5d 3d 6e 75 6c 6c 3d 3d 6e 5b 38 5d 3f 74 5b 38 5d 3a 77 72 28 6e 5b 38 5d 2c 74 5b 38 5d 29 29 3b 6e 75 6c 6c 3d 3d 6e 5b 39 5d 26 26 28 6e 5b 39 5d 3d 74 5b 39 5d 29 3b 6e 5b 30 5d 3d 74 5b 30 5d 2c 6e 5b 31 5d 3d 75 7d 28 78 2c 6d 29 2c 6e 3d 78 5b 30 5d 2c 74 3d 78 5b 31 5d 2c 65 3d 78 5b 32 5d 2c 6f 3d 78 5b 33 5d 2c 70 3d 78 5b 34 5d 2c 21 28 67 3d 78 5b 39 5d 3d 78 5b Data Ascii: u(c,a,t[4]):a,n[4]=c?lr(n[3],f):t[4]}(a=t[5])&&(c=n[5],n[5]=c?Ru(c,a,t[6]):a,n[6]=c?lr(n[5],f):t[6]);(a=t[7])&&(n[7]=a);e&s&&(n[8]=null==n[8]?t[8]:wr(n[8],t[8]));null==n[9]&&(n[9]=t[9]);n[0]=t[0],n[1]=u}(x,m),n=x[0],t=x[1],e=x[2],o=x[3],p=x[4],!(g=x[9]=x[
2024-04-24 02:17:47 UTC	14808	IN	Data Raw: 69 73 2c 75 3d 6a 65 28 74 2c 4c 66 28 74 29 29 29 3b 76 61 72 20 69 3d 21 28 72 66 28 72 29 26 26 22 63 68 61 69 6e 22 69 6e 20 72 29 7c 7c 21 21 72 2e 63 68 61 69 6e 2c 6f 3d 58 6f 28 6e 29 3b 72 65 74 75 72 6e 20 45 74 28 75 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 74 5b 72 5d 3b 6e 5b 72 5d 3d 65 2c 6f 26 26 28 6e 2e 70 72 6f 74 6f 74 79 70 65 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 63 68 61 69 6e 5f 5f 3b 69 66 28 69 7c 7c 74 29 7b 76 61 72 20 72 3d 6e 28 74 68 69 73 2e 5f 5f 77 72 61 70 70 65 64 5f 5f 29 2c 75 3d 72 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 3d 7a 75 28 74 68 69 73 2e 5f 5f 61 63 74 69 6f 6e 73 5f 5f 29 3b 72 65 74 75 72 6e 20 75 2e 70 75 73 68 28 7b 66 75 6e 63 3a 65 2c 61 72 Data Ascii: is,u=je(t,Lf(t)));var i=!(rf(r)&&"chain"in r)\|\|!!r.chain,o=Xo(n);return Et(u,(function(r){var e=t[r];n[r]=e,o&&(n.prototype[r]=function(){var t=this.__chain__;if(i\|\|t){var r=n(this.__wrapped__),u=r.__actions__=zu(this.__actions__);return u.push({func:e,ar
2024-04-24 02:17:47 UTC	7731	IN	Data Raw: 6f 2c 66 3d 41 66 28 7b 7d 2c 74 2e 69 6d 70 6f 72 74 73 2c 65 2e 69 6d 70 6f 72 74 73 2c 58 75 29 2c 61 3d 4c 66 28 66 29 2c 63 3d 58 74 28 66 2c 61 29 2c 6c 3d 30 2c 73 3d 74 2e 69 6e 74 65 72 70 6f 6c 61 74 65 7c 7c 6a 6e 2c 68 3d 22 5f 5f 70 20 2b 3d 20 27 22 2c 70 3d 45 6e 28 28 74 2e 65 73 63 61 70 65 7c 7c 6a 6e 29 2e 73 6f 75 72 63 65 2b 22 7c 22 2b 73 2e 73 6f 75 72 63 65 2b 22 7c 22 2b 28 73 3d 3d 3d 6e 6e 3f 5f 6e 3a 6a 6e 29 2e 73 6f 75 72 63 65 2b 22 7c 22 2b 28 74 2e 65 76 61 6c 75 61 74 65 7c 7c 6a 6e 29 2e 73 6f 75 72 63 65 2b 22 7c 24 22 2c 22 67 22 29 2c 76 3d 22 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 28 42 6e 2e 63 61 6c 6c 28 74 2c 22 73 6f 75 72 63 65 55 52 4c 22 29 3f 28 74 2e 73 6f 75 72 63 65 55 52 4c 2b 22 22 29 2e 72 65 Data Ascii: o,f=Af({},t.imports,e.imports,Xu),a=Lf(f),c=Xt(f,a),l=0,s=t.interpolate\|\|jn,h="__p += '",p=En((t.escape\|\|jn).source+"\|"+s.source+"\|"+(s===nn?_n:jn).source+"\|"+(t.evaluate\|\|jn).source+"\|$","g"),v="//# sourceURL="+(Bn.call(t,"sourceURL")?(t.sourceURL+"").re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49732	23.40.26.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 02:17:47 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2578) X-CID: 11 Cache-Control: public, max-age=17165 Date: Wed, 24 Apr 2024 02:17:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 02:17:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49733	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	637	OUT	GET /gtm.js?id=GTM-NS54WBW HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	536	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 474109 Connection: close cache-control: private, max-age=900 Date: Wed, 24 Apr 2024 02:17:47 GMT expires: Wed, 24 Apr 2024 02:32:08 GMT last-modified: Wed, 24 Apr 2024 00:56:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: zVsZite0BVy8LguDlWAexvudGzQTvnvDx55UwGaIuahkj0w_3ry-Pg==
2024-04-24 02:17:47 UTC	3793	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 67 29 7b 77 5b 67 5d 3d 77 5b 67 5d 7c 7c 7b 7d 3b 0a 20 77 5b 67 5d 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 73 29 3b 7d 3b 7d 29 28 77 69 6e 64 6f 77 2c 27 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 27 29 3b 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 32 32 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(w,g){w[g]=w[g]\|\|{}; w[g].e=function(s){return eval(s);};})(window,'google_tag_manager'); (function(){var data = {"resource": { "version":"122", "macros":[{"function":"__e"},{"fu
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6e 61 76 69 67 61 74 6f 72 5f 6c 61 6e 67 75 61 67 65 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 36 5d 2c 38 2c 31 36 5d 2c 22 2c 65 76 65 6e 74 5f 69 64 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 35 5d 2c 38 2c 31 36 5d 2c 22 2c 61 63 74 69 6f 6e 5f 73 6f 75 72 63 65 3a 5c 22 77 65 62 5c 22 2c 62 69 6c 6c 69 6e 67 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 37 5d 2c 38 2c 31 36 5d 2c 22 2c 74 69 65 72 3a 22 2c 5b 22 65 73 63 61 70 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 38 5d 2c 38 Data Ascii: ","vtp_javascript":["template","(function(){return JSON.stringify({navigator_language:",["escape",["macro",26],8,16],",event_id:",["escape",["macro",25],8,16],",action_source:\"web\",billing:",["escape",["macro",27],8,16],",tier:",["escape",["macro",28],8
2024-04-24 02:17:47 UTC	12288	IN	Data Raw: 2c 22 76 74 70 5f 6a 61 76 61 73 63 72 69 70 74 22 3a 5b 22 74 65 6d 70 6c 61 74 65 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 5c 22 3f 5c 22 29 5b 31 5d 3b 72 65 74 75 72 6e 20 61 7d 29 28 29 3b 22 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 63 6f 6e 76 65 72 74 5f 63 61 73 65 5f 74 6f 22 3a 31 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 51 55 45 52 59 22 2c 22 76 74 70 5f 71 75 65 72 79 4b 65 79 22 3a 22 73 6f 75 72 63 65 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4d 75 6c 74 69 51 75 65 72 79 4b 65 79 73 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 49 67 6e 6f 72 65 45 6d 70 74 79 51 75 65 72 79 50 61 72 61 6d 22 3a 66 61 6c 73 65 7d Data Ascii: ,"vtp_javascript":["template","(function(){var a=location.href.split(\"?\")[1];return a})();"]},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"source","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false}
2024-04-24 02:17:47 UTC	8192	IN	Data Raw: 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 32 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 33 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 34 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 35 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 31 38 36 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 33 32 5d 5d 2c 5b 22 6d 61 70 Data Ascii: ro",132]],["map","index","182","dimension",["macro",132]],["map","index","183","dimension",["macro",132]],["map","index","184","dimension",["macro",132]],["map","index","185","dimension",["macro",132]],["map","index","186","dimension",["macro",132]],["map
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 67 72 61 6e 74 65 64 22 5d 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 76 22 2c 22 76 74 70 5f 64 61 74 61 4c 61 79 65 72 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 74 70 5f 73 65 74 44 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 65 78 70 5f 76 61 72 69 61 6e 74 5f 73 74 72 69 6e 67 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6b 22 2c 22 76 74 70 5f 64 65 63 6f 64 65 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 6e 61 6d 65 22 3a 22 77 74 5f 63 62 61 6e 6e 65 72 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 75 22 2c 22 76 74 70 5f 73 74 72 69 70 57 77 77 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 48 4f 53 54 22 2c 22 76 74 70 5f 65 6e 61 62 6c Data Ascii: granted"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"exp_variant_string"},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"wt_cbanner"},{"function":"__u","vtp_stripWww":true,"vtp_component":"HOST","vtp_enabl
2024-04-24 02:17:47 UTC	10463	IN	Data Raw: 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 61 67 5f 69 64 22 3a 32 32 32 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 76 74 5f 39 30 33 36 34 36 36 30 5f 32 31 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 74 72 75 65 2c 22 76 74 70 5f 63 75 72 72 65 6e 63 79 22 3a 5b 22 6d 61 63 72 6f 22 2c 36 30 5d 2c 22 76 74 70 5f 69 64 22 3a 5b 22 6d 61 63 72 6f 22 2c 37 36 5d 2c 22 76 74 70 5f 65 76 65 6e 74 54 79 70 65 22 3a 22 50 75 72 63 68 61 73 65 22 2c 22 76 74 70 5f 61 64 76 61 6e 63 65 64 4d 61 74 63 68 69 6e 67 22 3a 66 61 Data Ascii: ,"vtp_advancedMatching":false,"tag_id":222},{"function":"__cvt_90364660_211","metadata":["map"],"once_per_event":true,"vtp_enableFirstPartyCookies":true,"vtp_currency":["macro",60],"vtp_id":["macro",76],"vtp_eventType":"Purchase","vtp_advancedMatching":fa
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 3a 22 5f 5f 67 61 61 77 65 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 6d 61 70 22 5d 2c 22 6f 6e 63 65 5f 70 65 72 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 73 65 6e 64 45 63 6f 6d 6d 65 72 63 65 44 61 74 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 76 65 6e 74 53 65 74 74 69 6e 67 73 54 61 62 6c 65 22 3a 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 65 74 65 72 22 2c 22 68 69 74 5f 74 69 6d 65 73 74 61 6d 70 5f 6c 6f 63 61 6c 22 2c 22 70 61 72 61 6d 65 74 65 72 56 61 6c 75 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 39 5d 5d 2c 5b 22 6d 61 70 22 2c 22 70 61 72 61 6d 65 74 65 72 22 2c 22 68 69 74 5f 74 69 6d 65 73 74 61 6d 70 5f 75 6e 69 78 22 2c 22 70 61 72 61 6d 65 74 65 72 56 61 6c 75 65 22 2c 5b 22 6d 61 63 72 6f 22 2c 32 30 Data Ascii: :"__gaawe","metadata":["map"],"once_per_event":true,"vtp_sendEcommerceData":false,"vtp_eventSettingsTable":["list",["map","parameter","hit_timestamp_local","parameterValue",["macro",19]],["map","parameter","hit_timestamp_unix","parameterValue",["macro",20
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 70 22 2c 22 69 6e 64 65 78 22 2c 22 33 22 2c 22 6d 65 74 72 69 63 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 36 39 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 34 22 2c 22 6d 65 74 72 69 63 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 37 30 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 35 22 2c 22 6d 65 74 72 69 63 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 37 31 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 36 22 2c 22 6d 65 74 72 69 63 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 37 32 5d 5d 2c 5b 22 6d 61 70 22 2c 22 69 6e 64 65 78 22 2c 22 37 22 2c 22 6d 65 74 72 69 63 22 2c 5b 22 6d 61 63 72 6f 22 2c 31 37 33 5d 5d 5d 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4c 69 6e 6b 49 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 45 63 6f 6d 6d 65 72 Data Ascii: p","index","3","metric",["macro",169]],["map","index","4","metric",["macro",170]],["map","index","5","metric",["macro",171]],["map","index","6","metric",["macro",172]],["map","index","7","metric",["macro",173]]],"vtp_enableLinkId":false,"vtp_enableEcommer
2024-04-24 02:17:47 UTC	5299	IN	Data Raw: 76 74 70 5f 74 72 61 63 6b 54 79 70 65 22 3a 22 54 52 41 43 4b 5f 45 56 45 4e 54 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 4c 69 6e 6b 49 64 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 67 61 53 65 74 74 69 6e 67 73 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 36 34 5d 2c 22 76 74 70 5f 65 76 65 6e 74 41 63 74 69 6f 6e 22 3a 22 6e 61 76 69 67 61 74 69 6f 6e 20 63 6c 69 63 6b 22 2c 22 76 74 70 5f 65 76 65 6e 74 4c 61 62 65 6c 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 38 39 5d 2c 22 76 74 70 5f 65 6e 61 62 6c 65 45 63 6f 6d 6d 65 72 63 65 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 52 65 63 61 70 74 63 68 61 4f 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 61 52 6c 73 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 73 65 49 Data Ascii: vtp_trackType":"TRACK_EVENT","vtp_enableLinkId":false,"vtp_gaSettings":["macro",164],"vtp_eventAction":"navigation click","vtp_eventLabel":["macro",189],"vtp_enableEcommerce":false,"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseI
2024-04-24 02:17:47 UTC	12288	IN	Data Raw: 70 5f 65 76 65 6e 74 41 63 74 69 6f 6e 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 32 38 5d 2c 22 76 74 70 5f 65 76 65 6e 74 4c 61 62 65 6c 22 3a 22 35 20 53 65 63 6f 6e 64 73 22 2c 22 76 74 70 5f 65 6e 61 62 6c 65 52 65 63 61 70 74 63 68 61 4f 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 61 52 6c 73 61 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 55 73 65 49 6e 74 65 72 6e 61 6c 56 65 72 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 46 69 72 65 62 61 73 65 43 61 6d 70 61 69 67 6e 44 61 74 61 22 3a 74 72 75 65 2c 22 76 74 70 5f 74 72 61 63 6b 54 79 70 65 49 73 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 76 74 70 5f 65 6e 61 62 6c 65 47 41 34 53 63 68 65 6d 61 22 3a 74 72 75 65 2c 22 74 61 67 5f 69 64 22 Data Ascii: p_eventAction":["macro",128],"vtp_eventLabel":"5 Seconds","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_trackTypeIsEvent":true,"vtp_enableGA4Schema":true,"tag_id"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49734	151.101.1.229	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:46 UTC	568	OUT	GET /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:47 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79831 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.23.0 X-JSD-Version-Type: version ETag: W/"137d7-KpZaAxY2fq10BSqIt+3sXsUCrzY" Accept-Ranges: bytes Age: 123135 Date: Wed, 24 Apr 2024 02:17:47 GMT X-Served-By: cache-fra-eddf8230096-FRA, cache-lax-kwhp1940126-LAX X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 6b 69 70 70 65 64 20 6d 69 6e 69 66 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 73 20 61 70 70 65 61 72 73 20 74 6f 20 62 65 20 61 6c 72 65 61 64 79 20 6d 69 6e 69 66 69 65 64 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 40 73 6e 6f 77 70 6c 6f 77 2f 6a 61 76 61 73 63 72 69 70 74 2d 74 72 61 63 6b 65 72 40 33 2e 32 33 2e 30 2f 64 69 73 74 2f 73 70 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f Data Ascii: /** * Skipped minification because the original files appears to be already minified. * Original file: /npm/@snowplow/javascript-tracker@3.23.0/dist/sp.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 2c 77 69 74 68 4a 73 6f 6e 50 72 6f 63 65 73 73 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 7d 2c 62 75 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 65 28 74 68 69 73 2c 6f 2c 69 29 2c 6e 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 72 29 7b 69 66 28 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 65 29 7b 69 66 28 72 3d 74 2e 61 64 64 2c 6e 29 7b 76 61 72 20 69 3d 30 2c 61 3d 30 2c 63 3d 5b 5d 3b 69 66 28 6e 29 7b 6e 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 29 3b 64 6f 7b 76 61 72 20 73 3d 6e Data Ascii: ,withJsonProcessor:function(n){e=n},build:function(){return null==e\|\|e(this,o,i),n}}}function o(e){return function(t,o,r){for(var i=function(n,o,r){if(n=JSON.stringify(n),e){if(r=t.add,n){var i=0,a=0,c=[];if(n){n=unescape(encodeURIComponent(n));do{var s=n
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 61 29 3a 6e 3d 6f 2c 6e 7d 2c 63 3d 76 6f 69 64 20 30 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 6f 5b 73 5d 3b 22 63 78 22 3d 3d 3d 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 3f 63 3d 61 28 63 2c 75 2e 6a 73 6f 6e 29 3a 69 28 75 2e 6a 73 6f 6e 2c 75 2e 6b 65 79 49 66 45 6e 63 6f 64 65 64 2c 75 2e 6b 65 79 49 66 4e 6f 74 45 6e 63 6f 64 65 64 29 7d 6f 2e 6c 65 6e 67 74 68 3d 30 2c 72 2e 6c 65 6e 67 74 68 26 26 28 63 3d 61 28 63 2c 6f 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 63 6f 6e 74 65 78 74 73 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 28 5b 5d 2c 72 2c 21 30 29 7d 29 2c 72 2e 6c 65 6e 67 Data Ascii: a):n=o,n},c=void 0,s=0;s<o.length;s++){var u=o[s];"cx"===u.keyIfEncoded?c=a(c,u.json):i(u.json,u.keyIfEncoded,u.keyIfNotEncoded)}o.length=0,r.length&&(c=a(c,o={schema:"iglu:com.snowplowanalytics.snowplow/contexts/jsonschema/1-0-0",data:n([],r,!0)}),r.leng
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 28 65 29 7b 65 3a 7b 69 66 28 67 28 65 29 29 7b 76 61 72 20 72 3d 65 5b 30 5d 2c 69 3d 21 31 3b 74 72 79 7b 69 3d 72 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 21 31 7d 69 66 28 21 30 3d 3d 3d 69 29 7b 65 3d 41 28 65 5b 31 5d 2c 6e 2c 74 2c 6f 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 68 28 65 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 30 2c 6f 3d 30 2c 72 3d 65 2e 61 63 63 65 70 74 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 65 2e 61 63 63 65 70 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 28 65 2c 6e 29 Data Ascii: (e){e:{if(g(e)){var r=e[0],i=!1;try{i=r({event:n.getPayload(),eventType:t,eventSchema:o})}catch(e){i=!1}if(!0===i){e=A(e[1],n,t,o);break e}}else if(h(e)&&function(e,n){var t=0,o=0,r=e.accept;return Array.isArray(r)?e.accept.some((function(e){return w(e,n)
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 29 3f 65 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 29 7d 29 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 21 21 28 72 28 65 29 26 26 22 73 63 68 65 6d 61 22 69 6e 20 65 26 26 22 64 61 74 61 22 69 6e 20 65 29 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 63 68 65 6d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: eturn Array.isArray(e)&&e.every((function(e){return"string"==typeof e}))}function f(e){return d(e)?e.every((function(e){return l(e)})):"string"==typeof e&&l(e)}function m(e){return!!(r(e)&&"schema"in e&&"data"in e)&&("string"==typeof e.schema&&"object"==t
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 6f 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 65 3d 62 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3a 69 66 28 6d 28 65 29 29 65 3d 5b 65 5d 3b 65 6c 73 65 7b 69 66 28 70 28 65 29 29 7b 6e 3a 7b 76 61 72 20 72 3d 76 6f 69 64 20 30 3b 74 72 79 7b 69 66 28 72 3d 65 28 7b 65 76 65 6e 74 3a 6e 2e 67 65 74 50 61 79 6c 6f 61 64 28 29 2c 65 76 65 6e 74 54 79 70 65 3a 74 2c 65 76 65 6e 74 53 63 68 65 6d 61 3a 6f 7d 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 65 76 65 72 79 28 6d 29 7c 7c 6d 28 72 29 29 7b 76 61 72 20 69 3d 72 3b 62 72 65 61 6b 20 6e 7d 69 3d 76 6f 69 64 20 30 3b Data Ascii: return Array.isArray(e)?e:[e]}function A(e,n,t,o){var r;return e=b(e).map((function(e){e:if(m(e))e=[e];else{if(p(e)){n:{var r=void 0;try{if(r=e({event:n.getPayload(),eventType:t,eventSchema:o}),Array.isArray(r)&&r.every(m)\|\|m(r)){var i=r;break n}i=void 0;
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 6e 7d 3a 76 6f 69 64 20 30 29 26 26 65 2e 61 64 64 4a 73 6f 6e 28 22 63 78 22 2c 22 63 6f 22 2c 6e 29 2c 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 26 26 6e 2e 62 65 66 6f 72 65 54 72 61 63 6b 28 65 29 7d 63 61 74 63 68 28 65 29 7b 5a 65 2e 65 72 72 6f 72 28 22 50 6c 75 67 69 6e 20 62 65 66 6f 72 65 54 72 61 63 6b 22 2c 65 29 7d 7d 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 28 65 29 3b 76 61 72 20 69 3d 65 2e 62 75 69 6c 64 28 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 65 2e 61 66 74 65 72 54 72 61 63 6b 26 26 65 Data Ascii: jsonschema/1-0-0",data:n}:void 0)&&e.addJson("cx","co",n),r.forEach((function(n){try{n.beforeTrack&&n.beforeTrack(e)}catch(e){Ze.error("Plugin beforeTrack",e)}})),"function"==typeof c&&c(e);var i=e.build();return r.forEach((function(e){try{e.afterTrack&&e
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 3d 65 2e 6c 6f 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 63 61 6c 6c 28 65 2c 5a 65 29 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 61 63 74 69 76 61 74 65 43 6f 72 65 50 6c 75 67 69 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 61 6c 6c 28 65 2c 76 29 7d 29 29 2c 76 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 6e 3d 65 2e 65 76 65 6e 74 3b 72 65 74 75 72 6e 20 65 3d 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 75 6e 73 74 72 75 63 74 5f 65 76 65 6e 74 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 7b 73 63 68 65 6d 61 3a 65 3d 6e 2e 73 63 68 65 6d 61 2c 64 61 74 61 3a 6e 2e 64 61 74 61 7d 7d 2c 28 6e 3d Data Ascii: =e.logger)\|\|void 0===n\|\|n.call(e,Ze),null===(t=e.activateCorePlugin)\|\|void 0===t\|\|t.call(e,v)})),v}function T(e){var n=e.event;return e={schema:"iglu:com.snowplowanalytics.snowplow/unstruct_event/jsonschema/1-0-0",data:{schema:e=n.schema,data:n.data}},(n=
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 22 74 69 74 6c 65 22 29 3b 6e 26 26 6e 75 6c 6c 21 3d 6e 5b 30 5d 26 26 28 65 3d 6e 5b 30 5d 2e 74 65 78 74 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 6e 3d 2f 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 66 74 70 29 3a 29 5c 2f 2a 28 3f 3a 5b 5e 40 5d 2b 40 29 3f 28 5b 5e 3a 2f 23 5d 2b 29 2f 2e 65 78 65 63 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 31 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 22 2e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 2d 2d 6e 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 30 2c 6e 29 29 2c 22 2a 2e 22 3d 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 32 29 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 Data Ascii: ByTagName("title");n&&null!=n[0]&&(e=n[0].text)}return e}function D(e){var n=/^(?:(?:https?\|ftp):)\/(?:[^@]+@)?([^:/#]+)/.exec(e);return n?n[1]:e}function N(e){var n=e.length;return"."===e.charAt(--n)&&(e=e.slice(0,n)),"."===e.slice(0,2)&&(e=e.slice(1))
2024-04-24 02:17:47 UTC	1378	IN	Data Raw: 76 61 72 20 6f 3d 30 3b 66 6f 72 28 65 3d 47 28 65 29 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 74 5b 65 5b 6f 5d 5d 29 7b 6f 3d 21 30 3b 62 72 65 61 6b 20 65 7d 6f 3d 21 31 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 6e 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 6c 6f 77 6c 69 73 74 22 29 2c 74 3d 4a 28 65 29 3b 72 65 74 75 72 6e 20 71 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 20 69 6e 20 Data Ascii: var o=0;for(e=G(e);o<e.length;o++)if(t[e[o]]){o=!0;break e}o=!1}return o===n}))}function H(e){if(null==e\|\|"object"!=typeof e\|\|Array.isArray(e))return function(){return!0};var n=e.hasOwnProperty("allowlist"),t=J(e);return q(e,(function(e){return e.name in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49735	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:47 UTC	660	OUT	GET /_next/static/chunks/1b6d7d6a.f6bdee839f0818fb.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 55308 Connection: close Date: Tue, 16 Apr 2024 14:10:17 GMT Last-Modified: Tue, 16 Apr 2024 13:36:38 GMT ETag: "1c0b4e457c62548d0e46c380bed9cb82" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xARdWWrggaXQiAMCfhGpRye9pnR7-US8jUB1qx8xeEKzLOncaF8VGA== Age: 648451
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 33 36 5d 2c 7b 35 33 33 30 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 74 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 37 37 39 35 29 2c 69 3d 6e 28 32 33 31 39 36 29 2c 72 3d 6e 2e 6e 28 69 29 2c 73 3d 6e 28 38 35 31 39 34 29 2c 61 3d 6e 28 34 32 30 35 31 29 2c 75 3d 6e 2e 6e 28 61 29 2c 70 3d 6e 28 35 38 31 31 37 29 2c 63 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4636],{53309:function(e,t,n){n.d(t,{Z:function(){return Gt}});var o=n(37795),i=n(23196),r=n.n(i),s=n(85194),a=n(42051),u=n.n(a),p=n(58117),c=n(48834).Buffer;function l(e,t){var n=Object
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 65 2e 64 65 76 69 63 65 49 64 2c 6e 3d 65 2e 75 73 65 72 49 64 2c 6f 3d 65 2e 6f 70 74 4f 75 74 2c 69 3d 65 2e 73 65 73 73 69 6f 6e 49 64 2c 72 3d 65 2e 6c 61 73 74 45 76 65 6e 74 54 69 6d 65 2c 73 3d 65 2e 65 76 65 6e 74 49 64 2c 61 3d 65 2e 69 64 65 6e 74 69 66 79 49 64 2c 75 3d 65 2e 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 3b 69 66 28 74 68 69 73 2e 73 74 6f 72 61 67 65 21 3d 3d 42 29 7b 76 61 72 20 70 3d 5b 74 2c 64 65 2e 65 6e 63 6f 64 65 28 6e 7c 7c 22 22 29 2c 6f 3f 22 31 22 3a 22 22 2c 69 3f 69 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 72 3f 72 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 73 3f 73 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 3a 22 30 22 2c 61 3f 61 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 Data Ascii: e){var t=e.deviceId,n=e.userId,o=e.optOut,i=e.sessionId,r=e.lastEventTime,s=e.eventId,a=e.identifyId,u=e.sequenceNumber;if(this.storage!==B){var p=[t,de.encode(n\|\|""),o?"1":"",i?i.toString(32):"0",r?r.toString(32):"0",s?s.toString(32):"0",a?a.toString(32)
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6f 6e 4e 65 77 53 65 73 73 69 6f 6e 53 74 61 72 74 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 65 73 73 69 6f 6e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 45 76 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 2b 2b 2c 74 68 69 73 2e 5f 65 76 65 6e 74 49 64 7d 2c 53 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 49 64 65 6e 74 69 66 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ewSessionStart=function(e){this._onNewSessionStartCallbacks.push(e)},St.prototype.getSessionId=function(){return this._sessionId},St.prototype.nextEventId=function(){return this._eventId++,this._eventId},St.prototype.nextIdentifyId=function(){return this.
2024-04-24 02:17:48 UTC	5214	IN	Data Raw: 31 33 3d 3d 3d 65 26 26 28 31 3d 3d 3d 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 26 26 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 65 2c 6e 29 2c 70 2e 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 42 61 74 63 68 53 69 7a 65 3d 4d 61 74 68 2e 63 65 69 6c 28 74 2f 32 29 2c 70 2e 73 65 6e 64 45 76 65 6e 74 73 28 29 29 29 7d 63 61 74 63 68 28 46 74 29 7b 7d 7d 29 29 7d 63 61 74 63 68 28 46 74 29 7b 76 61 72 20 63 3d 22 52 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 3b 4e 65 2e 65 72 72 6f 72 28 63 29 2c 70 2e 5f 6c 6f 67 45 72 72 6f 72 73 4f 6e 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 29 2c 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 73 28 6f 2c 69 2c 30 2c 63 2c 7b 72 65 61 73 6f 6e 3a 46 74 2e 6d Data Ascii: 13===e&&(1===p.options.uploadBatchSize&&p.removeEvents(o,i,e,n),p.options.uploadBatchSize=Math.ceil(t/2),p.sendEvents()))}catch(Ft){}}))}catch(Ft){var c="Request failed to send";Ne.error(c),p._logErrorsOnEvents(o,i,0,c),p.removeEvents(o,i,0,c,{reason:Ft.m
2024-04-24 02:17:48 UTC	942	IN	Data Raw: 65 6e 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2e 69 64 65 6e 74 69 66 79 28 65 2c 74 29 7d 2c 4b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 56 65 72 73 69 6f 6e 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2e 73 65 74 56 65 72 73 69 6f 6e 4e 61 6d 65 28 65 29 7d 2c 4b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2e 6c 6f 67 45 76 65 6e 74 28 65 2c 74 2c 6e 29 7d 2c 4b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 45 76 65 6e 74 57 69 74 68 47 72 6f 75 70 73 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: entify=function(e,t){this.getInstance().identify(e,t)},Kt.prototype.setVersionName=function(e){this.getInstance().setVersionName(e)},Kt.prototype.logEvent=function(e,t,n){return this.getInstance().logEvent(e,t,n)},Kt.prototype.logEventWithGroups=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49736	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:47 UTC	656	OUT	GET /_next/static/chunks/6960-33ffbda0e04efb32.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 181528 Connection: close Date: Sun, 14 Apr 2024 16:28:09 GMT Last-Modified: Fri, 12 Apr 2024 16:56:55 GMT ETag: "30c77f1c465ffebc4a34178e9e87e6b9" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hvmr5YsO6_i-ORwt64-njTQULat_YOIrWSd_gKSwtOXrD7E6iNsZ1w== Age: 812979
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 36 30 5d 2c 7b 32 30 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 61 7d 7d 29 3b 76 61 72 20 72 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6960],{20355:function(t,e,n){"use strict";n.d(e,{v:function(){return va}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(t){for(var e=[],n=1;n<arguments.length;n++
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 7d 76 61 72 20 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 62 75 66 66 65 72 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 38 29 2c 51 74 28 29 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 74 68 69 73 2e 62 75 66 66 65 72 29 2c 74 68 69 73 2e 62 75 66 66 65 72 5b 30 5d 3d 31 32 37 26 74 68 69 73 2e 62 75 66 66 65 72 5b 30 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 61 64 49 6e 74 33 32 28 30 29 2c 6e 3d 74 68 69 73 2e 72 65 61 64 49 6e 74 33 32 28 34 29 2c 72 3d 22 22 3b 64 6f 7b 76 61 72 20 6f 3d 65 25 74 2a 34 32 39 34 39 36 37 32 Data Ascii: window.msCrypto}var te=function(){function t(){this.buffer=new Uint8Array(8),Qt().getRandomValues(this.buffer),this.buffer[0]=127&this.buffer[0]}return t.prototype.toString=function(t){var e=this.readInt32(0),n=this.readInt32(4),r="";do{var o=e%t*42949672
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 7b 69 73 49 6e 46 6f 72 65 67 72 6f 75 6e 64 41 74 3a 6c 6e 2c 73 65 6c 65 63 74 49 6e 46 6f 72 65 67 72 6f 75 6e 64 50 65 72 69 6f 64 73 46 6f 72 3a 66 6e 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 6e 3d 5b 5d 2c 6e 28 29 2c 72 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 6e 28 29 7b 69 66 28 21 28 61 6e 2e 6c 65 6e 67 74 68 3e 32 35 30 30 29 29 7b 76 61 72 20 74 3d 61 6e 5b 61 6e 2e 6c 65 6e 67 74 68 2d 31 5d 2c 65 3d 5a 28 29 3b 76 6f 69 64 20 30 21 3d 3d 74 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 65 6e 64 7c 7c 61 6e 2e 70 75 73 68 28 7b 73 74 61 72 74 3a 65 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 29 7b 69 66 28 30 21 3d 3d 61 6e 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 61 6e 5b 61 6e 2e 6c 65 6e 67 74 68 2d Data Ascii: ;return{isInForegroundAt:ln,selectInForegroundPeriodsFor:fn,stop:function(){an=[],n(),r()}}}function un(){if(!(an.length>2500)){var t=an[an.length-1],e=Z();void 0!==t&&void 0===t.end\|\|an.push({start:e})}}function cn(){if(0!==an.length){var t=an[an.length-
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 73 74 6f 70 28 29 2c 64 2e 6e 6f 74 69 66 79 28 29 29 7d 72 65 74 75 72 6e 7b 65 76 65 6e 74 3a 6f 2c 73 74 6f 70 3a 70 2c 73 74 6f 70 4f 62 73 65 72 76 61 62 6c 65 3a 64 2c 67 65 74 20 68 61 73 45 72 72 6f 72 28 29 7b 72 65 74 75 72 6e 20 63 2e 65 76 65 6e 74 43 6f 75 6e 74 73 2e 65 72 72 6f 72 43 6f 75 6e 74 3e 30 7d 2c 67 65 74 20 68 61 73 50 61 67 65 41 63 74 69 76 69 74 79 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 69 7d 2c 67 65 74 55 73 65 72 41 63 74 69 76 69 74 79 3a 6e 2c 61 64 64 46 72 75 73 74 72 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 2e 70 75 73 68 28 74 29 7d 2c 73 74 61 72 74 43 6c 6f 63 6b 73 3a 73 2c 69 73 53 74 6f 70 70 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 6c 7c 7c 32 Data Ascii: stop(),d.notify())}return{event:o,stop:p,stopObservable:d,get hasError(){return c.eventCounts.errorCount>0},get hasPageActivity(){return void 0!==i},getUserActivity:n,addFrustration:function(t){f.push(t)},startClocks:s,isStopped:function(){return 1===l\|\|2
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 28 74 29 7b 6f 26 26 21 75 28 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 3d 74 2c 72 2e 6e 6f 74 69 66 79 28 29 7d 28 74 29 2c 61 3d 74 7d 7d 29 7d 29 29 2c 31 65 33 29 2e 74 68 72 6f 74 74 6c 65 64 2c 65 78 70 61 6e 64 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4a 72 28 7b 6f 70 74 69 6f 6e 73 3a 74 2c 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 29 3f 73 28 74 29 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 67 65 74 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 72 65 6e 65 77 4f 62 73 65 72 76 61 62 6c 65 3a 72 2c 65 78 70 69 72 65 4f 62 73 65 72 76 61 62 6c 65 3a 6f 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 Data Ascii: (t){o&&!u()&&function(t){a=t,r.notify()}(t),a=t}})})),1e3).throttled,expandSession:function(){Jr({options:t,process:function(t){return u()?s(t):void 0}})},getSession:function(){return a},renewObservable:r,expireObservable:o,stop:function(){clearInterval(i
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 26 26 41 28 6e 2c 22 64 61 74 61 2d 22 29 29 72 65 74 75 72 6e 20 75 69 7d 72 65 74 75 72 6e 20 6f 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 31 65 35 26 26 22 64 61 74 61 3a 22 3d 3d 3d 6f 2e 73 6c 69 63 65 28 30 2c 35 29 3f 22 64 61 74 61 3a 74 72 75 6e 63 61 74 65 64 22 3a 6f 7d 76 61 72 20 5f 69 3d 31 3b 76 61 72 20 50 69 3d 2f 5b 5e 61 2d 7a 31 2d 36 2d 5f 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 44 69 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 50 69 2e 74 65 73 74 28 65 29 3f 22 64 69 76 22 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 55 69 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 2e 72 75 6c 65 73 7c 7c 74 2e 63 73 73 52 75 6c 65 Data Ascii: &&A(n,"data-"))return ui}return o&&"string"===typeof o&&o.length>1e5&&"data:"===o.slice(0,5)?"data:truncated":o}var _i=1;var Pi=/[^a-z1-6-_]/;function Di(t){var e=t.toLowerCase().trim();return Pi.test(e)?"div":e}function Ui(t){try{var e=t.rules\|\|t.cssRule
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 6b 65 20 73 75 72 65 20 43 53 50 20 69 73 20 63 6f 72 72 65 63 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 64 61 74 61 64 6f 67 68 71 2e 63 6f 6d 2f 72 65 61 6c 5f 75 73 65 72 5f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 66 61 71 2f 63 6f 6e 74 65 6e 74 5f 73 65 63 75 72 69 74 79 5f 70 6f 6c 69 63 79 22 29 3a 6d 65 28 74 29 2c 64 61 2e 63 61 6c 6c 62 61 63 6b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 29 7d 29 29 2c 64 61 3d 7b 73 74 61 74 75 73 3a 32 7d 29 3a 6d 65 28 74 29 7d 76 61 72 20 67 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 70 61 29 2c 64 74 28 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 Data Ascii: ke sure CSP is correctly configured https://docs.datadoghq.com/real_user_monitoring/faq/content_security_policy"):me(t),da.callbacks.forEach((function(t){return t()})),da={status:2}):me(t)}var ga=function(t,e){if(void 0===e&&(e=pa),dt()\|\|"function"!==type
2024-04-24 02:17:48 UTC	13232	IN	Data Raw: 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 70 28 65 2e 6c 6f 6f 6b 75 70 43 6f 6f 6b 69 65 2c 74 2c 65 2e 63 6f 6f 6b 69 65 4d 69 6e 75 74 65 73 2c 65 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 2c 65 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 29 7d 7d 2c 76 3d 7b 6e 61 6d 65 3a 22 71 75 65 72 79 73 74 72 69 6e 67 22 2c 6c 6f 6f 6b 75 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 Data Ascii: eof document&&p(e.lookupCookie,t,e.cookieMinutes,e.cookieDomain,e.cookieOptions)}},v={name:"querystring",lookup:function(t){var e;if("undefined"!==typeof window){var n=window.location.search;!window.location.search&&window.location.hash&&window.location.h
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 3d 6c 26 26 6c 2e 75 73 65 64 4b 65 79 7c 7c 69 2c 70 3d 6c 26 26 6c 2e 65 78 61 63 74 55 73 65 64 4b 65 79 7c 7c 69 2c 68 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 66 29 2c 67 3d 76 6f 69 64 20 30 21 3d 3d 65 2e 6a 6f 69 6e 41 72 72 61 79 73 3f 65 2e 6a 6f 69 6e 41 72 72 61 79 73 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6a 6f 69 6e 41 72 72 61 79 73 2c 76 3d 21 74 68 69 73 2e 69 31 38 6e 46 6f 72 6d 61 74 7c 7c 74 68 69 73 2e 69 31 38 6e 46 6f 72 6d 61 74 2e 68 61 6e 64 6c 65 41 73 4f 62 6a 65 63 74 3b 69 66 28 76 26 26 66 26 26 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 66 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 66 26 26 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 Data Ascii: =l&&l.usedKey\|\|i,p=l&&l.exactUsedKey\|\|i,h=Object.prototype.toString.apply(f),g=void 0!==e.joinArrays?e.joinArrays:this.options.joinArrays,v=!this.i18nFormat\|\|this.i18nFormat.handleAsObject;if(v&&f&&("string"!==typeof f&&"boolean"!==typeof f&&"number"!==ty
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 74 2e 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 3b 74 68 69 73 2e 65 73 63 61 70 65 3d 76 6f 69 64 20 30 21 3d 3d 65 2e 65 73 63 61 70 65 3f 65 2e 65 73 63 61 70 65 3a 76 2c 74 68 69 73 2e 65 73 63 61 70 65 56 61 6c 75 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 2e 65 73 63 61 70 65 56 61 6c 75 65 7c 7c 65 2e 65 73 63 61 70 65 56 61 6c 75 65 2c 74 68 69 73 2e 75 73 65 52 61 77 56 61 6c 75 65 54 6f 45 73 63 61 70 65 3d 76 6f 69 64 20 30 21 3d 3d 65 2e 75 73 65 52 61 77 56 61 6c 75 65 54 6f 45 73 63 61 70 65 26 26 65 2e 75 73 65 52 61 77 56 61 6c 75 65 54 6f 45 73 63 61 70 65 2c 74 68 69 73 2e 70 72 65 66 69 78 3d 65 2e 70 72 65 66 69 78 3f 68 28 65 2e 70 72 65 66 69 78 29 3a 65 2e 70 72 65 66 69 78 45 73 63 61 70 65 64 7c 7c 22 7b 7b 22 2c 74 Data Ascii: const e=t.interpolation;this.escape=void 0!==e.escape?e.escape:v,this.escapeValue=void 0===e.escapeValue\|\|e.escapeValue,this.useRawValueToEscape=void 0!==e.useRawValueToEscape&&e.useRawValueToEscape,this.prefix=e.prefix?h(e.prefix):e.prefixEscaped\|\|"{{",t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49737	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:47 UTC	656	OUT	GET /_next/static/chunks/9216.2fed4395c6aaaa86.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:47 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1056103 Connection: close Date: Mon, 22 Apr 2024 10:04:00 GMT Last-Modified: Mon, 22 Apr 2024 08:43:48 GMT ETag: "12e84f18d00fcbab4bbb6e73a50db8e6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QSDTVG-ZJ5DBlFeBP8mjRZpJ8mtIgftYmdfYFocJ4lMb2scgq8CPVA== Age: 144828
2024-04-24 02:17:47 UTC	15775	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 31 36 5d 2c 7b 39 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 36 37 29 2c 6f 3d 72 28 33 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 61 3d 72 28 31 35 33 32 37 29 2c 73 3d 72 28 39 34 30 39 37 29 2c 75 3d 72 28 38 34 31 30 39 29 2c 63 3d 72 28 36 37 39 38 35 29 2c 6c 3d 72 28 37 37 38 37 34 29 2c 66 3d 72 28 38 32 36 34 38 29 2c 64 3d 72 28 36 30 36 34 34 29 2c 70 3d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9216],{9669:function(e,t,r){e.exports=r(51609)},55448:function(e,t,r){"use strict";var n=r(64867),o=r(36026),i=r(4372),a=r(15327),s=r(94097),u=r(84109),c=r(67985),l=r(77874),f=r(82648),d=r(60644),p=
2024-04-24 02:17:47 UTC	16384	IN	Data Raw: 22 2b 61 29 3b 72 2e 70 75 73 68 28 6e 29 2c 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 72 29 29 7b 76 61 72 20 73 2c 75 3d 61 3f 61 2b 22 2e 22 2b 6e 3a 6e 3b 69 66 28 72 26 26 21 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 72 29 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 7b 7d 22 29 29 72 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 3b 65 6c 73 65 20 69 66 28 6f 2e 65 6e 64 73 57 69 74 68 28 6e 2c 22 5b 5d 22 29 26 26 28 73 3d 6f 2e 74 6f 41 72 72 61 79 28 72 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 6f 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 Data Ascii: "+a);r.push(n),o.forEach(n,(function(r,n){if(!o.isUndefined(r)){var s,u=a?a+"."+n:n;if(r&&!a&&"object"===typeof r)if(o.endsWith(n,"{}"))r=JSON.stringify(r);else if(o.endsWith(n,"[]")&&(s=o.toArray(r)))return void s.forEach((function(e){!o.isUndefined(e)&&
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 55 29 2e 65 78 65 63 28 74 29 3b 69 66 28 72 29 7b 76 61 72 20 6e 3d 4e 75 6d 62 65 72 28 72 5b 31 5d 29 2c 6f 3d 4e 75 6d 62 65 72 28 72 5b 32 5d 29 3b 69 66 28 21 69 73 4e 61 4e 28 6e 29 26 26 21 69 73 4e 61 4e 28 6f 29 29 72 65 74 75 72 6e 20 6e 65 77 20 65 28 6e 2c 6f 2c 4e 75 6d 62 65 72 28 72 5b 34 5d 29 7c 7c 30 2c 72 5b 35 5d 7c 7c 76 6f 69 64 20 30 29 7d 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 61 72 65 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 6a 6f 72 3e 65 2e 6d 61 6a 6f 72 3f 31 3a 74 68 69 73 2e 6d 61 6a 6f 72 3c 65 2e 6d 61 6a 6f 72 3f 2d 31 3a 74 68 69 73 2e 6d 69 6e 6f 72 3e 65 2e 6d 69 6e 6f 72 3f 31 3a 74 68 69 73 2e Data Ascii: t){var r=new RegExp(U).exec(t);if(r){var n=Number(r[1]),o=Number(r[2]);if(!isNaN(n)&&!isNaN(o))return new e(n,o,Number(r[4])\|\|0,r[5]\|\|void 0)}}},e.prototype.compareTo=function(e){return this.major>e.major?1:this.major<e.major?-1:this.minor>e.minor?1:this.
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 79 3a 6e 7d 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6f 3d 61 2e 73 65 6e 74 28 29 2c 69 3d 7b 73 74 61 74 75 73 3a 6f 2e 73 74 61 74 75 73 7d 2c 5b 34 2c 6f 2e 74 65 78 74 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 69 2e 62 6f 64 79 3d 61 2e 73 65 6e 74 28 29 2c 5b 32 2c 69 5d 7d 7d 29 29 7d 29 29 2c 6f 29 7d 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 3d 22 69 6e 69 74 69 61 6c 56 61 72 69 61 6e 74 73 22 7d 28 6d 65 7c 7c 28 6d 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 73 74 6f 72 61 67 65 22 2c 65 2e 49 6e 69 74 69 61 6c 56 61 72 Data Ascii: y:n})];case 1:return o=a.sent(),i={status:o.status},[4,o.text()];case 2:return i.body=a.sent(),[2,i]}}))})),o)}};!function(e){e.LocalStorage="localStorage",e.InitialVariants="initialVariants"}(me\|\|(me={})),function(e){e.LocalStorage="storage",e.InitialVar
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 31 2c 74 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 2e 73 65 6e 74 28 29 2c 5b 32 5d 7d 7d 29 29 7d 29 29 7d 29 29 2c 5b 32 5d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 52 65 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 74 72 69 65 73 42 61 63 6b 6f 66 66 26 26 74 68 69 73 2e 72 65 74 72 69 65 73 42 61 63 6b 6f 66 66 2e 63 61 6e 63 65 6c 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 75 73 65 72 50 72 6f 76 69 64 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 55 73 65 72 28 29 2c 6f 3d 66 65 28 66 65 28 7b 7d Data Ascii: 1,t)];case 1:return r.sent(),[2]}}))}))})),[2]}))}))},e.prototype.stopRetries=function(){this.retriesBackoff&&this.retriesBackoff.cancel()},e.prototype.addContext=function(e){var t,r,n=null===(t=this.userProvider)\|\|void 0===t?void 0:t.getUser(),o=fe(fe({}
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 5d 5d 2c 6f 73 3a 5b 5b 2f 6d 69 63 72 6f 73 6f 66 74 20 28 77 69 6e 64 6f 77 73 29 20 28 76 69 73 74 61 7c 78 70 29 2f 69 5d 2c 5b 66 2c 68 5d 2c 5b 2f 28 77 69 6e 64 6f 77 73 29 20 6e 74 20 36 5c 2e 32 3b 20 28 61 72 6d 29 2f 69 2c 2f 28 77 69 6e 64 6f 77 73 20 28 3f 3a 70 68 6f 6e 65 28 3f 3a 20 6f 73 29 3f 7c 6d 6f 62 69 6c 65 29 29 5b 5c 2f 20 5d 3f 28 5b 5c 64 5c 2e 5c 77 20 5d 2a 29 2f 69 2c 2f 28 77 69 6e 64 6f 77 73 29 5b 5c 2f 20 5d 3f 28 5b 6e 74 63 65 5c 64 5c 2e 20 5d 2b 5c 77 29 28 3f 21 2e 2b 78 62 6f 78 29 2f 69 5d 2c 5b 66 2c 5b 68 2c 48 2c 57 5d 5d 2c 5b 2f 28 77 69 6e 28 3f 3d 33 7c 39 7c 6e 29 7c 77 69 6e 20 39 78 20 29 28 5b 6e 74 5c 64 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 66 2c 22 57 69 6e 64 6f 77 73 22 5d 2c 5b 68 2c 48 2c 57 5d 5d 2c Data Ascii: ]],os:[[/microsoft (windows) (vista\|xp)/i],[f,h],[/(windows) nt 6\.2; (arm)/i,/(windows (?:phone(?: os)?\|mobile))[\/ ]?([\d\.\w ]*)/i,/(windows)[\/ ]?([ntce\d\. ]+\w)(?!.+xbox)/i],[f,[h,H,W]],[/(win(?=3\|9\|n)\|win 9x )([nt\d\.]+)/i],[[f,"Windows"],[h,H,W]],
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 5d 2a 62 75 6e 64 6c 65 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 73 2a 24 2f 69 2c 45 65 3d 2f 28 5c 53 2b 29 20 6c 69 6e 65 20 28 5c 64 2b 29 28 3f 3a 20 3e 20 65 76 61 6c 20 6c 69 6e 65 20 5c 64 2b 29 2a 20 3e 20 65 76 61 6c 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 74 20 69 6e 20 65 29 7b 76 61 72 20 72 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 72 3f 72 3a 76 6f 69 64 20 30 7d 7d 76 61 72 20 6b 65 3d 22 61 67 65 6e 74 22 2c 53 65 3d 22 63 6f 6e 73 6f 6c 65 22 2c 43 65 3d 22 6c 6f 67 67 65 72 22 2c 54 65 3d 22 6e 65 74 77 6f 72 6b 22 2c 50 65 3d 22 73 6f 75 72 63 65 22 2c 41 65 Data Ascii: ]bundle)(?::(\d+))?(?::(\d+))?\s$/i,Ee=/(\S+) line (\d+)(?: > eval line \d+)* > eval/i;function Oe(e,t){if("object"===typeof e&&e&&t in e){var r=e[t];return"string"===typeof r?r:void 0}}var ke="agent",Se="console",Ce="logger",Te="network",Pe="source",Ae
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 65 7d 7d 76 61 72 20 4d 74 3b 66 75 6e 63 74 69 6f 6e 20 46 74 28 65 29 7b 76 61 72 20 74 3d 42 74 28 65 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 2c 22 6c 6f 67 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 30 22 3d 3d 3d 65 7c 7c 22 31 22 3d 3d 3d 65 7d 28 74 29 3f 74 3a 55 74 28 65 29 3b 72 65 74 75 72 6e 7b 74 72 61 63 6b 69 6e 67 54 79 70 65 3a 72 2c 69 73 54 72 61 63 6b 65 64 3a 22 31 22 3d 3d 3d 72 7d 7d 28 65 2c 74 29 7d 29 29 3b 72 65 74 75 72 6e 7b 66 69 6e 64 54 72 61 63 6b 65 64 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 66 69 6e 64 41 63 74 69 76 65 53 65 73 73 69 Data Ascii: e}}var Mt;function Ft(e){var t=Bt(e.cookieOptions,"logs",(function(t){return function(e,t){var r=function(e){return"0"===e\|\|"1"===e}(t)?t:Ut(e);return{trackingType:r,isTracked:"1"===r}}(e,t)}));return{findTrackedSession:function(e){var r=t.findActiveSessi
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 72 2c 6c 5b 30 5d 29 3a 76 6f 69 64 20 30 3d 3d 3d 73 2e 43 6d 70 41 70 69 4d 6f 64 65 6c 2e 74 63 4d 6f 64 65 6c 3f 74 68 69 73 2e 63 61 6c 6c 51 75 65 75 65 2e 70 75 73 68 28 6f 28 5b 65 2c 74 2c 72 5d 2c 6c 29 29 3a 74 68 69 73 2e 69 73 43 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 28 65 29 26 26 74 68 69 73 2e 69 73 42 75 69 6c 74 49 6e 43 6f 6d 6d 61 6e 64 28 65 29 3f 6e 65 77 20 61 2e 43 6f 6d 6d 61 6e 64 4d 61 70 5b 65 5d 28 74 68 69 73 2e 63 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 73 5b 65 5d 2c 6c 5b 30 5d 2c 6e 75 6c 6c 2c 72 29 3a 6e 65 77 20 61 2e 43 6f 6d 6d 61 6e 64 4d 61 70 5b 65 5d 28 72 2c 6c 5b 30 5d 29 3a 72 28 6e 75 6c 6c 2c 21 31 29 7d 65 6c 73 65 20 72 28 6e 75 6c 6c 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 72 67 65 51 75 65 Data Ascii: r,l[0]):void 0===s.CmpApiModel.tcModel?this.callQueue.push(o([e,t,r],l)):this.isCustomCommand(e)&&this.isBuiltInCommand(e)?new a.CommandMap[e](this.customCommands[e],l[0],null,r):new a.CommandMap[e](r,l[0]):r(null,!1)}else r(null,!1)},e.prototype.purgeQue
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 49 53 49 42 4c 45 3d 22 76 69 73 69 62 6c 65 22 2c 65 2e 48 49 44 44 45 4e 3d 22 68 69 64 64 65 6e 22 2c 65 2e 44 49 53 41 42 4c 45 44 3d 22 64 69 73 61 62 6c 65 64 22 7d 28 74 2e 44 69 73 70 6c 61 79 53 74 61 74 75 73 7c 7c 28 74 2e 44 69 73 70 6c 61 79 53 74 61 74 75 73 3d 7b 7d 29 29 7d 2c 35 39 36 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 43 5f 4c 4f 41 44 45 44 3d 22 74 63 6c 6f Data Ascii: rty(t,"__esModule",{value:!0}),function(e){e.VISIBLE="visible",e.HIDDEN="hidden",e.DISABLED="disabled"}(t.DisplayStatus\|\|(t.DisplayStatus={}))},59680:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),function(e){e.TC_LOADED="tclo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49738	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:47 UTC	656	OUT	GET /_next/static/chunks/5835-418bbb9fccea5315.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:48 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21801 Connection: close Date: Mon, 22 Apr 2024 17:40:48 GMT Last-Modified: Mon, 22 Apr 2024 16:51:30 GMT ETag: "fc8d876a973a29258c6f89b62bed455a" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XZXCTgQB83yyv53wO3ach5gdFUC2XTBCqoDZILxHOVjzgHegTnVcIg== Age: 117420
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 33 35 5d 2c 7b 38 38 35 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 22 3a 5b 36 36 37 39 31 2c 39 2c 31 32 33 34 2c 37 34 38 33 2c 32 38 37 30 2c 31 38 37 39 2c 34 38 36 30 2c 31 37 31 36 2c 31 30 31 36 2c 37 33 39 34 2c 39 30 37 33 2c 33 32 39 38 2c 32 34 34 32 2c 35 39 32 31 2c 39 35 39 38 2c 38 37 34 35 2c 36 37 39 31 5d 2c 22 2e 2f 64 61 22 3a 5b 38 35 39 32 31 2c 39 2c 35 39 32 31 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 5b 39 34 31 38 30 2c 33 2c 34 31 38 30 5d 2c 22 2e 2f 64 61 2d 44 4b 2f 74 72 61 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5835],{88532:function(e,t,n){var r={"./":[66791,9,1234,7483,2870,1879,4860,1716,1016,7394,9073,3298,2442,5921,9598,8745,6791],"./da":[85921,9,5921],"./da-DK/translation":[94180,3,4180],"./da-DK/tran
2024-04-24 02:17:48 UTC	5417	IN	Data Raw: 20 66 72 65 65 21 20 3c 61 20 74 61 72 67 65 74 3d 5c 27 5f 62 6c 61 6e 6b 5c 27 20 68 72 65 66 3d 5c 27 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 78 70 6c 6f 72 65 2f 6e 65 77 2d 66 72 65 65 2d 62 61 73 69 63 2d 61 63 63 6f 75 6e 74 5c 27 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 22 7d 2c 22 70 61 69 64 54 72 61 6e 73 66 65 72 45 6d 61 69 6c 54 65 6d 70 6c 61 74 65 22 3a 7b 22 70 72 6f 64 75 63 74 5f 64 65 74 61 69 6c 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 65 78 74 22 3a 22 43 6f 6e 74 65 6e 74 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 5f 74 65 78 74 22 3a 22 45 78 70 69 72 61 74 69 6f 6e 22 2c 22 74 6f 74 61 6c 5f 74 65 78 74 22 3a 22 54 6f 74 61 6c 22 2c 22 70 72 69 63 65 5f 74 65 78 74 22 3a 22 50 72 69 63 65 22 2c 22 Data Ascii: free! <a target=\'_blank\' href=\'https://wetransfer.com/explore/new-free-basic-account\'>Learn more</a>"},"paidTransferEmailTemplate":{"product_details":{"content_text":"Content","expiration_text":"Expiration","total_text":"Total","price_text":"Price","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49739	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:48 UTC	656	OUT	GET /_next/static/chunks/6878.ce0a8a7f3f44187c.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:48 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1593702 Connection: close Date: Tue, 23 Apr 2024 15:34:30 GMT Last-Modified: Tue, 23 Apr 2024 13:52:35 GMT ETag: "1cb6370c120798bfaf71d83b6465b7e8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27f8684163b0b232d220b4ced517da20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qepRzcxlKYfOe06UtmUIvIHm_4_kZI0Hg5LR9ZeWecV5La3e5_GNkA== Age: 38599
2024-04-24 02:17:48 UTC	2926	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 37 38 5d 2c 7b 39 34 39 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 63 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 38 37 38 38 29 2c 69 3d 6e 28 39 34 37 37 36 29 2c 61 3d 6e 2e 6e 28 69 29 2c 6f 3d 6e 28 35 32 33 32 32 29 2c 73 3d 28 6e 28 38 36 35 33 34 29 2c 6e 28 32 37 38 34 29 29 2c 6c 3d 6e 28 31 37 36 33 35 29 2c 63 3d 6e 28 33 34 34 30 32 29 2c 64 3d 6e 28 36 36 31 34 35 29 2c 75 3d 6e 28 34 32 34 39 39 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[6878],{94974:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return nc}});var r=n(98788),i=n(94776),a=n.n(i),o=n(52322),s=(n(86534),n(2784)),l=n(17635),c=n(34402),d=n(66145),u=n(42499)
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 5f 75 70 64 61 74 65 5f 74 65 72 6d 73 5f 66 61 69 6c 65 64 22 29 2c 45 52 52 4f 52 5f 42 4f 55 4e 44 41 52 59 3a 22 22 2e 63 6f 6e 63 61 74 28 59 2c 22 5f 65 72 72 6f 72 5f 62 6f 75 6e 64 61 72 79 22 29 7d 2c 4b 3d 22 61 64 74 65 63 68 5f 77 61 6c 6c 70 61 70 65 72 22 2c 4a 3d 7b 55 50 44 41 54 45 5f 53 54 41 54 45 5f 46 41 49 4c 45 44 3a 22 22 2e 63 6f 6e 63 61 74 28 4b 2c 22 5f 75 70 64 61 74 65 5f 73 74 61 74 65 5f 66 61 69 6c 65 64 22 29 2c 55 50 44 41 54 45 5f 43 48 41 4e 4e 45 4c 5f 46 41 49 4c 45 44 3a 22 22 2e 63 6f 6e 63 61 74 28 4b 2c 22 5f 75 70 64 61 74 65 5f 63 68 61 6e 6e 65 6c 5f 66 61 69 6c 65 64 22 29 2c 55 50 44 41 54 45 5f 54 45 52 4d 53 5f 46 41 49 4c 45 44 3a 22 22 2e 63 6f 6e 63 61 74 28 4b 2c 22 5f 75 70 64 61 74 65 5f 74 65 72 6d Data Ascii: _update_terms_failed"),ERROR_BOUNDARY:"".concat(Y,"_error_boundary")},K="adtech_wallpaper",J={UPDATE_STATE_FAILED:"".concat(K,"_update_state_failed"),UPDATE_CHANNEL_FAILED:"".concat(K,"_update_channel_failed"),UPDATE_TERMS_FAILED:"".concat(K,"_update_term
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 28 30 2c 73 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 69 3d 6e 5b 30 5d 2c 6f 3d 6e 5b 31 5d 2c 63 3d 28 30 2c 73 2e 75 73 65 53 74 61 74 65 29 28 5b 5d 29 2c 64 3d 63 5b 30 5d 2c 75 3d 63 5b 31 5d 2c 70 3d 28 30 2c 73 2e 75 73 65 53 74 61 74 65 29 28 5b 5d 29 2c 67 3d 70 5b 30 5d 2c 66 3d 70 5b 31 5d 2c 6d 3d 28 30 2c 6c 2e 76 39 29 28 54 74 2e 77 34 29 2c 68 3d 28 30 2c 6c 2e 76 39 29 28 78 74 2e 6f 66 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 73 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 2c 74 3d 65 5b 30 5d 2c 6e 3d 65 5b 31 5d 2c 72 3d 28 30 2c 73 2e 75 73 65 52 65 66 29 28 76 6f 69 64 20 30 29 2c 69 3d 28 30 2c 73 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 Data Ascii: nction(e){var t,n=(0,s.useState)(null),i=n[0],o=n[1],c=(0,s.useState)([]),d=c[0],u=c[1],p=(0,s.useState)([]),g=p[0],f=p[1],m=(0,l.v9)(Tt.w4),h=(0,l.v9)(xt.of),w=function(){var e=(0,s.useState)(!1),t=e[0],n=e[1],r=(0,s.useRef)(void 0),i=(0,s.useCallback)((
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 75 70 6f 6e 43 6f 64 65 2c 64 3d 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 6d 70 61 69 67 6e 49 6d 61 67 65 2c 75 3d 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 6d 70 61 69 67 6e 54 69 74 6c 65 3b 22 4c 61 73 74 20 43 68 61 6e 63 65 22 3d 3d 3d 75 26 26 28 75 3d 50 74 2e 5a 2e 74 28 22 64 69 73 63 6f 75 6e 74 2e 62 61 6e 6e 65 72 2e 6c 61 73 74 5f 63 68 61 6e 63 65 22 29 29 3b 76 61 72 20 70 3d 44 74 2e 5a 50 2e 63 72 65 61 74 65 43 68 65 63 6b 6f 75 74 52 6f 75 74 65 28 7b 74 69 65 72 3a 5a 74 2e 79 76 2e 50 52 4f 5f 32 30 32 32 2c 62 69 6c 6c 69 6e 67 50 65 72 69 6f 64 3a 5a 74 2e 58 54 Data Ascii: oid 0===a?void 0:a.couponCode,d=null===a\|\|void 0===a?void 0:a.campaignImage,u=null===a\|\|void 0===a?void 0:a.campaignTitle;"Last Chance"===u&&(u=Pt.Z.t("discount.banner.last_chance"));var p=Dt.ZP.createCheckoutRoute({tier:Zt.yv.PRO_2022,billingPeriod:Zt.XT
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 62 65 6c 6c 65 64 62 79 22 3a 22 6c 61 6e 67 75 61 67 65 70 69 63 6b 65 72 5f 74 61 72 67 65 74 2d 62 75 74 74 6f 6e 22 2c 72 6f 6c 65 3a 22 6d 65 6e 75 22 2c 74 61 62 49 6e 64 65 78 3a 22 2d 31 22 2c 69 64 3a 22 6c 61 6e 67 75 61 67 65 70 69 63 6b 65 72 5f 6d 65 6e 75 2d 69 64 22 2c 6f 6e 4b 65 79 44 6f 77 6e 3a 6c 2c 63 68 69 6c 64 72 65 6e 3a 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 72 6f 6c 65 3a 22 6e 6f 6e 65 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 6f 2e 6a 73 78 29 28 22 62 75 74 74 6f 6e 22 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 65 2e 6c 61 62 65 6c 2c 63 6c 61 73 73 4e 61 6d 65 3a 52 28 29 28 7b 22 6c 61 6e 67 75 61 67 65 70 69 63 6b 65 72 5f 5f 61 63 74 69 Data Ascii: belledby":"languagepicker_target-button",role:"menu",tabIndex:"-1",id:"languagepicker_menu-id",onKeyDown:l,children:r.map((function(e){return(0,o.jsx)("li",{role:"none",children:(0,o.jsx)("button",{"aria-label":e.label,className:R()({"languagepicker__acti
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 6f 77 73 65 72 48 61 6e 64 6c 65 3a 21 30 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 78 70 6c 6f 72 65 2f 73 65 63 75 72 69 74 79 22 2c 6e 61 6d 65 3a 22 6e 61 76 69 67 61 74 69 6f 6e 2e 66 65 61 74 75 72 65 73 2e 73 65 63 75 72 69 74 79 22 2c 74 72 61 63 6b 45 76 65 6e 74 3a 7b 63 61 74 65 67 6f 72 79 3a 22 6e 61 76 69 67 61 74 69 6f 6e 5f 62 61 72 22 2c 61 63 74 69 6f 6e 3a 22 63 6c 69 63 6b 4e 61 76 46 65 61 74 75 72 65 73 44 61 74 61 53 65 63 75 72 69 74 79 22 2c 70 72 6f 70 65 72 74 79 3a 22 69 6e 5f 64 72 6f 70 5f 64 6f 77 6e 22 2c 6c 61 62 65 6c 3a 28 30 2c 46 2e 24 52 29 28 65 29 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 7d 2c 73 68 6f 75 6c 64 42 72 Data Ascii: owserHandle:!0,target:"_blank"},{url:"https://wetransfer.com/explore/security",name:"navigation.features.security",trackEvent:{category:"navigation_bar",action:"clickNavFeaturesDataSecurity",property:"in_drop_down",label:(0,F.$R)(e)\|\|"anonymous"},shouldBr
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 4e 61 76 69 67 61 74 69 6f 6e 53 75 62 6d 65 6e 75 42 75 74 74 6f 6e 5f 5f 6c 61 62 65 6c 22 2c 74 69 74 6c 65 3a 6e 2c 63 68 69 6c 64 72 65 6e 3a 6e 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 57 72 2e 67 36 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 52 28 29 28 22 4e 61 76 69 67 61 74 69 6f 6e 53 75 62 6d 65 6e 75 42 75 74 74 6f 6e 5f 5f 61 72 72 6f 77 22 2c 7b 22 4e 61 76 69 67 61 74 69 6f 6e 53 75 62 6d 65 6e 75 42 75 74 74 6f 6e 5f 5f 61 72 72 6f 77 2d 2d 64 65 66 61 75 6c 74 22 3a 21 72 2c 22 4e 61 76 69 67 61 74 69 6f 6e 53 75 62 6d 65 6e 75 42 75 74 74 6f 6e 5f 5f 61 72 72 6f 77 2d 2d 6f 70 65 6e 22 3a 72 7d 29 7d 29 5d 7d 29 7d 2c 74 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 73 68 6f 77 53 65 70 Data Ascii: NavigationSubmenuButton__label",title:n,children:n}),(0,o.jsx)(Wr.g6,{className:R()("NavigationSubmenuButton__arrow",{"NavigationSubmenuButton__arrow--default":!r,"NavigationSubmenuButton__arrow--open":r})})]})},ti=function(e){var t=e.children,n=e.showSep
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 61 3d 74 68 69 73 2c 6c 3d 5b 5d 3b 74 68 69 73 2e 70 72 6f 70 73 2e 69 74 65 6d 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 69 3d 5b 22 6e 61 76 5f 5f 73 75 62 69 74 65 6d 22 5d 3b 65 2e 70 61 74 68 3d 3d 3d 74 2e 70 61 74 68 26 26 69 2e 70 75 73 68 28 22 6e 61 76 5f 5f 73 75 62 69 74 65 6d 2d 2d 69 73 2d 61 63 74 69 76 65 22 29 2c 6c 2e 70 75 73 68 28 28 30 2c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 28 6e 2c 28 30 2c 5f 65 2e 5a 29 28 28 30 2c 6b 2e 5a 29 28 7b 7d 2c 65 29 2c 7b 68 61 73 53 75 62 53 75 62 4e 61 76 3a 65 2e 6e 65 73 74 65 64 4d 65 6e 75 2c 6b 65 79 3a 72 2c 6f 6e 49 74 65 6d 43 6c 69 63 6b 3a 61 2e 70 72 6f 70 73 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 2c 73 75 62 53 75 62 4e 61 76 4f 70 65 Data Ascii: a=this,l=[];this.props.items.forEach((function(e,r){var i=["nav__subitem"];e.path===t.path&&i.push("nav__subitem--is-active"),l.push((0,s.createElement)(n,(0,_e.Z)((0,k.Z)({},e),{hasSubSubNav:e.nestedMenu,key:r,onItemClick:a.props.onItemClick,subSubNavOpe
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 33 29 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 73 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 22 31 30 36 22 2c 68 65 69 67 68 74 3a 22 31 30 36 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 30 36 20 31 30 36 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6f 2e 6a 73 78 29 28 22 70 61 74 68 22 2c 7b 6f 70 61 63 69 74 79 3a 22 30 2e 32 22 2c 64 3a 22 4d 31 30 31 2e 36 36 31 20 33 37 2e 37 43 39 38 2e 30 35 34 35 20 31 34 2e 30 31 34 31 20 38 30 2e 37 31 36 20 32 2e 38 31 31 20 35 33 20 33 2e 30 30 32 34 31 43 32 35 2e 32 38 34 20 32 2e 38 31 31 20 37 2e 39 34 39 33 39 20 Data Ascii: 3),va=function(){return(0,o.jsxs)("svg",{width:"106",height:"106",viewBox:"0 0 106 106",fill:"none",xmlns:"http://www.w3.org/2000/svg",children:[(0,o.jsx)("path",{opacity:"0.2",d:"M101.661 37.7C98.0545 14.0141 80.716 2.811 53 3.00241C25.284 2.811 7.94939
2024-04-24 02:17:48 UTC	11894	IN	Data Raw: 75 64 65 73 28 22 74 72 61 6e 73 66 65 72 73 22 29 26 26 72 2e 71 75 65 72 79 2e 67 72 6f 75 70 3d 3d 3d 48 69 2e 5f 2e 52 45 43 45 49 56 45 44 26 26 72 2e 71 75 65 72 79 2e 72 65 63 65 69 76 69 6e 67 5f 65 6d 61 69 6c 26 26 69 2e 69 73 56 65 72 69 66 69 65 64 26 26 69 2e 6c 6f 67 67 65 64 49 6e 26 26 21 69 2e 68 61 73 53 6b 69 70 70 65 64 56 65 72 69 66 69 63 61 74 69 6f 6e 2c 66 3d 21 69 2e 69 73 56 65 72 69 66 69 65 64 26 26 72 2e 72 65 71 75 69 72 65 64 41 75 74 68 53 74 61 74 65 3d 3d 3d 7a 69 2e 4c 4f 47 47 45 44 5f 49 4e 26 26 21 72 2e 70 61 79 6d 65 6e 74 26 26 21 72 2e 70 61 74 68 2e 69 6e 63 6c 75 64 65 73 28 22 61 63 63 6f 75 6e 74 22 29 26 26 21 72 2e 70 61 74 68 2e 69 6e 63 6c 75 64 65 73 28 22 70 61 79 6d 65 6e 74 22 29 26 26 69 2e 6c 6f 67 Data Ascii: udes("transfers")&&r.query.group===Hi._.RECEIVED&&r.query.receiving_email&&i.isVerified&&i.loggedIn&&!i.hasSkippedVerification,f=!i.isVerified&&r.requiredAuthState===zi.LOGGED_IN&&!r.payment&&!r.path.includes("account")&&!r.path.includes("payment")&&i.log

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49740	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:48 UTC	735	OUT	GET /gtag/js?id=G-0M019DTWVR&l=dataLayer&cx=c&sign=0f4bf71a2b6153c68bdc1c7dad6bc607169cb390b408d41319e9d455fe1ef224_20240424 HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.
2024-04-24 02:17:48 UTC	490	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 255661 Connection: close cache-control: private, max-age=900 Date: Wed, 24 Apr 2024 02:17:48 GMT expires: Wed, 24 Apr 2024 02:32:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 045381a2b60538381076a2bee430ad3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: Cjbot06f8eMR-euMzGVD0HGkCJToAT3M_C6EjZZrjIFh6f28kudY4g==
2024-04-24 02:17:48 UTC	3839	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 76 74 70 5f 73 69 67 6e 61 6c 22 3a 31 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 31 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"9", "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_valu
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 22 2c 33 5d 5d 5d 0a 7d 2c 0a 22 72 75 6e 74 69 6d 65 22 3a 5b 20 5b 35 30 2c 22 5f 5f 63 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 33 36 2c 5b 31 37 2c 5b 31 35 2c 22 61 22 5d 2c 22 76 61 6c 75 65 22 5d 5d 5d 0a 20 2c 5b 35 30 2c 22 5f 5f 63 63 64 5f 61 75 74 6f 5f 72 65 64 61 63 74 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 35 30 2c 22 76 22 2c 5b 34 36 2c 22 62 6b 22 5d 2c 5b 33 36 2c 5b 32 2c 5b 31 35 2c 22 62 6b 22 5d 2c 22 72 65 70 6c 61 63 65 22 2c 5b 37 2c 5b 31 35 2c 22 75 22 5d 2c 22 5c 5c 24 31 22 5d 5d 5d 5d 2c 5b 35 30 2c 22 77 22 2c 5b 34 36 2c 22 62 6b 22 5d 2c 5b 35 32 2c 22 62 6c 22 2c 5b 22 63 22 2c 5b 31 35 2c 22 62 6b 22 5d 5d 5d 2c 5b 35 32 2c 22 62 6d 22 2c 5b 37 5d 5d 2c 5b 36 35 2c 22 62 6e 22 2c 5b 32 2c 5b 31 35 2c 22 62 6c 22 5d 2c 22 73 70 Data Ascii: ",3]]]},"runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]] ,[50,"__ccd_auto_redact",[46,"a"],[50,"v",[46,"bk"],[36,[2,[15,"bk"],"replace",[7,[15,"u"],"\\$1"]]]],[50,"w",[46,"bk"],[52,"bl",["c",[15,"bk"]]],[52,"bm",[7]],[65,"bn",[2,[15,"bl"],"sp
2024-04-24 02:17:48 UTC	4096	IN	Data Raw: 73 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 32 2c 5b 31 35 2c 22 61 22 5d 2c 22 67 74 6d 4f 6e 53 75 63 63 65 73 73 22 2c 5b 37 5d 5d 5d 0a 20 2c 5b 35 32 2c 22 5f 5f 6d 6f 64 75 6c 65 5f 63 6f 6e 76 65 72 74 44 6f 6d 61 69 6e 43 6f 6e 64 69 74 69 6f 6e 73 22 2c 5b 31 33 2c 5b 34 31 2c 22 24 30 22 5d 2c 5b 33 2c 22 24 30 22 2c 5b 35 31 2c 22 22 2c 5b 37 5d 2c 5b 35 30 2c 22 61 22 2c 5b 34 36 5d 2c 5b 35 30 2c 22 65 22 2c 5b 34 36 2c 22 67 22 5d 2c 5b 33 36 2c 5b 32 2c 5b 31 35 2c 22 67 22 5d 2c 22 72 65 70 6c 61 63 65 22 2c 5b 37 2c 5b 31 35 2c 22 64 22 5d 2c 22 5c 5c 24 26 22 5d 5d 5d 5d 2c 5b 35 30 2c 22 66 22 2c 5b 34 36 2c 22 67 22 5d 2c 5b 35 32 2c 22 68 22 2c 5b 37 5d 5d 2c 5b 35 33 2c 5b 34 31 2c 22 69 22 5d 2c 5b 33 2c 22 69 22 2c 30 5d 2c 5b 36 33 2c Data Ascii: s",[46,"a"],[2,[15,"a"],"gtmOnSuccess",[7]]] ,[52,"__module_convertDomainConditions",[13,[41,"$0"],[3,"$0",[51,"",[7],[50,"a",[46],[50,"e",[46,"g"],[36,[2,[15,"g"],"replace",[7,[15,"d"],"\\$&"]]]],[50,"f",[46,"g"],[52,"h",[7]],[53,[41,"i"],[3,"i",0],[63,
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 63 63 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 6d 61 72 6b 69 6e 67 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 63 63 64 5f 67 61 5f 61 64 73 5f 6c 69 6e 6b 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 63 63 64 5f 67 61 5f 66 69 72 73 74 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 63 63 64 5f 67 61 5f 6c 61 73 74 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 63 63 64 5f 67 61 5f 72 65 67 73 63 6f 70 65 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 6f 67 74 5f 31 70 5f 64 61 74 61 5f 76 32 22 3a 7b 22 32 22 3a 74 72 75 Data Ascii: :true,"4":true},"__ccd_conversion_marking":{"2":true,"4":true},"__ccd_ga_ads_link":{"2":true,"4":true},"__ccd_ga_first":{"2":true,"4":true},"__ccd_ga_last":{"2":true,"4":true},"__ccd_ga_regscope":{"2":true,"4":true},"__ogt_1p_data_v2":{"2":tru
2024-04-24 02:17:48 UTC	1514	IN	Data Raw: 77 2c 48 3d 64 6f 63 75 6d 65 6e 74 2c 41 63 3d 6e 61 76 69 67 61 74 6f 72 2c 42 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 74 72 79 7b 61 3d 41 63 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 61 7d 2c 43 63 3d 48 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 48 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2c 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 44 5b 61 5d 3b 44 5b 61 5d 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 62 3a 63 3b 72 65 74 75 72 6e 20 44 5b 61 5d 7d 2c 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 26 26 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 6f 6e 6c 6f 61 64 3d 62 3a 61 2e 6f 6e 72 65 61 64 Data Ascii: w,H=document,Ac=navigator,Bc=function(){var a;try{a=Ac.serviceWorker}catch(b){return}return a},Cc=H.currentScript&&H.currentScript.src,Dc=function(a,b){var c=D[a];D[a]=void 0===c?b:c;return D[a]},Ec=function(a,b){b&&(a.addEventListener?a.onload=b:a.onread
2024-04-24 02:17:48 UTC	16384	IN	Data Raw: 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 67 2c 6d 29 7d 45 63 28 67 2c 62 29 3b 72 65 74 75 72 6e 20 67 7d 2c 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 48 63 28 65 2c 64 2c 7b 7d 29 3b 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 62 26 26 62 28 29 7d 3b 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 63 26 26 63 28 29 7d 3b 65 2e 73 72 63 3d 61 7d 2c 4d 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 21 64 29 3a 61 Data Ascii: .insertBefore(g,m)}Ec(g,b);return g},Lc=function(a,b,c,d){var e=new Image(1,1);Hc(e,d,{});e.onload=function(){e.onload=null;b&&b()};e.onerror=function(){e.onerror=null;c&&c()};e.src=a},Mc=function(a,b,c,d){a.addEventListener?a.addEventListener(b,c,!!d):a
2024-04-24 02:17:49 UTC	16384	IN	Data Raw: 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 29 7b 76 61 72 20 64 3d 22 54 79 70 65 45 72 72 6f 72 3a 20 43 61 6e 27 74 20 73 65 74 20 70 72 6f 70 65 72 74 79 20 22 2b 62 2b 22 20 6f 66 20 22 2b 61 2b 22 2e 22 3b 69 66 28 70 64 28 29 29 74 68 72 6f 77 20 6e 65 77 20 72 64 28 64 29 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 64 29 3b 7d 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 66 64 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 62 29 26 26 61 2e 73 65 74 28 62 2c 63 29 3b 72 65 74 75 72 6e 20 63 7d 2c 71 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4a 28 74 68 69 73 2c 61 29 2d 4a 28 74 68 69 73 2c 62 29 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d Data Ascii: ull===a\|\|void 0===a){var d="TypeError: Can't set property "+b+" of "+a+".";if(pd())throw new rd(d);throw Error(d);}(a instanceof fd\|\|a instanceof Za\|\|a instanceof ab)&&a.set(b,c);return c},qe=function(a,b){return J(this,a)-J(this,b)},re=function(a,b,c){a=
2024-04-24 02:17:49 UTC	16384	IN	Data Raw: 29 2c 5b 22 62 6f 6f 6c 65 61 6e 45 78 70 72 65 73 73 69 6f 6e 3a 21 73 74 72 69 6e 67 22 2c 22 63 6f 6e 74 65 78 74 3a 3f 50 69 78 69 65 4d 61 70 22 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 64 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3b 69 66 28 21 64 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 62 6f 6f 6c 65 61 6e 20 65 78 70 72 65 73 73 69 6f 6e 20 73 74 72 69 6e 67 20 77 61 73 20 67 69 76 65 6e 2e 22 29 3b 76 61 72 20 65 3d 62 3f 6f 64 28 62 29 3a 7b 7d 3b 63 3d 64 68 28 64 2c 65 29 3b 72 65 74 75 72 6e 20 63 7d 0a 76 61 72 20 65 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 61 29 72 65 74 75 72 6e Data Ascii: ),["booleanExpression:!string","context:?PixieMap"],arguments);var d=JSON.parse(a);if(!d)throw Error("Invalid boolean expression string was given.");var e=b?od(b):{};c=dh(d,e);return c}var eh=function(a,b){for(var c=0;c<b.length;c++){if(void 0===a)return
2024-04-24 02:17:49 UTC	16384	IN	Data Raw: 50 69 59 2b 4e 56 38 65 4b 48 41 4e 34 66 67 76 32 4e 6d 4f 38 43 63 4a 48 78 79 52 6f 43 78 59 73 5c 78 33 64 22 3b 76 61 72 20 74 69 3d 7b 5f 5f 63 6c 3a 31 2c 5f 5f 65 63 6c 3a 31 2c 5f 5f 65 68 6c 3a 31 2c 5f 5f 65 76 6c 3a 31 2c 5f 5f 66 61 6c 3a 31 2c 5f 5f 66 69 6c 3a 31 2c 5f 5f 66 73 6c 3a 31 2c 5f 5f 68 6c 3a 31 2c 5f 5f 6a 65 6c 3a 31 2c 5f 5f 6c 63 6c 3a 31 2c 5f 5f 73 64 6c 3a 31 2c 5f 5f 74 6c 3a 31 2c 5f 5f 79 74 6c 3a 31 7d 2c 75 69 3d 7b 5f 5f 70 61 75 73 65 64 3a 31 2c 5f 5f 74 67 3a 31 7d 2c 76 69 3b 66 6f 72 28 76 69 20 69 6e 20 74 69 29 74 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 76 69 29 26 26 28 75 69 5b 76 69 5d 3d 31 29 3b 76 61 72 20 77 69 3d 76 62 28 22 74 72 75 65 22 29 2c 78 69 2c 79 69 3d 21 31 3b 79 69 3d 21 30 3b Data Ascii: PiY+NV8eKHAN4fgv2NmO8CcJHxyRoCxYs\x3d";var ti={__cl:1,__ecl:1,__ehl:1,__evl:1,__fal:1,__fil:1,__fsl:1,__hl:1,__jel:1,__lcl:1,__sdl:1,__tl:1,__ytl:1},ui={__paused:1,__tg:1},vi;for(vi in ti)ti.hasOwnProperty(vi)&&(ui[vi]=1);var wi=vb("true"),xi,yi=!1;yi=!0;
2024-04-24 02:17:49 UTC	16384	IN	Data Raw: 3d 3d 64 7c 7c 6d 3d 3d 3d 65 7c 7c 28 6d 3d 3d 3d 64 3f 68 21 3d 3d 65 3a 21 6d 26 26 21 68 29 29 7b 76 61 72 20 6e 3d 7b 72 65 67 69 6f 6e 3a 67 2e 72 65 67 69 6f 6e 2c 64 65 63 6c 61 72 65 5f 72 65 67 69 6f 6e 3a 6d 2c 64 65 63 6c 61 72 65 3a 22 67 72 61 6e 74 65 64 22 3d 3d 3d 62 2c 69 6d 70 6c 69 63 69 74 3a 67 2e 69 6d 70 6c 69 63 69 74 2c 64 65 66 61 75 6c 74 3a 67 2e 64 65 66 61 75 6c 74 2c 75 70 64 61 74 65 3a 67 2e 75 70 64 61 74 65 2c 71 75 69 65 74 3a 67 2e 71 75 69 65 74 7d 3b 69 66 28 22 22 21 3d 3d 64 7c 7c 21 31 21 3d 3d 67 2e 64 65 63 6c 61 72 65 29 66 5b 61 5d 3d 6e 7d 7d 3b 0a 61 61 2e 69 6d 70 6c 69 63 69 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 75 73 65 64 49 6d 70 6c 69 63 69 74 3d 21 30 3b 76 61 72 20 63 3d 74 Data Ascii: ==d\|\|m===e\|\|(m===d?h!==e:!m&&!h)){var n={region:g.region,declare_region:m,declare:"granted"===b,implicit:g.implicit,default:g.default,update:g.update,quiet:g.quiet};if(""!==d\|\|!1!==g.declare)f[a]=n}};aa.implicit=function(a,b){this.usedImplicit=!0;var c=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49742	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:49 UTC	2116	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7142&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; _ga=GA1.1.1577694276.1713925069
2024-04-24 02:17:50 UTC	899	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:49 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 53fbe86f3600125d1772599fc7fb16c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 7SCjR3l5fKIzL31UC6yaQYbjY5rAZUD-pWV42uE3jJVyFhmRY5QSYA==
2024-04-24 02:17:50 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49744	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:49 UTC	766	OUT	GET /_next/static/chunks/8745.743a269fbc05ea1f.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; _ga=GA1.1.1577694276.1713925069; wt_lang=en-US
2024-04-24 02:17:50 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 164599 Connection: close Date: Thu, 11 Apr 2024 14:11:20 GMT Last-Modified: Thu, 11 Apr 2024 13:54:46 GMT ETag: "6095c9597989539e31fb82efbb0997a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Q8xJkDfFMkVp3dnff5xPV0PNN5PvRxSp091RucmF1RgBpyTR0Ror_g== Age: 1080390
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 34 35 5d 2c 7b 38 37 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 7b 64 61 74 65 3a 7b 66 6f 72 6d 61 74 73 3a 7b 64 65 66 61 75 6c 74 3a 22 25 64 2d 25 6d 2d 25 59 22 2c 73 68 6f 72 74 3a 22 25 2d 64 20 25 42 22 2c 6c 6f 6e 67 3a 22 25 2d 64 20 25 42 2c 20 25 59 22 2c 77 69 74 68 5f 64 61 79 3a 22 25 41 2c 20 25 2d 64 20 25 42 22 2c 77 69 74 68 6f 75 74 5f 64 61 79 3a 22 25 2d 64 20 25 42 20 25 59 22 7d 2c 64 61 79 5f 6e 61 6d 65 73 3a 5b 22 53 75 6e 64 61 79 22 2c 22 4d 6f 6e 64 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8745],{8745:function(e,t,o){o.r(t),t.default={date:{formats:{default:"%d-%m-%Y",short:"%-d %B",long:"%-d %B, %Y",with_day:"%A, %-d %B",without_day:"%-d %B %Y"},day_names:["Sunday","Mond
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 70 61 79 6d 65 6e 74 20 64 65 74 61 69 6c 73 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 22 2c 64 69 73 63 6f 75 6e 74 3a 22 44 69 73 63 6f 75 6e 74 22 2c 70 72 6f 64 75 63 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4f 6e 65 20 25 7b 64 75 72 61 74 69 6f 6e 7d 20 6f 66 20 57 65 54 72 61 6e 73 66 65 72 20 50 72 6f 22 2c 74 69 74 6c 65 3a 22 59 6f 75 27 72 65 20 6e 65 61 72 6c 79 20 74 68 65 72 65 21 22 2c 74 6f 74 61 6c 3a 22 54 6f 74 61 6c 22 2c 76 61 74 3a 22 56 41 54 22 2c 79 6f 75 72 5f 64 65 74 61 69 6c 73 3a 22 59 6f 75 72 20 64 65 74 61 69 6c 73 22 2c 79 6f 75 72 5f 6f 72 64 65 72 3a 22 59 6f 75 72 20 6f 72 64 65 72 22 2c 74 69 74 6c 65 5f 65 72 72 6f 72 3a 22 48 6d 6d 6d 20 74 68 65 72 65 20 73 65 65 6d 73 20 74 6f 20 62 65 20 61 6e 20 69 73 73 75 Data Ascii: payment details and try again",discount:"Discount",product_description:"One %{duration} of WeTransfer Pro",title:"You're nearly there!",total:"Total",vat:"VAT",your_details:"Your details",your_order:"Your order",title_error:"Hmmm there seems to be an issu
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 20 74 72 61 6e 73 66 65 72 22 7d 2c 6d 6f 64 61 6c 3a 7b 64 69 73 63 6c 61 69 6d 65 72 3a 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 73 77 69 74 63 68 20 74 6f 20 61 20 62 69 6c 6c 69 6e 67 20 63 79 63 6c 65 20 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 74 69 74 6c 65 3a 22 53 77 69 74 63 68 20 74 6f 20 25 7b 70 6c 61 6e 5f 74 69 65 72 7d 20 66 6f 72 20 25 7b 70 72 69 63 65 7d 22 2c 70 6c 61 6e 5f 69 6e 66 6f 3a 22 25 7b 70 6c 61 6e 5f 74 65 72 6d 7d 20 25 7b 70 6c 61 6e 5f 6e 61 6d 65 7d 20 70 6c 61 6e 20 28 70 72 6f 72 61 74 65 64 29 22 2c 79 65 61 72 6c 79 3a 22 79 65 61 72 6c 79 22 2c 6d 6f 6e 74 68 6c 79 3a 22 6d 6f 6e 74 68 6c 79 22 2c 66 69 6e 61 6c 5f 70 72 69 63 65 3a 22 50 61 79 20 Data Ascii: transfer"},modal:{disclaimer:"You can only switch to a billing cycle based on your current subscription",title:"Switch to %{plan_tier} for %{price}",plan_info:"%{plan_term} %{plan_name} plan (prorated)",yearly:"yearly",monthly:"monthly",final_price:"Pay
2024-04-24 02:17:50 UTC	14808	IN	Data Raw: 22 2c 74 65 61 6d 73 3a 22 59 6f 75 72 20 74 65 61 6d 20 6f 66 20 25 7b 61 6d 6f 75 6e 74 4f 66 4d 65 6d 62 65 72 73 7d 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 25 7b 63 75 72 72 65 6e 74 54 65 61 6d 7d 22 2c 74 69 74 6c 65 3a 22 57 68 65 6e 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 65 6e 64 73 20 6f 6e 20 3c 73 74 72 6f 6e 67 3e 25 7b 64 61 74 65 7d 3c 2f 73 74 72 6f 6e 67 3e 3a 22 2c 22 74 72 61 6e 73 66 65 72 2d 65 78 70 69 72 79 22 3a 22 59 6f 75 72 20 65 78 69 73 74 69 6e 67 20 74 72 61 6e 73 66 65 72 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 65 74 65 64 20 61 66 74 65 72 20 32 38 20 64 61 79 73 22 2c 22 74 72 61 6e 73 66 65 72 2d 74 65 61 6d 2d 6d 65 6d 62 65 72 22 3a 22 59 6f 75 20 77 6f Data Ascii: ",teams:"Your team of %{amountOfMembers} will be removed from %{currentTeam}",title:"When your current subscription ends on <strong>%{date}</strong>:","transfer-expiry":"Your existing transfers will be deleted after 28 days","transfer-team-member":"You wo
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 6f 77 20 63 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 3c 62 3e 57 65 54 72 61 6e 73 66 65 72 20 70 61 67 65 3c 2f 62 3e 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 20 77 68 61 74 20 70 65 6f 70 6c 65 20 73 65 65 20 77 68 65 6e 20 74 68 65 79 20 64 6f 77 6e 6c 6f 61 64 20 79 6f 75 72 20 66 69 6c 65 73 2e 20 52 65 61 64 79 20 74 6f 20 63 68 6f 6f 73 65 20 79 6f 75 72 20 55 52 4c 20 61 6e 64 20 77 61 6c 6c 70 61 70 65 72 73 3f 22 2c 63 75 73 74 6f 6d 69 7a 61 62 6c 65 5f 64 6f 6d 61 69 6e 5f 63 74 61 3a 22 43 72 65 61 74 65 20 70 61 67 65 22 2c 63 75 73 74 6f 6d 69 7a 61 62 6c 65 5f 64 6f 6d 61 69 6e 5f 64 69 73 6d 69 73 73 3a 22 4d 61 79 62 65 20 6c 61 74 65 72 22 2c 63 75 73 74 6f 6d 69 7a 61 62 6c 65 5f 64 6f 6d 61 69 6e 5f 73 75 62 74 69 74 6c 65 3a 22 53 Data Ascii: ow create your own <b>WeTransfer page</b> to customize what people see when they download your files. Ready to choose your URL and wallpapers?",customizable_domain_cta:"Create page",customizable_domain_dismiss:"Maybe later",customizable_domain_subtitle:"S
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 63 6b 5f 74 6f 5f 6f 70 65 6e 3a 22 43 6c 69 63 6b 20 74 6f 20 70 72 65 76 69 65 77 22 2c 67 72 69 64 3a 22 49 74 65 6d 73 20 69 6e 20 74 68 69 73 20 74 72 61 6e 73 66 65 72 22 2c 6c 69 6e 6b 3a 22 57 65 62 73 69 74 65 22 2c 6e 6f 74 5f 70 72 65 76 69 65 77 61 62 6c 65 3a 22 50 72 65 76 69 65 77 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 6e 6f 77 5f 6f 70 65 6e 3a 22 50 72 65 76 69 65 77 20 6f 70 65 6e 22 2c 6f 70 65 6e 5f 6c 69 6e 6b 3a 22 4f 70 65 6e 20 6c 69 6e 6b 20 69 6e 20 6e 65 77 20 74 61 62 22 2c 6f 70 65 6e 5f 6c 69 6e 6b 5f 73 68 6f 72 74 3a 22 4f 70 65 6e 20 6c 69 6e 6b 22 2c 6f 76 65 72 76 69 65 77 3a 22 6f 76 65 72 76 69 65 77 22 2c 72 65 6c 6f 61 64 3a 22 52 65 6c 6f 61 64 22 2c 73 6f 6d 65 74 68 69 6e 67 5f 77 65 6e 74 5f 77 72 6f 6e Data Ascii: ck_to_open:"Click to preview",grid:"Items in this transfer",link:"Website",not_previewable:"Preview not available",now_open:"Preview open",open_link:"Open link in new tab",open_link_short:"Open link",overview:"overview",reload:"Reload",something_went_wron
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 65 78 74 3a 22 50 61 73 73 77 6f 72 64 2d 70 72 6f 74 65 63 74 20 79 6f 75 72 20 74 72 61 6e 73 66 65 72 73 20 61 6e 64 20 63 68 6f 6f 73 65 20 63 75 73 74 6f 6d 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 73 22 2c 74 69 74 6c 65 3a 22 54 72 61 6e 73 66 65 72 20 75 70 67 72 61 64 65 3f 22 2c 74 65 78 74 5f 65 78 70 65 72 69 6d 65 6e 74 3a 22 59 6f 75 20 63 61 6e 20 73 65 74 20 70 61 73 73 77 6f 72 64 73 20 61 6e 64 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 73 20 6f 6e 20 79 6f 75 72 20 74 72 61 6e 73 66 65 72 73 20 77 69 74 68 20 50 72 6f 2e 22 7d 2c 68 72 65 66 3a 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 77 65 74 72 61 6e 73 66 65 72 22 2c 74 65 78 74 3a 22 57 65 54 72 61 6e 73 66 65 72 20 6f 6e 20 46 61 63 65 62 6f 6f Data Ascii: ext:"Password-protect your transfers and choose custom expiration dates",title:"Transfer upgrade?",text_experiment:"You can set passwords and expiration dates on your transfers with Pro."},href:"https://facebook.com/wetransfer",text:"WeTransfer on Faceboo
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 6e 65 77 20 6f 6e 65 3c 2f 62 75 74 74 6f 6e 3e 2e 27 2c 22 65 6d 61 69 6c 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 2d 72 65 73 65 6e 64 22 3a 7b 65 72 72 6f 72 3a 22 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 22 2c 69 6e 66 6f 3a 22 4e 65 77 20 63 6f 64 65 20 73 65 6e 74 21 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 69 6e 62 6f 78 22 2c 69 6e 66 6f 5f 6c 69 6e 6b 3a 22 4e 65 77 20 65 6d 61 69 6c 20 73 65 6e 74 21 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 69 6e 62 6f 78 22 2c 22 74 68 72 6f 74 74 6c 65 2d 65 72 72 6f 72 22 3a 22 57 68 6f 61 2c 20 77 65 5c 75 32 30 31 39 76 65 20 73 65 6e 74 20 79 6f 75 20 74 6f 6f 20 6d 61 6e 79 20 65 6d 61 69 6c 73 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 77 61 Data Ascii: new one</button>.',"email-verification-resend":{error:"Oops, something went wrong",info:"New code sent! Please check your inbox",info_link:"New email sent! Please check your inbox","throttle-error":"Whoa, we\u2019ve sent you too many emails now. Please wa
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 74 6f 6d 65 72 73 20 74 6f 20 70 61 79 20 77 69 74 68 20 61 6c 6c 20 6d 61 6a 6f 72 20 63 72 65 64 69 74 20 63 61 72 64 73 2e 22 7d 7d 2c 70 65 6e 64 69 6e 67 3a 22 50 65 6e 64 69 6e 67 22 2c 64 69 73 63 6f 6e 6e 65 63 74 65 64 3a 22 44 69 73 63 6f 6e 6e 65 63 74 20 73 75 63 63 65 73 73 66 75 6c 22 7d 2c 74 69 74 6c 65 3a 22 49 6e 74 65 67 72 61 74 69 6f 6e 73 22 7d 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 7b 75 70 64 61 74 65 5f 61 63 63 6f 75 6e 74 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 68 61 73 20 62 65 65 6e 20 75 70 64 61 74 65 64 22 2c 75 70 64 61 74 65 5f 70 61 73 73 77 6f 72 64 3a 22 59 6f 75 72 20 70 61 73 73 77 6f 72 64 20 68 61 73 20 62 65 65 6e 20 75 70 64 61 74 65 64 22 2c 75 70 64 61 74 65 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 3a 22 Data Ascii: tomers to pay with all major credit cards."}},pending:"Pending",disconnected:"Disconnect successful"},title:"Integrations"},notification:{update_account:"Your account has been updated",update_password:"Your password has been updated",update_subscription:"
2024-04-24 02:17:50 UTC	16384	IN	Data Raw: 20 61 76 61 69 6c 61 62 6c 65 22 7d 2c 66 65 61 74 5f 34 3a 7b 74 69 74 6c 65 3a 22 4e 75 6d 62 65 72 20 6f 66 20 65 6d 61 69 6c 20 72 65 63 69 70 69 65 6e 74 73 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 61 20 73 69 6e 67 6c 65 20 74 72 61 6e 73 66 65 72 22 7d 2c 66 65 61 74 5f 35 3a 7b 74 69 74 6c 65 3a 22 4d 61 78 69 6d 75 6d 20 64 6f 77 6e 6c 6f 61 64 73 20 70 65 72 20 74 72 61 6e 73 66 65 72 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 20 73 69 6e 67 6c 65 20 74 72 61 6e 73 66 65 72 20 63 61 6e 20 62 65 20 64 6f 77 6e 6c 6f 61 64 65 64 22 Data Ascii: available"},feat_4:{title:"Number of email recipients",description:"The maximum number of email addresses for a single transfer"},feat_5:{title:"Maximum downloads per transfer",description:"The maximum number of times a single transfer can be downloaded"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49745	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:50 UTC	2098	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G101&gcd=13p3tPp2p7&npa=1&dma_cps=-&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=7142&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
2024-04-24 02:17:51 UTC	808	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:50 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6d4b136088d445592377cfca2dcb8944.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: wAXdBgAcdO51BZmNhlRA-MUaTG5tkCeRqxMvhwsUxYw42r5Oe1q_Ow==
2024-04-24 02:17:51 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	1015	OUT	GET /_next/static/chunks/03a1f34a.cb7471b34076195a.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
2024-04-24 02:17:51 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 168399 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:54 GMT ETag: "5439e51f20378de7d73ba350c0b4b85b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cl1r3cLltkN75cUHYjMPvFeT-KzTnYX0rbhh1gN6CDy6m1aDnAckoQ== Age: 752299
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 31 36 5d 2c 7b 36 36 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6f 3d 6e 28 39 33 35 34 32 29 2c 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 75 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 67 3d 4f 62 6a 65 63 74 2e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[5116],{66514:function(e,t,n){var r=n(48834).Buffer,o=n(93542),i=Object.create,s=Object.defineProperty,a=Object.getOwnPropertyDescriptor,c=Object.getOwnPropertyNames,u=Object.getPrototypeOf,g=Object.
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 4c 28 65 29 3f 44 28 65 2c 22 22 29 3a 48 28 65 29 7d 3a 48 2c 59 3d 54 79 70 65 45 72 72 6f 72 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 59 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 28 4d 28 65 29 29 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 21 3d 3d 65 3a 71 28 65 29 7d 2c Data Ascii: nction(e){return"String"==L(e)?D(e,""):H(e)}:H,Y=TypeError,M=function(e){if(null==e)throw Y("Can't call method on "+e);return e},z=function(e){return J(M(e))},q=function(e){return"function"==typeof e},Q=function(e){return"object"==typeof e?null!==e:q(e)},
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 3d 67 6f 28 22 5c 75 64 66 30 36 5c 75 64 38 33 34 22 29 7c 7c 27 22 5c 5c 75 64 65 61 64 22 27 21 3d 3d 67 6f 28 22 5c 75 64 65 61 64 22 29 7d 29 29 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 75 6f 28 61 72 67 75 6d 65 6e 74 73 29 2c 72 3d 74 3b 69 66 28 28 51 28 74 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 29 26 26 21 6c 65 28 65 29 29 72 65 74 75 72 6e 20 52 6e 28 74 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 71 28 72 29 26 26 28 74 3d 46 28 72 2c 74 68 69 73 2c 65 2c 74 29 29 2c 21 6c 65 28 74 29 29 72 65 74 75 72 6e 20 74 7d 29 2c 6e 5b 31 5d 3d 74 2c 63 6f 28 67 6f 2c 6e 75 6c 6c 2c 6e 29 7d 2c 77 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 66 6f 28 6e 2c 74 2d 31 29 2c Data Ascii: =go("\udf06\ud834")\|\|'"\\udead"'!==go("\udead")})),bo=function(e,t){var n=uo(arguments),r=t;if((Q(t)\|\|void 0!==e)&&!le(e))return Rn(t)\|\|(t=function(e,t){if(q(r)&&(t=F(r,this,e,t)),!le(t))return t}),n[1]=t,co(go,null,n)},wo=function(e,t,n){var r=fo(n,t-1),
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 74 65 26 26 30 3d 3d 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 4a 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 68 61 6e 64 6c 65 64 7c 7c 4a 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 59 73 28 65 2c 65 2e 5f 64 65 66 65 72 72 65 64 73 5b 74 5d 29 3b 65 2e 5f 64 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 73 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 Data Ascii: te&&0===e._deferreds.length&&Js._immediateFn((function(){e._handled\|\|Js._unhandledRejectionFn(e._value)}));for(var t=0,n=e._deferreds.length;t<n;t++)Ys(e,e._deferreds[t]);e._deferreds=null}function Qs(e,t,n){this.onFulfilled="function"==typeof e?e:null,th
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 65 79 4d 61 6e 69 66 65 73 74 3f 5b 34 2c 74 68 69 73 2e 6b 65 79 4d 61 6e 69 66 65 73 74 2e 67 65 74 28 29 5d 3a 5b 33 2c 32 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 73 65 6e 74 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6b 65 79 73 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 63 61 63 68 65 2e 61 6c 6c 4b 65 79 73 28 29 5d 3b 63 61 73 65 20 33 3a 74 3d 6e 2e 73 65 6e 74 28 29 2c 6e 2e 6c 61 62 65 6c 3d 34 3b 63 61 73 Data Ascii: on(){var t;return m(this,(function(n){switch(n.label){case 0:return this.keyManifest?[4,this.keyManifest.get()]:[3,2];case 1:return t=null===(e=n.sent())\|\|void 0===e?void 0:e.keys,[3,4];case 2:return[4,this.cache.allKeys()];case 3:t=n.sent(),n.label=4;cas
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 56 30 52 58 4a 79 62 33 49 73 49 46 39 7a 64 58 42 6c 63 69 6b 37 43 69 41 67 49 43 41 67 49 43 41 67 5a 6e 56 75 59 33 52 70 62 32 34 67 55 47 39 77 64 58 42 55 61 57 31 6c 62 33 56 30 52 58 4a 79 62 33 49 6f 63 47 39 77 64 58 41 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 64 6d 46 79 49 46 39 30 61 47 6c 7a 49 44 30 67 58 33 4e 31 63 47 56 79 4c 6d 4e 68 62 47 77 6f 64 47 68 70 63 79 6b 67 66 48 77 67 64 47 68 70 63 7a 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 58 33 52 6f 61 58 4d 75 63 47 39 77 64 58 41 67 50 53 42 77 62 33 42 31 63 44 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 54 32 4a 71 5a 57 4e 30 4c 6e 4e 6c 64 46 42 79 62 33 52 76 64 48 6c 77 5a 55 39 6d 4b 46 39 30 61 47 6c 7a 4c 43 42 51 62 33 42 31 63 Data Ascii: V0RXJyb3IsIF9zdXBlcik7CiAgICAgICAgZnVuY3Rpb24gUG9wdXBUaW1lb3V0RXJyb3IocG9wdXApIHsKICAgICAgICAgICAgdmFyIF90aGlzID0gX3N1cGVyLmNhbGwodGhpcykgfHwgdGhpczsKICAgICAgICAgICAgX3RoaXMucG9wdXAgPSBwb3B1cDsKICAgICAgICAgICAgT2JqZWN0LnNldFByb3RvdHlwZU9mKF90aGlzLCBQb3B1c
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 74 50 61 72 61 6d 73 28 6e 2c 72 2c 6f 2c 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 64 69 72 65 63 74 5f 75 72 69 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 2c 75 3d 74 68 69 73 2e 5f 61 75 74 68 6f 72 69 7a 65 55 72 6c 28 66 28 66 28 7b 7d 2c 63 29 2c 7b 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3a 22 77 65 62 5f 6d 65 73 73 61 67 65 22 7d 29 29 2c 74 2e 70 6f 70 75 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 75 2c 5b 34 2c 68 61 28 66 28 66 28 7b 7d 2c 74 29 2c 7b 74 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 3a 74 2e 74 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 68 6f 72 69 7a 65 54 69 6d 65 6f 75 74 49 6e 53 65 63 6f 6e 64 73 7c 7c 36 30 7d 29 29 5d 3b Data Ascii: tParams(n,r,o,a,this.options.redirect_uri\|\|window.location.origin),u=this._authorizeUrl(f(f({},c),{response_mode:"web_message"})),t.popup.location.href=u,[4,ha(f(f({},t),{timeoutInSeconds:t.timeoutInSeconds\|\|this.options.authorizeTimeoutInSeconds\|\|60}))];
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d 28 30 2c 74 2e 64 65 66 61 75 6c 74 29 28 22 76 33 22 2c 34 38 2c 6e 2e 64 65 66 61 75 6c 74 29 3b 65 2e 64 65 66 61 75 6c 74 3d 6f 7d 29 29 2c 42 3d 66 28 28 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 74 3d 72 28 79 28 29 29 2c 6e 3d 72 28 77 28 29 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d Data Ascii: urn e&&e.__esModule?e:{default:e}}var o=(0,t.default)("v3",48,n.default);e.default=o})),B=f((e=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var t=r(y()),n=r(w());function r(e){return e&&e.__esModule?e:{default:e}}var o=
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 23 33 33 33 33 43 43 22 2c 22 23 33 33 33 33 46 46 22 2c 22 23 33 33 36 36 43 43 22 2c 22 23 33 33 36 36 46 46 22 2c 22 23 33 33 39 39 43 43 22 2c 22 23 33 33 39 39 46 46 22 2c 22 23 33 33 43 43 30 30 22 2c 22 23 33 33 43 43 33 33 22 2c 22 23 33 33 43 43 36 36 22 2c 22 23 33 33 43 43 39 39 22 2c 22 23 33 33 43 43 43 43 22 2c 22 23 33 33 43 43 46 46 22 2c 22 23 36 36 30 30 43 43 22 2c 22 23 36 36 30 30 46 46 22 2c 22 23 36 36 33 33 43 43 22 2c 22 23 36 36 33 33 46 46 22 2c 22 23 36 36 43 43 30 30 22 2c 22 23 36 36 43 43 33 33 22 2c 22 23 39 39 30 30 43 43 22 2c 22 23 39 39 30 30 46 46 22 2c 22 23 39 39 33 33 43 43 22 2c 22 23 39 39 33 33 46 46 22 2c 22 23 39 39 43 43 30 30 22 2c 22 23 39 39 43 43 33 33 22 2c 22 23 43 43 30 30 30 30 22 2c 22 23 43 43 30 30 Data Ascii: #3333CC","#3333FF","#3366CC","#3366FF","#3399CC","#3399FF","#33CC00","#33CC33","#33CC66","#33CC99","#33CCCC","#33CCFF","#6600CC","#6600FF","#6633CC","#6633FF","#66CC00","#66CC33","#9900CC","#9900FF","#9933CC","#9933FF","#99CC00","#99CC33","#CC0000","#CC00
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 20 53 65 7d 72 65 74 75 72 6e 28 72 7c 7c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 28 65 29 7d 28 65 29 29 3a 65 7d 5d 2c 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 7c 7c 63 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2c 72 3d 74 26 26 74 2e 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 2c 6f 3d 74 26 26 74 2e 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 2c 73 3d 21 72 26 26 22 6a 73 6f 6e 22 3d 3d 3d 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3b 69 66 28 73 7c 7c 6f 26 26 6e 2e 69 73 53 74 72 69 6e 67 28 65 29 26 26 65 2e 6c 65 6e 67 74 68 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 Data Ascii: Se}return(r\|\|JSON.stringify)(e)}(e)):e}],transformResponse:[function(e){var t=this.transitional\|\|c.transitional,r=t&&t.silentJSONParsing,o=t&&t.forcedJSONParsing,s=!r&&"json"===this.responseType;if(s\|\|o&&n.isString(e)&&e.length)try{return JSON.parse(e)}c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49751	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	1015	OUT	GET /_next/static/chunks/e893f787.529ff2dd2d297b89.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
2024-04-24 02:17:51 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 326856 Connection: close Date: Mon, 15 Apr 2024 05:45:01 GMT Last-Modified: Fri, 12 Apr 2024 16:56:56 GMT ETag: "43a224ce59e07ead9cbb9a19231868d2" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BrLmZ3g6kXor0U0-hnB5bvzexE3dZPcPuliDLxByF0dEnC6nrrUUsQ== Age: 765171
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 33 34 5d 2c 7b 37 31 39 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 2c 6e 3d 72 28 39 33 35 34 32 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 39 39 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 65 3b 69 2e 62 69 67 6e 75 6d 3d 72 28 34 35 36 33 29 2c 69 2e 64 65 66 69 6e 65 3d 72 28 38 36 32 30 29 2e 64 65 66 69 6e 65 2c 69 2e 62 61 73 65 3d 72 28 35 39 34 35 29 2c 69 2e 63 6f 6e 73 74 61 6e 74 73 3d 72 28 34 35 35 34 29 2c 69 2e 64 65 63 6f 64 65 72 73 3d 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8934],{71941:function(t,e,r){var i=r(48834).Buffer,n=r(93542);!function(){var e={8996:function(t,e,r){var i=e;i.bignum=r(4563),i.define=r(8620).define,i.base=r(5945),i.constants=r(4554),i.decoders=r
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 53 74 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 62 69 74 73 74 72 22 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 74 2e 72 65 61 64 55 49 6e 74 38 28 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 45 72 72 6f 72 28 72 29 3f 72 3a 7b 75 6e 75 73 65 64 3a 72 2c 64 61 74 61 3a 74 2e 72 61 77 28 29 7d 7d 69 66 28 22 62 6d 70 73 74 72 22 3d 3d 3d 65 29 7b 76 61 72 20 69 3d 74 2e 72 61 77 28 29 3b 69 66 28 69 2e 6c 65 6e 67 74 68 25 32 3d 3d 3d 31 29 72 65 74 75 72 6e 20 74 2e 65 72 72 6f 72 28 22 44 65 63 6f 64 69 6e 67 20 6f 66 20 73 74 72 69 6e 67 20 74 79 70 65 3a 20 62 6d 70 73 74 72 20 6c 65 6e 67 74 68 20 6d 69 73 6d 61 74 63 68 22 29 3b 66 6f 72 28 76 61 72 20 6e 3d 22 22 2c 61 3d 30 3b 61 3c 69 2e 6c 65 6e 67 74 68 2f 32 3b 61 2b 2b 29 6e 2b 3d 53 74 Data Ascii: Str=function(t,e){if("bitstr"===e){var r=t.readUInt8();return t.isError(r)?r:{unused:r,data:t.raw()}}if("bmpstr"===e){var i=t.raw();if(i.length%2===1)return t.error("Decoding of string type: bmpstr length mismatch");for(var n="",a=0;a<i.length/2;a++)n+=St
2024-04-24 02:17:51 UTC	2410	IN	Data Raw: 69 73 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6f 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 30 7c 4d 61 74 68 2e 63 65 69 6c 28 74 2f 32 36 29 2c 72 3d 74 25 32 36 3b 74 68 69 73 2e 5f 65 78 70 61 6e 64 28 65 29 2c 72 3e 30 26 26 65 2d 2d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3d 36 37 31 30 38 38 36 33 26 7e 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 3e 30 26 26 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 3d 7e 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 36 37 31 30 38 38 36 33 3e 3e 32 36 2d 72 29 2c 74 68 69 73 2e 73 74 72 69 70 28 29 7d 2c 61 2e 70 72 6f Data Ascii: is)},a.prototype.inotn=function(t){i("number"===typeof t&&t>=0);var e=0\|Math.ceil(t/26),r=t%26;this._expand(e),r>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return r>0&&(this.words[n]=~this.words[n]&67108863>>26-r),this.strip()},a.pro
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 31 39 31 26 4e 2c 4c 3d 4e 3e 3e 3e 31 33 2c 7a 3d 30 7c 66 5b 30 5d 2c 55 3d 38 31 39 31 26 7a 2c 4b 3d 7a 3e 3e 3e 31 33 2c 48 3d 30 7c 66 5b 31 5d 2c 46 3d 38 31 39 31 26 48 2c 56 3d 48 3e 3e 3e 31 33 2c 57 3d 30 7c 66 5b 32 5d 2c 5a 3d 38 31 39 31 26 57 2c 58 3d 57 3e 3e 3e 31 33 2c 47 3d 30 7c 66 5b 33 5d 2c 4a 3d 38 31 39 31 26 47 2c 59 3d 47 3e 3e 3e 31 33 2c 24 3d 30 7c 66 5b 34 5d 2c 51 3d 38 31 39 31 26 24 2c 74 74 3d 24 3e 3e 3e 31 33 2c 65 74 3d 30 7c 66 5b 35 5d 2c 72 74 3d 38 31 39 31 26 65 74 2c 69 74 3d 65 74 3e 3e 3e 31 33 2c 6e 74 3d 30 7c 66 5b 36 5d 2c 61 74 3d 38 31 39 31 26 6e 74 2c 6f 74 3d 6e 74 3e 3e 3e 31 33 2c 66 74 3d 30 7c 66 5b 37 5d 2c 73 74 3d 38 31 39 31 26 66 74 2c 68 74 3d 66 74 3e 3e 3e 31 33 2c 64 74 3d 30 7c 66 5b 38 Data Ascii: 191&N,L=N>>>13,z=0\|f[0],U=8191&z,K=z>>>13,H=0\|f[1],F=8191&H,V=H>>>13,W=0\|f[2],Z=8191&W,X=W>>>13,G=0\|f[3],J=8191&G,Y=G>>>13,$=0\|f[4],Q=8191&$,tt=$>>>13,et=0\|f[5],rt=8191&et,it=et>>>13,nt=0\|f[6],at=8191&nt,ot=nt>>>13,ft=0\|f[7],st=8191&ft,ht=ft>>>13,dt=0\|f[8
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6f 72 64 73 5b 65 2b 31 5d 3d 31 3a 74 68 69 73 2e 77 6f 72 64 73 5b 65 2b 31 5d 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3d 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6c 65 6e 67 74 68 2c 65 2b 31 29 2c 74 68 69 73 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 75 62 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 69 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 2c 69 28 74 3c 36 37 31 30 38 38 36 34 29 2c 74 3c 30 29 72 65 74 75 72 6e 20 74 68 69 73 2e 69 61 64 64 6e 28 2d 74 29 3b 69 66 28 30 21 3d 3d 74 68 69 73 2e 6e 65 67 61 74 69 76 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 69 61 64 64 6e 28 74 29 2c 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 31 2c 74 68 69 73 Data Ascii: ords[e+1]=1:this.words[e+1]++;return this.length=Math.max(this.length,e+1),this},a.prototype.isubn=function(t){if(i("number"===typeof t),i(t<67108864),t<0)return this.iaddn(-t);if(0!==this.negative)return this.negative=0,this.iaddn(t),this.negative=1,this
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 69 74 4e 75 6d 62 65 72 28 74 2c 65 2c 72 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 69 74 41 72 72 61 79 28 74 2c 65 2c 72 29 3b 22 68 65 78 22 3d 3d 3d 65 26 26 28 65 3d 31 36 29 2c 69 28 65 3d 3d 3d 28 30 7c 65 29 26 26 65 3e 3d 32 26 26 65 3c 3d 33 36 29 3b 76 61 72 20 6e 3d 30 3b 22 2d 22 3d 3d 3d 28 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2b 2f 67 2c 22 22 29 29 5b 30 5d 26 26 6e 2b 2b 2c 31 36 3d 3d 3d 65 3f 74 68 69 Data Ascii: },a.prototype._init=function(t,e,r){if("number"===typeof t)return this._initNumber(t,e,r);if("object"===typeof t)return this._initArray(t,e,r);"hex"===e&&(e=16),i(e===(0\|e)&&e>=2&&e<=36);var n=0;"-"===(t=t.toString().replace(/\s+/g,""))[0]&&n++,16===e?thi
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6d 75 6c 28 5f 2c 6f 74 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 77 2c 61 74 29 7c 30 2c 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 77 2c 6f 74 29 7c 30 2c 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 76 2c 73 74 29 7c 30 2c 6e 3d 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 76 2c 68 74 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 79 2c 73 74 29 7c 30 2c 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 79 2c 68 74 29 7c 30 2c 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 63 74 29 7c 30 2c 6e 3d 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 75 74 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 63 74 29 7c 30 2c 61 3d 61 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 75 74 29 7c 30 3b 76 61 72 20 45 74 3d 28 68 2b 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 63 Data Ascii: mul(_,ot)\|0)+Math.imul(w,at)\|0,a=a+Math.imul(w,ot)\|0,i=i+Math.imul(v,st)\|0,n=(n=n+Math.imul(v,ht)\|0)+Math.imul(y,st)\|0,a=a+Math.imul(y,ht)\|0,i=i+Math.imul(p,ct)\|0,n=(n=n+Math.imul(p,ut)\|0)+Math.imul(b,ct)\|0,a=a+Math.imul(b,ut)\|0;var Et=(h+(i=i+Math.imul(c
2024-04-24 02:17:51 UTC	4820	IN	Data Raw: 79 70 65 2e 69 73 45 76 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 31 26 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 64 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 28 31 26 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 64 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 26 74 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 63 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 3b 76 61 72 20 65 3d 74 25 32 36 2c 72 3d 28 74 2d 65 29 2f 32 36 2c 6e 3d 31 3c 3c 65 3b 69 66 28 74 68 69 73 2e Data Ascii: ype.isEven=function(){return 0===(1&this.words[0])},a.prototype.isOdd=function(){return 1===(1&this.words[0])},a.prototype.andln=function(t){return this.words[0]&t},a.prototype.bincn=function(t){i("number"===typeof t);var e=t%26,r=(t-e)/26,n=1<<e;if(this.
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 73 75 62 6e 28 31 29 2e 64 69 76 28 74 68 69 73 2e 6d 29 2c 74 68 69 73 2e 6d 69 6e 76 3d 74 68 69 73 2e 6d 69 6e 76 2e 75 6d 6f 64 28 74 68 69 73 2e 72 29 2c 74 68 69 73 2e 6d 69 6e 76 3d 74 68 69 73 2e 72 2e 73 75 62 28 74 68 69 73 2e 6d 69 6e 76 29 7d 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 74 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 61 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 6e 65 77 20 41 72 72 61 79 28 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 6e 2f 31 33 29 29 2c 74 7d 2c 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 72 65 64 75 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 3b 64 6f 7b 74 68 69 73 2e 73 70 6c 69 74 28 72 2c 74 68 69 73 2e 74 6d 70 29 2c 65 3d 28 72 3d 28 Data Ascii: subn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}_.prototype._tmp=function(){var t=new a(null);return t.words=new Array(Math.ceil(this.n/13)),t},_.prototype.ireduce=function(t){var e,r=t;do{this.split(r,this.tmp),e=(r=(
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 61 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 28 65 2c 74 2e 5f 63 61 63 68 65 29 3b 72 65 74 75 72 6e 20 74 2e 5f 63 61 63 68 65 3d 74 2e 5f 63 61 63 68 65 2e 73 6c 69 63 65 28 61 29 2c 74 2e 5f 70 72 65 76 3d 69 2e 63 6f 6e 63 61 74 28 5b 74 2e 5f 70 72 65 76 2c 72 3f 65 3a 6f 5d 29 2c 6f 7d 65 2e 65 6e 63 72 79 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 69 2e 61 6c 6c 6f 63 55 6e 73 61 66 65 28 30 29 3b 65 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 30 3d 3d 3d 74 2e 5f 63 61 63 68 65 2e 6c 65 6e 67 74 68 26 26 28 74 2e 5f 63 61 63 68 65 3d 74 2e 5f 63 69 70 68 65 72 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 74 2e 5f 70 72 65 76 29 2c 74 2e 5f 70 72 65 76 3d 69 2e 61 6c 6c 6f 63 55 6e 73 61 66 65 28 30 29 29 2c Data Ascii: a=e.length,o=n(e,t._cache);return t._cache=t._cache.slice(a),t._prev=i.concat([t._prev,r?e:o]),o}e.encrypt=function(t,e,r){for(var n,o=i.allocUnsafe(0);e.length;){if(0===t._cache.length&&(t._cache=t._cipher.encryptBlock(t._prev),t._prev=i.allocUnsafe(0)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49748	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	1531	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05
2024-04-24 02:17:51 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:17:51 UTC	1380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:17:51 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:17:51 GMT; secure Set-Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-drxr5-205947 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 6a4127150f955994a1a371117bdabf7e X-Runtime: 0.005108 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2IG2FvhcSi6nfADaIYl2fkd1cGh1Z0xPok0eqLCDrz1oAzdUUN3yhQ==
2024-04-24 02:17:51 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49752	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	1011	OUT	GET /_next/static/chunks/9200.140ecd3d50fcc245.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
2024-04-24 02:17:51 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 179 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:56 GMT ETag: "67fa077ba9aac616309835ec3d822dbb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e71c7f7563801eb72fe27eb8f7c3e658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7NlCqC6058qUpY_6WXSUxNi4f7pTpCvMpLK610OfwjNTSW2RnUDu9g== Age: 752299
2024-04-24 02:17:51 UTC	179	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 30 30 5d 2c 7b 37 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 34 39 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 39 37 31 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 39 36 37 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 30 32 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 35 38 31 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9200],{7553:function(){},49134:function(){},19713:function(){},69679:function(){},6021:function(){},65812:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49749	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	1011	OUT	GET /_next/static/chunks/1627.f2cf297cefb46766.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204.; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; FPLC=WTcqZI215WsaRGNZLdCwnPMTsQxxsYN8gwlmOhBc0mB5B4j%2F4iN0gW6T7Vly5sGkZJhzaRxU7pQOAWhq5aBFPUl3ItEUmFjAWONqO9hD8eSQUSffzXGwbq5EP13alA%3D%3D
2024-04-24 02:17:51 UTC	608	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 137498 Connection: close Date: Mon, 15 Apr 2024 09:19:33 GMT Last-Modified: Fri, 12 Apr 2024 16:56:54 GMT ETag: "84a46d0b6196ffa368647e975120e17b" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G-gXXUawusxn4CaKJtD-FVGDEmLPdbePZ6FNhgBpFtkr4y2pg1qD-A== Age: 752299
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 32 37 5d 2c 7b 37 33 34 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 33 35 34 32 29 2c 6f 3d 72 28 34 38 38 33 34 29 2e 42 75 66 66 65 72 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 39 39 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 69 66 28 74 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 72 2c 6e 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1627],{73432:function(t,e,r){var n=r(93542),o=r(48834).Buffer;!function(){var e={997:function(t){t.exports=function(t,r,n){if(t.filter)return t.filter(r,n);if(void 0===t\|\|null===t)throw new TypeErro
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 2c 69 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 Data Ascii: enceError("this hasn't been initialised - super() hasn't been called");return t}(t):e}function i(t){return i=Object.setPrototypeOf?Object.getPrototypeOf:function(t){return t.__proto__\|\|Object.getPrototypeOf(t)},i(t)}function a(t,e){return a=Object.setProt
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 65 6e 74 72 69 65 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 65 6e 74 72 69 65 73 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 66 6f 72 45 61 63 68 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 66 6f 72 45 61 63 68 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 6b 65 79 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 6b 65 79 73 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 76 61 6c 75 65 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 76 Data Ascii: ototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","v
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6c 69 7a 65 28 72 2c 22 73 74 72 69 6e 67 22 29 7d 69 66 28 76 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 22 2b 65 2c 22 6e 75 6d 62 65 72 22 29 3b 69 66 28 67 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 22 2b 65 2c 22 62 6f 6f 6c 65 61 6e 22 29 3b 69 66 28 62 28 65 29 29 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 69 7a 65 28 22 6e 75 6c 6c 22 2c 22 6e 75 6c 6c 22 29 7d 28 74 2c 72 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 65 5b 74 5d 3d 21 30 7d 29 29 2c 65 7d 28 61 29 3b 69 66 28 74 Data Ascii: lize(r,"string")}if(v(e))return t.stylize(""+e,"number");if(g(e))return t.stylize(""+e,"boolean");if(b(e))return t.stylize("null","null")}(t,r);if(i)return i;var a=Object.keys(r),c=function(t){var e={};return t.forEach((function(t,r){e[t]=!0})),e}(a);if(t
2024-04-24 02:17:51 UTC	4820	IN	Data Raw: 74 6f 74 79 70 65 2c 22 77 72 69 74 61 62 6c 65 4c 65 6e 67 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 6c 65 6e 67 74 68 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 66 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 73 74 72 6f 79 65 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 72 65 61 64 61 62 6c 65 53 74 61 74 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 26 26 28 74 68 69 73 2e 5f 72 65 61 64 61 62 6c 65 53 74 61 74 65 2e Data Ascii: totype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}}),Object.defineProperty(f.prototype,"destroyed",{enumerable:!1,get:function(){return void 0!==this._readableState&&void 0!==this._writableState&&(this._readableState.
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 52 65 61 64 61 62 6c 65 29 2c 65 2e 6e 65 65 64 52 65 61 64 61 62 6c 65 3d 21 31 2c 65 2e 65 6d 69 74 74 65 64 52 65 61 64 61 62 6c 65 7c 7c 28 66 28 22 65 6d 69 74 52 65 61 64 61 62 6c 65 22 2c 65 2e 66 6c 6f 77 69 6e 67 29 2c 65 2e 65 6d 69 74 74 65 64 52 65 61 64 61 62 6c 65 3d 21 30 2c 6e 2e 6e 65 78 74 54 69 63 6b 28 4e 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 76 61 72 20 65 3d 74 2e 5f 72 65 61 64 61 62 6c 65 53 74 61 74 65 3b 66 28 22 65 6d 69 74 52 65 61 64 61 62 6c 65 5f 22 2c 65 2e 64 65 73 74 72 6f 79 65 64 2c 65 2e 6c 65 6e 67 74 68 2c 65 2e 65 6e 64 65 64 29 2c 65 2e 64 65 73 74 72 6f 79 65 64 7c 7c 21 65 2e 6c 65 6e 67 74 68 26 26 21 65 2e 65 6e 64 65 64 7c 7c 28 74 2e 65 6d 69 74 28 22 72 65 61 64 61 62 6c 65 22 29 2c 65 2e Data Ascii: Readable),e.needReadable=!1,e.emittedReadable\|\|(f("emitReadable",e.flowing),e.emittedReadable=!0,n.nextTick(N,t))}function N(t){var e=t._readableState;f("emitReadable_",e.destroyed,e.length,e.ended),e.destroyed\|\|!e.length&&!e.ended\|\|(t.emit("readable"),e.
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 6c 65 6e 67 74 68 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 73 74 72 6f 79 65 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 26 26 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 64 65 73 74 72 6f 79 65 64 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 26 26 28 74 68 69 73 2e 5f 77 72 69 74 61 62 6c 65 53 74 61 74 65 2e 64 65 73 74 72 6f 79 65 64 3d 74 Data Ascii: on(){return this._writableState.length}}),Object.defineProperty(_.prototype,"destroyed",{enumerable:!1,get:function(){return void 0!==this._writableState&&this._writableState.destroyed},set:function(t){this._writableState&&(this._writableState.destroyed=t
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 30 2c 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 29 2c 74 68 69 73 2e 6c 61 73 74 43 68 61 72 2e 74 6f 53 74 72 69 6e 67 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 2c 30 2c 74 68 69 73 2e 6c 61 73 74 54 6f 74 61 6c 29 3b 74 2e 63 6f 70 79 28 74 68 69 73 2e 6c 61 73 74 43 68 61 72 2c 74 68 69 73 2e 6c 61 73 74 54 6f 74 61 6c 2d 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 2c 30 2c 74 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 2d 3d 74 2e 6c 65 6e 67 74 68 7d 7d 2c 37 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 72 79 7b 69 66 28 21 72 2e 67 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 65 3d 72 2e 67 2e 6c 6f 63 Data Ascii: 0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);t.copy(this.lastChar,this.lastTotal-this.lastNeed,0,t.length),this.lastNeed-=t.length}},777:function(t){function e(t){try{if(!r.g.localStorage)return!1}catch(t){return!1}var e=r.g.loc
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 20 53 65 74 26 26 28 76 2e 77 6f 72 6b 69 6e 67 3f 76 28 74 29 3a 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 7d 2c 6d 2e 77 6f 72 6b 69 6e 67 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 26 26 6d 28 6e 65 77 20 57 65 61 6b 4d 61 70 29 2c 65 2e 69 73 57 65 61 6b 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 26 26 28 6d 2e 77 6f 72 6b 69 6e 67 3f 6d 28 74 29 3a 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 65 61 6b 4d 61 70 29 7d 2c 77 2e 77 6f 72 6b 69 6e 67 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 53 65 74 26 26 77 28 6e 65 77 20 57 65 61 6b 53 65 74 29 2c 65 2e 69 73 57 Data Ascii: Set&&(v.working?v(t):t instanceof Set)},m.working="undefined"!==typeof WeakMap&&m(new WeakMap),e.isWeakMap=function(t){return"undefined"!==typeof WeakMap&&(m.working?m(t):t instanceof WeakMap)},w.working="undefined"!==typeof WeakSet&&w(new WeakSet),e.isW
2024-04-24 02:17:51 UTC	1606	IN	Data Raw: 72 29 3a 65 7c 7c 22 22 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 77 72 69 74 65 28 74 29 3a 22 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 73 74 4e 65 65 64 3f 65 2b 22 5c 75 66 66 66 64 22 3a 65 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 6e 3c 72 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6f 3d 61 28 65 5b 6e 5d 29 3b 69 66 28 6f 3e 3d 30 29 72 65 74 75 72 6e 20 6f 3e 30 26 26 28 74 2e 6c 61 73 74 4e 65 65 64 3d 6f 2d 31 29 2c 6f 3b 69 66 28 2d 2d 6e 3c 72 Data Ascii: r):e\|\|""},i.prototype.end=function(t){var e=t&&t.length?this.write(t):"";return this.lastNeed?e+"\ufffd":e},i.prototype.text=function(t,e){var r=function(t,e,r){var n=e.length-1;if(n<r)return 0;var o=a(e[n]);if(o>=0)return o>0&&(t.lastNeed=o-1),o;if(--n<r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49753	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:51 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27984 Connection: close Date: Fri, 22 Dec 2023 07:35:49 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 21 Dec 2023 20:42:47 GMT ETag: "0e2ee02874d250d7602ae70e15e174c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bUFV6v_tDB-Oajis1lEzpagy0O54GIE6zoq03u-GfTeuIME6TJd0Ww== Age: 10694523
2024-04-24 02:17:51 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 50 00 12 00 00 00 01 17 28 00 00 6c e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 38 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 10 81 f8 0e 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 86 7d 1b 45 fe 67 70 6e 3a 7e e9 51 91 ba ab 22 73 fb dd 17 34 3c d9 36 e9 dd ad 4e 4a 96 21 61 c2 1d 0f ce 03 11 f7 4f ef 5e f6 ff ff ff e7 25 95 38 2c cd 59 da 6b 0f 86 e1 b7 87 88 5c ce 3c 10 81 90 10 d1 b3 97 90 69 fa 88 de c7 0c cf 4c 05 86 e0 45 6b e1 a3 dd a9 9a 44 d4 b0 f2 cd e4 7b ec cb 5c 38 4e 74 f4 5d 74 e4 49 3e 6b 36 af 7c 67 be a0 20 33 0b b3 cc 1c 19 49 1c ee 54 b8 48 38 77 7a 3a bd ee 05 d7 89 ed ea ec 51 b3 0f 67 73 39 3b 64 53 ea 50 Data Ascii: wOF2mP(l?FFTM48p`nrW&6$H \~}Egpn:~Q"s4<6NJ!aO^%8,Yk\<iLEkD{\8Nt]tI>k6\|g 3ITH8wz:Qgs9;dSP
2024-04-24 02:17:51 UTC	12353	IN	Data Raw: 6e 17 1d 85 42 20 70 b8 c4 c2 7f 23 da 9b 76 0c 9a b8 e4 f4 5c 3f 32 50 cf 06 e5 8d 43 ed fd 03 b3 9b 2a 72 c9 71 ab c6 6d b7 ea 8c b4 f9 ab 24 2f 2c bf 75 f0 c1 49 9e d4 1a 83 b4 db 63 60 30 f5 41 e6 c3 a1 d1 05 43 68 36 0a 15 b8 13 bb 53 1e f8 2e f6 5d b9 90 bf d4 7e c3 a9 3a 73 ea 84 f7 c4 f9 f8 f9 e3 de e3 e8 38 ee cc cc 13 be 13 85 27 3c 27 ce c4 cf 1c f7 1c 2f 3c ee 3b 3e 19 e7 09 7b a8 16 39 8b 4a 41 c9 2d 54 1a 20 47 51 a8 2c 39 50 56 2e 28 58 75 4c 8c 7e 39 fa 75 aa 6a d7 83 d6 bd e2 ab e5 6f f4 54 a5 62 8d cf c6 2a de aa e6 7e 7f 93 10 d4 a8 89 c1 6f be e7 70 ff f9 90 10 54 6b f0 c1 0f fe e1 3a c4 52 9b 07 94 da c5 62 a9 1d f4 48 6d 88 aa f5 8f 05 65 1f bb d9 0e b6 04 2f 9a 7c 90 ac 7c a9 65 ff 04 8e f4 3b 95 d9 bf c5 51 11 f7 30 a3 3c 96 8c 5e Data Ascii: nB p#v\?2PCrqm$/,uIc`0ACh6S.]~:s8'<'/<;>{9JA-T GQ,9PV.(XuL~9ujoTb~opTk:RbHme/\|\|e;Q0<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49755	31.13.70.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:51 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 02:17:51 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 02:17:51 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 02:17:51 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-24 02:17:52 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-24 02:17:52 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-24 02:17:52 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-24 02:17:52 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-24 02:17:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-24 02:17:52 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49754	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:51 UTC	634	OUT	GET /_next/static/media/GTSuperWT-Regular.d1473b9e.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:51 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 35884 Connection: close Date: Sat, 02 Mar 2024 15:37:01 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 02 Mar 2024 02:14:05 GMT ETag: "51cbd7213ae115ed59c3f2874014ab69" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 95026a1fefec6be0989146de8d9def62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: u2k_kXhtHsSSTyMjZGt0u05-CF9vp32tLSo_OSJPkPMxxaZ9RM8_xw== Age: 4531251
2024-04-24 02:17:51 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 8c 2c 00 12 00 00 00 01 7b 9c 00 00 8b c1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 82 0c 1b 81 86 1c 1c 91 76 06 60 00 87 6e 08 34 09 9c 15 11 08 0a 84 80 20 83 c1 32 0b 87 1c 00 01 36 02 24 03 8e 22 04 20 05 86 27 07 96 62 0c 81 27 5b 56 57 91 00 cd c5 3c d1 67 c4 3e 4a b7 21 50 1d cd ad ab 1a 55 48 09 f3 ac db e1 b6 51 d4 79 eb cc cc cb 2b d8 b1 0f 01 e7 41 d0 fd cc 2b 6a d9 ff ff ff ff 5b 92 45 8c ad dd 41 66 f6 ee 38 3a 80 b2 04 5f 35 d3 7a 4c 29 8c 5e 46 97 72 b8 94 68 a9 24 4b 96 87 9a dc 60 e3 5b cb d9 a6 32 d3 16 36 ba 6a c5 e6 75 b0 e4 5a 7f df 2b 52 d3 98 dd c7 31 7f 66 cb 36 a7 7a fc 02 69 cd 0b 60 49 48 52 76 e1 06 c8 6a 13 2d 5c 44 78 92 44 24 5e 88 52 c8 93 9a Data Ascii: wOF2,{?FFTMv`n4 26$" 'b'[VW<g>J!PUHQy+A+j[EAf8:_5zL)^Frh$K`[26juZ+R1f6zi`IHRvj-\DxD$^R
2024-04-24 02:17:51 UTC	16384	IN	Data Raw: 9a 00 b7 9c 38 3c 3c 1e 2e ad 5b e7 74 f5 d6 35 ba 37 af f7 d5 49 9a 21 cf fb a9 45 95 d9 86 9a 71 5b bb 0a 04 ed d5 26 8d 55 17 3f c0 3f c0 fb ea ff d2 7f f6 c0 86 cd 7f ef 3f f8 f5 6e 4a c7 82 b6 df 36 b5 2e 6b 4b 69 54 3d c6 ea 06 c0 af 3f 2d 1a c8 dc cf 7b d9 f0 3c f1 0c d9 55 65 b4 79 52 39 02 93 70 4e cc 3c 93 40 c0 a1 57 16 df 5c 41 bb 74 11 cd 89 5e ea 29 51 76 2e 7e d1 59 e1 1e de 57 3f f5 35 e2 a8 33 7b 3c 0b b9 93 f0 bb 46 8d c7 aa aa d7 ba 9d eb eb eb b2 37 6c f0 d5 cc 77 d3 fa 09 d9 a5 05 59 fa 4a 3d af d5 5f 2c 58 5e 61 53 a5 3c 79 18 10 50 15 c2 d0 dc 49 b2 13 6b 01 6b 4f b0 6e 30 6e b0 2e 9d 54 97 a4 a2 cd 41 06 33 2e b1 ff bc 45 fc c9 be 24 13 7e cf 01 0d 5f 79 07 f8 03 bd 00 22 d5 94 fa 6c 72 48 7b 20 03 38 21 78 fb 09 e6 23 af 23 c7 22 Data Ascii: 8<<.[t57I!Eq[&U???nJ6.kKiT=?-{<UeyR9pN<@W\At^)Qv.~YW?53{<F7lwYJ=_,X^aS<yPIkkOn0n.TA3.E$~_y"lrH{ 8!x##"
2024-04-24 02:17:51 UTC	3868	IN	Data Raw: ae 26 1f e4 7b 9d 4c 09 50 4f 2f de ad a4 a0 93 01 bc c5 09 23 8b 7c dc 7a 59 81 ad a0 d8 96 c6 9c 79 03 5e d0 26 fb 1d 57 96 ad 6e 6c 2d f7 48 e1 7d 4d 1b 8e c5 66 f2 0c 8f 41 e9 ab 29 1f 67 7a ab 31 e2 1b a8 e9 62 0a 22 d1 03 3e 46 5b 2d a4 d8 ff 38 4f a8 f7 52 0a ed 3a 86 a9 53 d0 30 0f 91 30 c3 7f de 63 dc d6 df dd 92 df 99 71 41 9b f2 09 27 f5 b5 67 6a aa 84 53 f8 13 9c 4b 48 31 09 69 26 30 59 51 b2 23 d0 39 96 11 2b 55 09 81 ad 5d 61 32 0b f4 90 cf 78 f9 eb 15 91 b1 bd 66 a1 8a 65 39 9b 9b dc 6c e4 bd b2 4d a7 ba 9a 30 d7 39 de 65 d2 8a ea 87 7d 58 1e 58 8f e5 ed ef 63 8a 6b b1 77 92 14 3a 59 8a 23 27 93 35 49 40 1e 1c 0d cf 83 af 5d 8c 27 f3 c9 d6 e7 12 db 9a ec 08 6c 2a b5 60 12 b4 86 49 68 0e 9a 65 8a 2b ca 39 c8 9d 2f 24 4c 39 92 91 50 77 89 b9 Data Ascii: &{LPO/#\|zYy^&Wnl-H}MfA)gz1b">F[-8OR:S00cqA'gjSKH1i&0YQ#9+U]a2xfe9lM09e}XXckw:Y#'5I@]'l*`Ihe+9/$L9Pw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49756	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:53 UTC	641	OUT	GET /_next/static/media/ActiefGrotesque_W_Regular.458577e8.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:53 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 31120 Connection: close Date: Thu, 07 Dec 2023 07:02:37 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 07 Dec 2023 02:08:03 GMT ETag: "57cbbfdafc43e0deecc75a309dd042c6" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RGHOwtjFVMHL6sdYZdLKId0K3JuTjcp4zz7mzEfQ5c-L_oxFRYAWfg== Age: 11992516
2024-04-24 02:17:53 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 79 90 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 69 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 69 34 00 00 0b a2 00 00 33 92 12 d2 b6 e6 47 53 55 42 00 00 74 d8 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 86 d4 60 b2 63 6d 61 70 00 00 05 fc 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 4c 00 00 01 91 00 00 0b f2 54 a0 2e b0 66 70 67 6d 00 00 07 d4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 69 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 12 f8 00 00 54 d8 00 00 90 f0 a6 31 f2 b3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 56 43 9f 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFy<GDEFio]GPOSi43GSUBt8-jQOS/2Z``cmap;<cvt LT.fpgm06gaspiglyfT1head66VChhea
2024-04-24 02:17:53 UTC	15488	IN	Data Raw: c6 58 2c f5 38 e4 8b 01 10 c6 c3 a3 99 51 3c 2a 0e e4 7d fe 34 f9 ef 4a cd 19 f2 62 78 ce c5 86 a9 df 55 d2 3b ce 10 c5 c3 d2 0f d4 0d 8a a7 b5 b7 4b 36 20 9b 05 6d 5d 2d 21 a7 33 68 0e f9 82 29 57 70 9c 38 1f 5f 2f f4 7a b7 26 39 75 51 d1 1c 88 b9 c5 d9 b5 96 36 c7 27 05 6c b7 d9 ac 4b 9a c1 dd b7 5e f0 9a e1 d8 f9 6d 93 1d 42 5c b0 ba 7d 96 74 9c e9 37 16 41 cd 7a 6b 87 fc 04 60 d6 5b 51 f5 6c 51 b4 98 40 5c 42 bc b7 b6 c0 9e 5d 23 5b 75 bc 1c 68 a6 c0 16 b8 33 7e ce f9 52 51 b4 9b 39 b4 89 f3 b0 82 3d 15 68 b0 5f 18 83 04 8c 21 bc 88 c0 c9 7a 36 61 af 3e 01 00 df 64 ec dd 4c 03 3d 51 ed 07 ce ff ab a2 a8 55 03 22 fc ea 1a ff 10 c1 f8 38 9a c9 7c 97 2c 73 37 07 6a 64 99 ab a7 01 90 bf 81 f5 4c 75 37 67 a5 cf ad 5e 53 07 03 41 ff 37 c1 98 84 c3 0a fa 54 Data Ascii: X,8Q<*}4JbxU;K6 m]-!3h)Wp8_/z&9uQ6'lK^mB\}t7Azk`[QlQ@\B]#[uh3~RQ9=h_!z6a>dL=QU"8\|,s7jdLu7g^SA7T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49757	31.13.70.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:53 UTC	1308	OUT	GET /signals/config/1904796869803472?v=2.9.154&r=stable&domain=wetransfer.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:53 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 02:17:53 UTC	1501	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 02:17:53 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 02:17:53 UTC	14044	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 02:17:53 UTC	16384	IN	Data Raw: 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b Data Ascii: been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function k(a,b){if(typeof b!=="function"&&b!==null)throw new TypeError("Super expression must either be null or a function, not "+typeof b);a.prototype=Object.create(b&&b.prototype,{
2024-04-24 02:17:53 UTC	16384	IN	Data Raw: 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 Data Ascii: ules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("S
2024-04-24 02:17:53 UTC	16384	IN	Data Raw: 72 20 72 3d 6d 2e 67 65 74 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 2c 73 3d 6d 2e 67 65 74 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3b 6d 2e 73 65 74 49 57 4c 45 78 74 72 61 63 74 6f 72 73 3b 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 74 3d 6d 2e 53 69 67 6e 61 6c 73 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 2c 75 3d 6d 2e 53 69 67 6e 61 6c 73 45 53 54 43 75 73 74 6f 6d 44 61 74 61 2c 76 3d 6d 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 77 3d 6d 2e 73 69 67 6e 61 6c 73 45 78 74 72 61 63 74 46 6f 72 6d 2c 78 3d 6d 2e 73 69 67 6e 61 6c 73 49 73 49 57 4c 45 6c 65 6d 65 6e 74 2c 79 3d 6d 2e Data Ascii: r r=m.getCustomParameters,s=m.getIWLParameters;m.setIWLExtractors;m=f.getFbeventsModules("SignalsFBEventsShared");var t=m.SignalsESTRuleEngine,u=m.SignalsESTCustomData,v=m.signalsConvertNodeToHTMLElement,w=m.signalsExtractForm,x=m.signalsIsIWLElement,y=m.
2024-04-24 02:17:53 UTC	2339	IN	Data Raw: 67 2e 73 65 74 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 7b 22 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 22 3a 22 65 78 74 65 6e 64 65 64 22 2c 22 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 64 65 6e 74 69 74 79 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 Data Ascii: g.set("1904796869803472", "inferredEvents", {"buttonSelector":"extended","disableRestrictedData":false});fbq.loadPlugin("inferredevents");fbq.loadPlugin("identity");instance.optIn("1904796869803472", "InferredEvents", true);config.set("190479686980347
2024-04-24 02:17:53 UTC	1312	IN	Data Raw: 73 43 6f 6e 66 69 67 22 3a 7b 22 70 61 72 61 6d 73 22 3a 5b 7b 22 70 72 65 66 69 78 22 3a 22 22 2c 22 71 75 65 72 79 22 3a 22 66 62 63 6c 69 64 22 2c 22 65 62 70 5f 70 61 74 68 22 3a 22 63 6c 69 63 6b 49 44 22 7d 5d 7d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 62 72 6f 77 73 65 72 70 72 6f 70 65 72 74 69 65 73 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 22 2c 20 74 72 75 65 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 39 30 34 37 39 36 38 36 39 38 30 33 34 37 32 22 2c 20 22 45 53 54 52 75 6c 65 45 6e Data Ascii: sConfig":{"params":[{"prefix":"","query":"fbclid","ebp_path":"clickID"}]}});fbq.loadPlugin("browserproperties");instance.optIn("1904796869803472", "BrowserProperties", true);fbq.loadPlugin("estruleengine");instance.optIn("1904796869803472", "ESTRuleEn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49758	18.154.206.58	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:53 UTC	573	OUT	GET /js/profitwell.js?auth=1a33eb12b20b92f6b89c398e023e2ca1 HTTP/1.1 Host: public.profitwell.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:53 UTC	582	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35730 Connection: close Last-Modified: Thu, 21 Dec 2023 14:58:22 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: uxIt1SCydrYnaOCuzhsDaHENAdMuSyNO Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:16:15 GMT ETag: "40097cdf413c1f1f303c66489742cb44" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10fe4828a58246528ac6d56c0ccde12c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: i78hQYvr4OgmPZkXdn40gEaO_xO1HMMrSv2_g9jEkwcC_0NieI350A== Age: 99
2024-04-24 02:17:53 UTC	15802	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 41 6e 6f 6e 79 6d 6f 75 73 43 75 73 74 6f 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(){}return t.prototype.trackAnonymousCustomer=function(){},t.prototype.getAnonymousId=function(){return null},t}(),e=function(t,r){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function
2024-04-24 02:17:53 UTC	16384	IN	Data Raw: 72 6c 28 29 2c 6e 3d 72 28 72 28 7b 7d 2c 74 68 69 73 2e 67 65 74 43 75 73 74 6f 6d 65 72 50 61 72 61 6d 73 28 29 29 2c 74 68 69 73 2e 63 75 73 74 6f 6d 53 74 79 6c 65 73 2e 74 6f 50 61 72 61 6d 73 28 29 29 2c 5b 34 2c 74 68 69 73 2e 72 65 71 75 65 73 74 73 2e 67 65 74 28 65 2c 6e 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6f 3d 69 2e 73 65 6e 74 28 29 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 68 69 73 2e 6d 65 73 73 61 67 65 53 65 72 76 69 63 65 2e 61 64 64 4f 6e 65 54 69 6d 65 4c 69 73 74 65 6e 65 72 28 22 63 72 65 64 69 74 43 61 72 64 53 75 62 6d 69 74 74 65 64 22 2c 74 29 2c 74 68 69 73 2e 77 69 64 67 65 74 53 65 72 76 69 63 65 2e 6c 6f 61 64 53 61 6d 65 4f 72 69 67 69 6e 49 46 72 61 6d 65 28 6f 2c 74 29 2c 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c Data Ascii: rl(),n=r(r({},this.getCustomerParams()),this.customStyles.toParams()),[4,this.requests.get(e,n)];case 1:return o=i.sent(),void 0!==t&&this.messageService.addOneTimeListener("creditCardSubmitted",t),this.widgetService.loadSameOriginIFrame(o,t),[2]}}))}))},
2024-04-24 02:17:53 UTC	3544	IN	Data Raw: 6e 64 45 72 72 6f 72 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 69 6c 64 44 6f 74 4a 73 56 31 55 72 6c 28 22 71 75 65 73 74 73 2f 65 72 72 6f 72 2f 22 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 72 65 61 74 65 53 61 6c 76 61 67 65 4f 66 66 65 72 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 62 75 69 6c 64 44 6f 74 4a 73 55 72 6c 28 22 63 72 65 61 74 65 2d 73 61 6c 76 61 67 65 2d 6f 66 66 65 72 2f 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 43 75 73 74 6f 6d 53 74 79 6c 65 73 28 65 2c 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 50 72 65 76 69 65 77 43 61 6e 63 65 6c 6c 61 74 69 6f 6e 46 6c 6f 77 55 72 6c 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ndErrorUrl=function(){return this.buildDotJsV1Url("quests/error/")},t.prototype.buildCreateSalvageOfferUrl=function(t){var e=this.buildDotJsUrl("create-salvage-offer/");return this.addCustomStyles(e,t)},t.prototype.buildPreviewCancellationFlowUrl=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49760	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:53 UTC	1280	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f
2024-04-24 02:17:54 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:17:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-w94l7-205948 X-Request-Id: 13cc171bebe770cf4515e29db935bb94 X-Runtime: 0.001088 X-Cache: Error from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oK1nEg9XIZ5WxqSrE7xTvudUmr1Dc9byPBtYr1RpKHdvMxG8WhafLg==
2024-04-24 02:17:54 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49759	52.30.32.26	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:54 UTC	531	OUT	OPTIONS /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-unique-id Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:54 UTC	424	IN	HTTP/1.1 204 No Content access-control-allow-headers: x-unique-id Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Max-Age: 86400 Content-Length: 0 Date: Wed, 24 Apr 2024 02:17:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin, Access-Control-Request-Headers X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49761	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:54 UTC	991	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:54 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49762	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:54 UTC	1106	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:54 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:54 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:54 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:54 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:54 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49763	52.30.32.26	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	657	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:55 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 37 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-24 02:17:55 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49764	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	1492	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
2024-04-24 02:17:56 UTC	743	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:17:55 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e71c7f7563801eb72fe27eb8f7c3e658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zJ66ubNNmj0w9PqXKM1w5A30_u-CJzkr33RAWw-G1UcSrF71fS_8sw==
2024-04-24 02:17:56 UTC	16384	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-24 02:17:56 UTC	16384	IN	Data Raw: 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii:
2024-04-24 02:17:56 UTC	8798	IN	Data Raw: 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 12 1a 18 17 4b 1a 18 17 7a 1a 18 17 96 1a 18 17 aa 1a 18 17 aa 1a 18 17 a1 1a 18 17 85 1a 18 17 56 1a 18 17 20 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a Data Ascii: KzV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49765	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	2843	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12692&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
2024-04-24 02:17:55 UTC	901	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:55 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=tQHSmYiiH80TXWWWGsfZNHcxZ8ZhKk7QXIN6hdF%2BAri7Rpd0cR74kTFcwjCPq8AQpln3aRXHg8F9Qs23Ai%2BiTcrU3nGyckORyhXYrK2p4mLhwOPDeHqhcPqmrGI9CA%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0a16ecffc1ef99dae63eb63b380e2952.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: NyAvl2XCkV0MoDt3KQNaXJx93gLHJqiloFZQ_aH3jUbMcFf2lUNHcA==
2024-04-24 02:17:55 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49766	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	2830	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12693&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_0M019DTWVR=GS1.1.1713925068.1.0.1713925068.0.0.496837087; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402
2024-04-24 02:17:55 UTC	903	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:55 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 409c44fe5aec2ede2c5cd6cb59aad7d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: I0yEBP8cXRl94ykzBrzR5_A4tnF3tY7gs2JKGw6rP-oVuxlkOFd3TQ==
2024-04-24 02:17:55 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49769	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	757	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49768	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	794	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925073233&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:55 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:55 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49770	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	2980	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A54.196%2B02%3A00&epn.hit_timestamp_unix=1713925074196&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925065478-69-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925065478-69-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=3598&tfd=12727&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; FPLC=GZ%2FjXsRfq%2FjGFKo5ZhVqvoSObri7nKD4ZzsX7I%2FsGaCiPQooOM%2FHOpsNviooYOPH%2FKnP5wYAyRpbV4l5xs9pVC2gINQFuLm5xQeTvRcvbZmhhJvDk7qFWNoKsclg%2Bg%3D%3D; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087
2024-04-24 02:17:55 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:55 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775998; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 d6ded095ff5c3cb91656796223a09360.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: rYbd0GIWp38cIkNRNmbh44D4A3QfuX_2o_OD7bKuVvPBZkq0N2z-pA==
2024-04-24 02:17:55 UTC	1020	IN	Data Raw: 33 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 39 38 32 36 32 32 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 Data Ascii: 3f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7
2024-04-24 02:17:55 UTC	952	IN	Data Raw: 33 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 39 38 32 36 32 32 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 25 Data Ascii: 3b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%
2024-04-24 02:17:55 UTC	306	IN	Data Raw: 31 32 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 74 72 5a 37 41 34 4e 51 6b 6c 50 44 36 51 4e 4f 67 38 51 56 25 32 46 56 6f 68 31 47 58 33 68 53 68 76 43 64 76 4f 59 45 75 32 79 6d 47 39 5a 6b 46 56 6f 36 33 6c 25 32 42 77 6a 56 30 53 74 25 32 42 49 70 52 39 77 25 32 42 50 6c 48 4a 4f 50 34 57 51 77 62 67 69 42 64 66 75 56 36 6e 6b 31 62 35 56 49 66 51 6b 52 57 53 64 79 76 61 25 32 46 25 32 42 55 61 62 45 47 25 32 42 50 55 49 4a 56 44 38 49 25 32 46 4b 50 4f 62 66 79 25 32 42 67 54 62 6d 62 58 57 6d 77 48 25 32 42 6b 6f 32 31 38 33 6f 42 4c 64 4d 51 73 58 25 32 42 61 38 64 59 44 6d Data Ascii: 12bevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDm
2024-04-24 02:17:55 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49774	146.75.92.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	520	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4777 ETag: "ab32572e3176c9ff9c0ae3577598ec88" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Wed, 24 Apr 2024 02:17:55 GMT
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 Data Ascii: ()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerr
2024-04-24 02:17:55 UTC	643	IN	Data Raw: 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 65 64 62 36 35 33 38 64 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e 3a Data Ascii: (n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.edb6538d.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49772	151.101.129.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	530	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	1014	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8702 Last-Modified: Thu, 15 Feb 2024 20:38:48 GMT ETag: "9a680c8c475d8bba600d4d87b4fa7ee5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:55 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 99 c8 80 b1 93 80 b5 29 02 38 66 63 63 17 0f 67 b7 5c 2c 25 4b 03 28 11 12 47 12 71 7c 41 f7 b7 df 9e a7 46 32 4e 9c b3 e7 7c b8 55 bb 41 33 dd d3 ef ee e9 19 c9 07 f3 4d e0 24 5e 18 94 22 1d a3 00 25 c6 56 ce 84 ba 87 e6 c6 d6 9b eb 07 c1 9d 37 65 4f 98 3e 7d b3 a3 92 63 69 02 55 b3 ac e4 71 8d c3 79 29 c2 ff da 78 11 2e 97 f9 43 8b ac 99 97 cb 8e 11 e1 64 13 05 25 07 88 1e 54 0d 32 bf 11 73 1b 3e 47 a8 da 56 80 1f 4a bd 28 0a 23 5d eb d8 41 10 26 a5 b9 17 b8 a5 55 e8 6e 7c 5c fa a7 56 f1 2a da 3f 35 a3 95 2c a3 f0 a1 64 9b 4e e8 62 4b bb ba ee 4e 2e 7b b3 c1 f5 78 76 7e 3d 19 74 35 64 a7 84 de da 22 b2 5b 5b fc 7d 1d 46 49 dc dc a6 69 8b e8 70 57 9d 9a 8e ed fb fa da e4 20 24 b4 d1 23 Data Ascii: ;ksN8)8fccg\,%K(Gq\|AF2N\|UA3M$^"%V7eO>}ciUqy)x.Cd%T2s>GVJ(#]A&Un\|\V*?5,dNbKN.{xv~=t5d"[[}FIipW $#
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: e9 42 d6 30 54 42 01 30 60 5d a6 3c 1b 5f b2 68 62 03 1e 5b a8 e0 45 15 93 f8 b2 6e 64 da 1d 43 92 52 46 c4 83 9c 0a 6c 9e 60 7f 38 0b d6 0d 04 32 d2 dc f5 5e bd 3d 6c fc d4 bf 2a a7 a3 3a a9 f5 97 d0 91 05 35 ee 5a 3e f8 af 79 d7 a7 f4 ff be 83 15 3a cc 79 cc 61 e6 3c 0a 57 64 b6 03 db 00 75 7b e6 3f 75 c9 b3 2e 64 48 39 2f ca 29 ee 48 39 7e c6 97 05 7c aa 94 aa ca ce d2 41 83 72 46 c6 e1 f2 b6 13 dd 33 84 2f 41 d1 9f fa b2 c0 89 38 73 92 cc df 72 57 d2 c7 9f 38 52 69 ed 5d 4c b6 ce c9 b0 df 09 57 6b a8 44 10 6c 38 76 ec 35 d6 59 4c 28 bb 69 46 c0 90 ed 3e d0 2a b6 fa 57 b6 0f 36 5c 41 37 3f 19 9f bf 7e 5b 72 ed c4 d6 88 90 05 9b 6f 40 50 6a 71 2e 09 e7 47 b1 f4 4d c0 a5 60 5b 7b 4e 3e b1 d0 20 44 3f 6c e6 73 1c 61 f7 83 1f 3a 5f db fe 22 8c bc 64 b9 12 Data Ascii: B0TB0`]<_hb[EndCRFl`82^=l:5Z>y:ya<Wdu{?u.dH9/)H9~\|ArF3/A8srW8Ri]LWkDl8v5YL(iF>W6\A7?~[ro@Pjq.GM`[{N> D?lsa:_"d
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: a1 a3 e3 29 8d 8b 8a 4b 47 8d 29 0d 8f 0a a6 a3 93 29 8d 92 ca 9c 8e 4e a7 34 58 2a 0b 3a 7a 33 a5 31 53 59 ee aa 34 5c cf 9f f4 43 ac da bd e8 54 13 90 14 1c 87 89 ed 5b 6f 0f 8b c7 2a 06 bd c4 f3 04 80 b9 06 5b f4 02 92 e6 9d 44 05 a3 9e c0 c9 be 56 7f 4b cf ef 72 fe d5 71 3d 13 e1 ae d6 a8 e8 12 54 39 6d c0 aa 77 67 67 0d 63 ca 2a e3 dc 0f 21 c9 32 e1 8e b2 e2 65 a8 54 4e 9e a3 92 2d cd 9f 0c ac c6 61 76 92 e0 b7 16 fb da 4c 96 d5 3f 3c 04 f0 ba f3 93 63 00 2d 3a 4a 9d c8 1f 03 a0 cb ea 14 ea 58 ae d5 d4 19 8c b4 65 a4 1f dc 8f 29 1b 45 81 cd 1b 36 24 fb 04 36 ff ff b1 4d 38 79 61 9b e0 b9 a8 73 3d 18 8d db 83 f1 c8 ca 89 4b df 7b 25 b1 66 20 f2 66 18 20 38 4e e8 2e f0 c7 d5 e5 45 92 ac f9 14 8a dc 44 bc 48 87 c7 16 fc 0f 9b 9c e7 5a f0 60 ae bd ef d8 Data Ascii: )KG))N4X:z31SY4\CT[o[DVKrq=T9mwggc*!2eTN-avL?<c-:JXe)E6$6M8yas=K{%f f 8N.EDHZ`
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: b9 97 e0 be 49 a1 1e b9 68 21 17 38 13 20 73 4e de 31 53 e8 6d 3d 93 c2 61 33 24 a0 f9 c7 7c 6b df 4b 2c 65 9a be c3 81 86 c5 d4 e4 71 89 ce f0 13 d9 59 fd bd 82 dc a4 20 38 45 a7 52 04 d6 f7 3c e5 2c ef ba f6 29 a0 33 8b eb a4 81 13 84 c0 32 fb a8 c8 bb 3a 2a 78 d6 6e 51 54 21 7c 0b dc 11 fa 2e 30 e1 56 a3 1f 42 b2 19 c9 dc aa 1d 55 c5 bb 7d 45 c3 ec fd fe 57 fc 08 5a 5a 4c 47 6f 2a 88 5b ec 7c 51 3b 63 70 be 8c dc 04 f2 58 30 e1 67 a5 33 28 74 56 86 65 59 59 ff b9 a7 89 60 dc a0 ca 90 f2 1f 5b 7c 61 6d aa ba 82 32 14 28 82 25 eb 39 a5 3e f2 fb 0b 81 47 ee bb 6a 55 a3 75 e0 c5 03 7b a0 4b 4c f2 91 a5 78 3e 2b 58 05 0e 1c 45 3b 49 dc bc 4d a5 9c e4 ed 84 f8 fe 53 41 e0 3d 28 b5 49 3f 06 b9 f0 02 47 99 2b 63 11 11 9a 56 19 d0 6f 66 61 0a 4c 15 67 09 50 5c Data Ascii: Ih!8 sN1Sm=a3$\|kK,eqY 8ER<,)32:xnQT!\|.0VBU}EWZZLGo[\|Q;cpX0g3(tVeYY`[\|am2(%9>GjUu{KLx>+XE;IMSA=(I?G+cVofaLgP\
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 33 16 87 99 48 79 05 69 18 2e 42 a5 67 34 57 29 92 26 9b 11 0d 80 84 d3 4c 6c 75 19 b5 46 ca ee 72 34 10 6c 41 db 2c fd 86 e3 44 17 b7 40 17 27 ef c9 2e 20 6f 04 3b 3f 9e 64 9b a3 21 2c e2 68 fa c0 b1 61 80 06 e6 bc 72 a1 b9 05 ba 48 e5 e2 90 f1 fe f8 f6 16 c4 a7 04 cb f7 c2 10 2b 81 0a 46 e4 3a 03 4c 43 05 fb 64 42 47 4b 56 46 b2 00 d1 53 94 80 52 9f 54 b1 cb bc 6a 7f 9b a5 93 07 55 0b 28 40 be da 66 0d f4 97 d9 e8 7a 08 0b 24 46 d4 65 07 06 f9 e8 f9 b4 3f 01 4e 99 7a a0 b9 de 82 00 f2 7c 5e e5 35 67 01 03 27 02 09 be ef fd 8c 2a 7c f1 60 1c 51 ea c6 b0 7e 7a 9d f6 b3 74 2d bd cd b0 ca f7 61 3c 5b fb dc ff 86 95 96 83 eb d9 10 ab 80 3f 63 6d f0 64 02 8b cb fa f7 1a 6b 1f 28 fa 00 1a 2b 6c fa 00 d5 bf 2a dc 5e fb 0d 29 1a fe de cf de 8d a7 5d 45 40 96 0e Data Ascii: 3Hyi.Bg4W)&LluFr4lA,D@'. o;?d!,harH+F:LCdBGKVFSRTjU(@fz$Fe?Nz\|^5g'\|`Q~zt-a<[?cmdk(+l^)]E@
2024-04-24 02:17:55 UTC	1378	IN	Data Raw: 7a 9b 57 42 e1 57 df 5a d2 dc 7d 49 a1 37 be 8e 05 cc 7a fd f9 56 83 7b 0c 66 0d da 93 78 bb 32 99 bf 76 6f 0b b1 1e b3 55 12 78 cb 25 bf 94 fa 79 0f 98 ef f6 32 eb ef eb 65 9e 9b 92 14 b4 d9 ad d1 a4 0e 39 a0 a7 f9 db 6d c7 e3 c2 97 8a 85 b9 7d 39 16 bf 1c a5 d7 c3 e4 89 51 58 6d 44 80 eb e5 22 b4 ee 64 5c a2 93 fb ee e1 08 c7 74 2f 4f b1 14 1b e4 06 a1 88 5c ca f3 af a8 93 68 0a 10 94 ce 9d cb ce 7c 72 96 e8 59 e8 65 12 e7 6a a8 7f d7 6d 34 47 39 6a 9d 33 fa 34 56 63 b3 9a 33 da 5f 38 76 0a e5 de cb 32 16 6f c0 14 f4 c9 74 1a 71 40 17 38 0a 1b f1 6c e2 06 bc b0 8c 00 ce a9 a3 97 70 b3 7a a2 8b b9 fc b7 f3 27 78 ea 55 ec 94 7e 17 4c 0e 33 ff ae f5 34 c6 17 56 7d 30 4d 0c 80 17 76 24 65 03 80 fc dc 32 5a ea 7d 32 41 ba 2f e7 76 7c 05 7f 10 95 3e 8e e0 37 Data Ascii: zWBWZ}I7zV{fx2voUx%y2e9m}9QXmD"d\t/O\h\|rYejm4G9j34Vc3_8v2otq@8lpz'xU~L34V}0Mv$e2Z}2A/v\|>7
2024-04-24 02:17:55 UTC	434	IN	Data Raw: 2f 16 a2 57 6d c7 f6 a9 d6 7b 6c 44 bb cd 85 e8 0f db 00 f1 a1 fe ac 11 e1 cb 17 9b fa d5 5d be 72 1a 9f cd 55 f3 b9 f7 b2 f5 69 9a 4d d5 70 b3 d8 28 27 fd 09 a9 cd b9 3f 51 08 70 fc 90 b0 29 da dd b1 58 ba 20 34 7c 2c d4 66 b0 a0 58 b1 58 b0 cb a3 19 db dc 2d a3 21 66 0a e2 1b 6f 8a 12 5e 5a 6f 2c d8 6b f5 1e 0e 34 bc 9d 85 d2 99 74 a2 92 93 74 a4 b2 89 0a 4a d6 dd aa 74 c3 be 93 4c 89 da e7 31 63 fe 13 c7 56 f7 33 59 28 81 ed 8a 13 29 b0 45 2e af 6e b3 8c 60 9a 72 dc 60 7a f2 54 38 9f a5 44 bb e0 83 e0 79 fb 97 c7 8f ad 58 2b 78 77 67 df d2 59 6a 97 82 48 2e bb db 65 b2 49 c6 66 0b 84 6c 50 4b 27 bf 18 b9 70 82 5f f8 bd 04 8f 7a f4 48 50 87 1a d1 61 d5 14 e3 cc f2 34 1e cb 7f 6c 9b d1 e3 7c ae 75 c5 75 47 d7 9a cf d7 dd d1 3c ce fd 6f 1c 2c 43 7b 81 64 Data Ascii: /Wm{lD]rUiMp('?Qp)X 4\|,fXX-!fo^Zo,k4ttJtL1cV3Y()E.n`r`zT8DyX+xwgYjH.eIflPK'p_zHPa4l\|uuG<o,C{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49775	13.226.225.89	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:55 UTC	535	OUT	GET /sdk/3.0/td.min.js HTTP/1.1 Host: cdn.treasuredata.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:55 UTC	583	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 58921 Connection: close Date: Sun, 31 Dec 2023 04:48:46 GMT Last-Modified: Mon, 05 Jul 2021 08:58:13 GMT Etag: "4b9abb36767431f05495228eb82edf01" Cache-Control: public, max-age=315360000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 64728acddeb290ea8e95d7ffd4d64ae2.cloudfront.net (CloudFront) Age: 9926949 Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: LAX50-C2 X-Amz-Cf-Id: FvKExgOPEP-NWOQUjSCVdAcbA6jh_tv24b9gAlW1yJ6oUo8i5oeOKw==
2024-04-24 02:17:55 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-04-24 02:17:55 UTC	16384	IN	Data Raw: 74 28 63 2e 63 61 6c 6c 28 74 29 29 3a 69 28 74 29 26 26 28 6f 28 74 29 3f 66 3a 73 29 2e 74 65 73 74 28 74 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 72 28 65 29 5b 74 5d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 29 2c 6f 3d 6e 28 34 29 2c 69 3d 6e 28 32 33 29 2c 73 3d 6e 28 31 31 29 2c 61 3d 6e 28 38 29 2c 63 3d 6e 28 31 37 29 2c 75 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 Data Ascii: t(c.call(t)):i(t)&&(o(t)?f:s).test(t))}},function(t,e,n){var r=n(13);t.exports=function(t){return function(e){return null==e?void 0:r(e)[t]}}},function(t,e,n){var r=n(16),o=n(4),i=n(23),s=n(11),a=n(8),c=n(17),u=Object.prototype.hasOwnProperty;t.exports=fu
2024-04-24 02:17:55 UTC	16384	IN	Data Raw: 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 70 61 67 65 76 69 65 77 73 29 2c 74 68 69 73 2e 74 72 61 63 6b 45 76 65 6e 74 28 74 2c 7b 7d 2c 65 2c 6e 29 2c 74 68 69 73 7d 2c 65 2e 67 65 74 54 72 61 63 6b 56 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 49 6e 28 74 68 69 73 2e 63 6c 69 65 6e 74 2e 74 72 61 63 6b 2e 76 61 6c 75 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 26 26 28 74 5b 6e 5d 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 29 7d 29 29 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2e 6e 6f 6f 70 2c 6f 3d 6e 28 35 29 2c 69 3d 6e 28 32 34 29 2c 73 3d 6e 28 31 38 29 3b 74 2e 65 78 70 6f 72 74 Data Ascii: client.track.pageviews),this.trackEvent(t,{},e,n),this},e.getTrackValues=function(){var t={};return o.forIn(this.client.track.values,(function(e,n){e&&(t[n]="function"==typeof e?e():e)})),t}},function(t,e,n){var r=n(0).noop,o=n(5),i=n(24),s=n(18);t.export
2024-04-24 02:17:55 UTC	9769	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 68 5b 74 5d 7c 7c 72 2e 72 65 70 6c 61 63 65 28 22 3a 22 2c 22 22 29 7d 29 29 7d 2c 70 2e 75 74 63 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 35 2a 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 24 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 31 35 29 7d 2c 70 2e 64 69 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 75 2c 66 29 7b 76 61 72 20 6c 2c 64 3d 5f 2e 70 28 75 29 2c 70 3d 62 28 74 29 2c 68 3d 36 65 34 2a 28 70 2e 75 74 63 4f 66 66 73 65 74 28 29 2d 74 68 69 73 2e 75 74 63 4f 66 66 73 65 74 28 29 29 2c 76 3d 74 68 69 73 2d 70 2c 67 3d 5f 2e 6d 28 74 68 69 73 2c 70 29 3b 72 65 74 75 72 6e 20 67 3d 28 6c 3d 7b 7d 2c 6c 5b 63 5d 3d 67 Data Ascii: ction(t,e){return e\|\|h[t]\|\|r.replace(":","")}))},p.utcOffset=function(){return 15-Math.round(this.$d.getTimezoneOffset()/15)},p.diff=function(t,u,f){var l,d=_.p(u),p=b(t),h=6e4(p.utcOffset()-this.utcOffset()),v=this-p,g=_.m(this,p);return g=(l={},l[c]=g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49776	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	2701	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=1&ngs=1&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12692&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1
2024-04-24 02:17:56 UTC	816	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:56 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 6d4b136088d445592377cfca2dcb8944.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: QG-Q4n95H6pTTovzw1OVM3pdf8JmPa8UxBsRpGpzqqwJgGZYKzlmYw==
2024-04-24 02:17:56 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49778	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	2701	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcu=1&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&_fplc=0&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=denied&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13p3tPp2p7&sst.tft=1713925065478&sst.ude=0&sst.gcut=3&ngs=1&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&sid=1713925068&sct=1&seg=0&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=false&ep.consent_marketing=false&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A47.295%2B02%3A00&epn.hit_timestamp_unix=1713925067295&ep.tag_name=GA4%20-%20page_view&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22action_source%22%3A%22web%22%7D&tfd=12693&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1
2024-04-24 02:17:56 UTC	820	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:56 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPLC=T95%2F95B4hRE9E%2FCpRzkT80cqUYET8Wr7rU%2FMLnSRNKjP%2FG%2F9gA%2FERcBDDq%2BzjBzhDpSA9b503xqYYjDBD%2FQ7tSTEG1zy3pujRl608j1JWB7bzFR5JTzNfoeOh84zVQ%3D%3D; Max-Age=72000; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8c2b8d0cfd83d2fc43b3bdc3fb334626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: c925OUH3hG3DxQoI-cMhDIkjvxDJYwZmuEmDRuKpuhsSc1Mc1Ds86g==
2024-04-24 02:17:56 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:17:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49779	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	2007	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074
2024-04-24 02:17:56 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 35 35 36 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":5561.899999999994,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:17:56 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Wed, 24 Apr 2024 02:17:56 GMT ETag: "37-wNUaUMKVL2i9w8tiKiRRSKRW7vY" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DgRL4Sh1CD4wwDvTUWYJPmYu8EHBw98LvR0M4n-U80WTsF1FN8kUXw==
2024-04-24 02:17:56 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 35 35 36 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"FCP","time":5561.899999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49780	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	2007	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074
2024-04-24 02:17:56 UTC	121	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 39 39 36 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":1996.7999999999884,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:17:56 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:17:56 GMT ETag: "39-ELYAn0HeMGpcofItDesIySUiOLY" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 27f8684163b0b232d220b4ced517da20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3DMwPlKEa2ARcktaODs0yzN_YhxZmTP9QCM2TxyxpC0XQeQ-XPXX5g==
2024-04-24 02:17:56 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 31 39 39 36 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 7d Data Ascii: {"status":"ok","metric":"TTFB","time":1996.7999999999884}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49781	151.101.129.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	603	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:56 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:56 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:17:56 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49782	142.250.101.155	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	865	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&gjid=1427716448&_gid=99849118.1713925069&_u=6CDAAUABAAAAICgFKgC~&z=518431591 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:56 UTC	592	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:17:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:56 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49783	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	2865	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925065478&gcs=G111&gcd=13r3vPr2r7&npa=1&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.rnd=740184327.1713925069&sst.gse=1&sst.ngs=1&sst.gcd=13r3vPr2r7&sst.tft=1713925065478&sst.ude=0&ngs=1&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=&ep.hit_timestamp_local=2024-04-24T04%3A17%3A54.196%2B02%3A00&epn.hit_timestamp_unix=1713925074196&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925065478-69-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925065478-69-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=3598&tfd=12727&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3
2024-04-24 02:17:56 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:17:56 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775998; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0a16ecffc1ef99dae63eb63b380e2952.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: pVjc5z_k4JDD8s0MtSK2o1HGqagwVfERo7HWPuURystd8CwjN8Tn0Q==
2024-04-24 02:17:56 UTC	1020	IN	Data Raw: 33 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 38 33 37 32 38 37 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 Data Ascii: 3f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1158372871;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7
2024-04-24 02:17:56 UTC	952	IN	Data Raw: 33 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 31 35 38 33 37 32 38 37 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 64 6f 77 6e 6c 6f 61 64 73 25 32 46 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 25 Data Ascii: 3b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1158372871;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%
2024-04-24 02:17:56 UTC	363	IN	Data Raw: 31 36 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4f 73 45 51 4b 6c 6e 6a 25 32 46 6e 49 7a 77 46 52 65 52 44 50 5a 56 75 4b 71 35 36 39 71 4d 78 5a 4f 63 30 68 6f 4f 78 46 25 32 46 7a 5a 50 55 75 6e 58 53 42 33 46 41 50 30 56 30 70 74 70 52 63 25 32 46 42 25 32 46 56 65 4f 57 48 79 38 55 74 59 4b 72 30 33 73 71 5a 67 41 76 71 77 4b 55 47 66 47 46 76 53 31 6c 25 32 42 37 45 68 62 25 32 42 54 6b 66 4d 70 52 4a 42 6f 74 56 59 74 63 59 34 4b 37 74 7a 4b 73 78 25 32 42 63 49 25 32 42 62 44 6a 4e 6f 57 56 66 72 42 73 72 54 50 50 37 68 70 4e 62 38 4a 54 53 34 6d 5a 51 62 76 67 39 45 58 68 Data Ascii: 164event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=OsEQKlnj%2FnIzwFReRDPZVuKq569qMxZOc0hoOxF%2FzZPUunXSB3FAP0V0ptpRc%2FB%2FVeOWHy8UtYKr03sqZgAvqwKUGfGFvS1l%2B7Ehb%2BTkfMpRJBotVYtcY4K7tzKsx%2BcI%2BbDjNoWVfrBsrTPP7hpNb8JTS4mZQbvg9EXh
2024-04-24 02:17:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49786	151.101.194.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	537	OUT	OPTIONS /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-amp-exp-user Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:56 UTC	733	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: GET,POST,HEAD X-Amzn-Trace-Id: Root=1-66286b71-7040c1ae6872b29f14d87ce4 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:56 GMT Age: 99 X-Served-By: cache-bur-kbur8200123-BUR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713925076.442871,VS0,VE1 Vary: Origin,Origin,Access-Control-Request-Headers,Access-Control-Request-Method cache-control: no-store Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Headers: authorization,x-amp-exp-user Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49784	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	516	OUT	OPTIONS / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: cross-origin-resource-policy Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:56 UTC	303	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:56 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Access-Control-Allow-Headers: cross-origin-resource-policy Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49790	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	1710	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPLC=CRdlHSzeyXKO1vr%2BRvFJve7p7ZQlhQN9XWo7xizD9Z2XHVcRw3QQXNf86zI8WyhEWQUcpDoRfCuWxMbnFqaflxlYKd%2FqQB%2F8nf2a3owtGJEdpXiJ8G8xSMJgYgmE6w%3D%3D; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd
2024-04-24 02:17:57 UTC	743	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 41566 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:17:57 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JakH_rAP-6YX7zwClC4FFlbx2et3EAraZSLX5C706ZYcyfO_nhowhw==
2024-04-24 02:17:57 UTC	7639	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 28 05 00 00 56 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 7e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 e6 10 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 0e 25 00 00 40 40 00 00 01 00 20 00 28 50 00 00 36 52 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: (V h~ (00 (-%@@ (P6R(
2024-04-24 02:17:57 UTC	16384	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii:
2024-04-24 02:17:57 UTC	8192	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii:
2024-04-24 02:17:57 UTC	9351	IN	Data Raw: 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 fc 1a 18 17 47 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 3b 1a 18 17 d1 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 e7 1a 18 17 5c 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 00 1a 18 17 45 1a 18 17 b0 1a 18 17 ea 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff 1a 18 17 ff Data Ascii: G;\E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49785	34.248.204.163	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	374	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	384	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:17:56 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1497 RateLimit-Reset: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 23 Connection: Close
2024-04-24 02:17:57 UTC	23	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4c 4f 47 47 45 44 5f 4f 55 54 22 7d Data Ascii: {"status":"LOGGED_OUT"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49792	151.101.194.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	588	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5880 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286bd5-7ba0aa166a42610a55127543 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 24 Apr 2024 02:17:57 GMT X-Served-By: cache-lax-kwhp1940034-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925077.104864,VS0,VE74 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:17:57 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:17:57 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-24 02:17:57 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-24 02:17:57 UTC	1378	IN	Data Raw: 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 73 75 72 66 61 63 65 2d 61 63 74 69 6f 6e 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 Data Ascii: key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"experimentKey":"exp-1"},"value":"new-transfer-details"},"transfer-details-surface-actions":{"key":"on","value":"on"},"tra
2024-04-24 02:17:57 UTC	368	IN	Data Raw: 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 34 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 74 72 61 63 6b 69 6e Data Ascii: bled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspace-settings-iteration-4":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-trackin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49793	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	1779	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D
2024-04-24 02:17:57 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:57 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VIHPHdHUPy-LirBoitGIS9kc97Xi80QmxxBbP5eYBsK0KZWc504t3w==
2024-04-24 02:17:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49788	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075137 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:17:57 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49789	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075140 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:17:57 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49787	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:56 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075142 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:17:57 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49795	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	401	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fdqrj_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:57 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-24 02:17:57 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49796	142.250.101.156	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	617	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&gjid=1427716448&_gid=99849118.1713925069&_u=6CDAAUABAAAAICgFKgC~&z=518431591 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 02:17:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:17:57 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49794	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	1171	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 34 38 37 65 33 38 61 35 36 39 36 62 66 38 33 63 31 36 61 38 30 33 36 61 38 63 62 66 66 33 36 34 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 38 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 32 Data Ascii: checksum=487e38a5696bf83c16a8036a8cbff364&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925074978%2C%22event_id%22%3A1%2C%22session_id%22%3A1713925074977%2C%22
2024-04-24 02:17:57 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:57 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bd5-58750bea0fabdb312331ec28 Strict-Transport-Security: max-age=15768000
2024-04-24 02:17:57 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49801	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	1055	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=161, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49802	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	1170	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:58 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:17:58 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:17:58 UTC	4	IN	Data Raw: 60 82 0d 0a Data Ascii: `
2024-04-24 02:17:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49803	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	1779	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.0.1713883946204; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; _dd_s=rum=0&expire=1713925974969&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uac12.0.1.1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D
2024-04-24 02:17:58 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:17:58 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fXlvJv_H-peuGfbGO_sDo65XMkuTPUwj39K23wBDKU5bj92REjTbnw==
2024-04-24 02:17:58 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49798	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075142 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	1123	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 34 36 32 30 34 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"1713883946204","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-24 02:17:58 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=9fa523c1-cde1-4389-9254-5e2f71600f62; Path=/; Expires=Fri, 24 Apr 2026 02:17:58 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:58 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49799	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075137 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	1123	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 34 36 32 30 34 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"1713883946204","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-24 02:17:58 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:17:58 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:58 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49800	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:57 UTC	777	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075140 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 1123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:57 UTC	1123	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 37 31 33 38 38 33 39 34 36 32 30 34 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"1713883946204","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_scre
2024-04-24 02:17:58 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=8821d313-a1d7-4dbe-ae71-51edfdc355e2; Path=/; Expires=Fri, 24 Apr 2026 02:17:58 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:58 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49806	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	2084	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b
2024-04-24 02:17:58 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Wed, 17 Apr 2024 00:18:13 GMT Last-Modified: Tue, 16 Apr 2024 23:59:31 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wdZ-u6EDwB9aN4jYBwiNNfqbfgg1YbcmhRTBvUKfI-7KciamMPBlrw== Age: 611986
2024-04-24 02:17:58 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49809	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	821	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:17:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49813	151.101.2.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-66286bd6-0e09b7e95c1f18a528941711 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:17:58 GMT X-Served-By: cache-bur-kbur8200111-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925079.744785,VS0,VE50 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:17:58 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49815	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	858	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074115&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-29-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:17:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:17:58 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49807	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	10723	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 35 39 36 64 34 38 37 36 63 39 63 61 38 36 32 31 63 35 62 38 33 35 35 39 64 37 39 30 36 30 63 62 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 36 35 35 30 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 32 Data Ascii: checksum=596d4876c9ca8621c5b83559d79060cb&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925076550%2C%22event_id%22%3A1%2C%22session_id%22%3A1713925074977%2C%22
2024-04-24 02:17:58 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bd6-144072553ea60e96478909ca Strict-Transport-Security: max-age=15768000
2024-04-24 02:17:58 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49816	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713925046038&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-24 02:17:58 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-24 02:17:58 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-24 02:17:58 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C5754B93CE1544ED8CE92A37629C4946 Ref B: LAX311000109049 Ref C: 2024-04-24T02:17:58Z Date: Wed, 24 Apr 2024 02:17:58 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713925078.1a8f2e8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49812	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:58 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bd6-383fdade18b332667d528109 Strict-Transport-Security: max-age=15768000
2024-04-24 02:17:58 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49811	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:58 UTC	796	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:59 UTC	916	IN	HTTP/1.1 302 Found Server: Server Date: Wed, 24 Apr 2024 02:17:58 GMT Content-Length: 0 Connection: close x-amz-rid: Y3SG4AG0ZMCH75M52X13 Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:17:58 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49821	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	1810	OUT	GET /_next/static/media/core-shape.cde027dc.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b
2024-04-24 02:17:59 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 485 Connection: close Date: Wed, 17 Apr 2024 00:18:13 GMT Last-Modified: Tue, 16 Apr 2024 23:59:31 GMT ETag: "9c5640120e49affc48fe61cda0b5b08d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XHd5QsCnkUexgcmNomNVfxIlxlUqe4VxV5w7rblBSsZW3nzxm8yHYw== Age: 611987
2024-04-24 02:17:59 UTC	485	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 34 33 37 38 20 31 34 2e 35 37 34 43 33 39 2e 39 32 32 39 20 34 2e 36 32 35 39 33 20 33 32 2e 36 34 30 37 20 2d 30 2e 30 37 39 33 37 38 20 32 31 20 30 2e 30 30 31 30 31 32 35 33 43 39 2e 33 35 39 33 20 2d 30 2e 30 37 39 33 37 38 20 32 2e 30 37 38 37 35 20 34 2e 36 32 35 39 33 20 30 2e 35 36 32 31 36 39 20 31 34 2e 35 37 34 43 30 2e 31 39 36 30 39 39 20 31 36 2e 39 37 32 31 20 30 20 31 39 2e 30 30 34 20 30 20 32 31 43 30 20 32 32 2e 39 Data Ascii: <svg width="42" height="42" viewBox="0 0 42 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M41.4378 14.574C39.9229 4.62593 32.6407 -0.079378 21 0.00101253C9.3593 -0.079378 2.07875 4.62593 0.562169 14.574C0.196099 16.9721 0 19.004 0 21C0 22.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49810	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	539	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:59 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:59 GMT Content-Length: 0 Connection: close Server: nginx Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49825	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	464	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive Accept: / Access-Control-Request-Method: OPTIONS Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:17:59 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:17:59 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49818	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075142 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:17:59 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:59 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:59 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49819	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075140 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:17:59 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:59 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:59 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49817	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925075137 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:17:59 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:17:59 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:17:59 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49827	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:00 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:00 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bd8-72580a4b1f21ed6947fbb26d Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:00 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49826	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:17:59 UTC	843	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco\|t
2024-04-24 02:18:00 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: EZ0Z3DWPTJ9QPNZQE7QT Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:00 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:00 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49830	18.154.142.121	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	529	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:00 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 09:04:45 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f3219597d17b6efcbda39f405ca2692a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: QqzQF5jdrlEVg_J_N2A7Xa-F_Ke_f2AaTpebdOX2UnveNZNnSCqdjw== Age: 62016
2024-04-24 02:18:00 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49831	52.85.204.136	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	571	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco\|t
2024-04-24 02:18:00 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3e720c4eaac99cf5867e4a8a49dc59ca.cloudfront.net (CloudFront), 1.1 9c6c1b895f3609e5e2ba2136e9bd23b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX3-C4 Date: Wed, 24 Apr 2024 02:18:00 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: o2Yw0uNmLQJpgS6XjReMbfEW2WJf4O7GtifQsHEBDR11EGg2on3F1g==
2024-04-24 02:18:00 UTC	13289	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49828	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	2078	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b
2024-04-24 02:18:00 UTC	1158	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 41 41 41 41 45 4a 41 41 41 41 41 41 41 41 41 41 41 41 41 2e 4a 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAAAAAEJAAAAAAAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AX
2024-04-24 02:18:00 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:00 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:00 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:00 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49829	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:00 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:00 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49834	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	1055	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3400, tp=-1, tpl=-1, uplat=0, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49832	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	621	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:01 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AB52GZNT4J8E5HC95AGT Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49835	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:00 UTC	1147	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:01 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:01 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:01 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:01 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49837	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	1631	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	2373	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14811872136805030734"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14811872136805030734","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"14811872136805030734","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"14811872136805030734","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"14811872136805030734","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 02:33:01 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49836	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	1549	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	1643	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 02:33:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49839	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:01 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:01 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: PNKCZYG2X5BDHEHEC4QV Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:01 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49840	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:01 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:01 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 972BFQ1DQJKYRC07J9XW Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:01 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49841	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	588	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Wed, 24 Apr 2024 02:18:03 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f3bb78305303d79dc5d570d560cac67a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 8booIKnjgpIQ9yxmUqKEO6V8aDriZ2j_0mbUVv3FP_G918TpfXBNSg==
2024-04-24 02:18:02 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49845	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	821	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49844	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:18:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0f8dee61323d89c01 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:18:01 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49842	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	1131	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&upid=re36kbe&upv=1.1.0&gdpr=1&gdpr_consent=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:01 UTC	136	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:01 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49847	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	858	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05&rl=&if=false&ts=1713925074195&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925072200&coo=false&eid=1713925065478-69-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:02 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49838	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	2119	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 5912 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
2024-04-24 02:18:01 UTC	5912	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 6f 6f 6b 69 65 5f 77 61 6c 6c 22 2c 22 73 65 5f 61 63 22 3a 22 61 63 63 65 70 74 5f 74 72 61 63 6b 65 72 73 22 2c 22 65 69 64 22 3a 22 39 66 30 36 38 62 61 61 2d 63 34 35 66 2d 34 62 63 63 2d 62 65 32 63 2d 36 62 61 65 62 37 63 37 33 34 37 35 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"cookie_wall","se_ac":"accept_trackers","eid":"9f068baa-c45f-4bcc-be2c-6baeb7c73475","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cooki
2024-04-24 02:18:02 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:02 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:02 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:02 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49843	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:01 UTC	1848	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
2024-04-24 02:18:02 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:02 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49849	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:02 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49850	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	1394	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1159826221;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05;dma=1;dma_cps=sypham;npa=1;gcs=G111;gcd=13r3vPr2r7;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-04-24 02:18:02 UTC	2542	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14811872136805030734"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14811872136805030734","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"14811872136805030734","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"14811872136805030734","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"14811872136805030734","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; expires=Fri, 24-Apr-2026 02:18:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49852	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:02 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:02 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 8NYMB1S9NDQ942T53HAS Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:02 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49851	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:02 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:02 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 0H6R1JXGSB24ZSRMH27A Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:02 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49853	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	710	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:02 GMT x-amzn-RequestId: 4ad1b07b-edaf-41fe-8724-66302b04289d Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 48dff86338c4d757c3f0caaf725b5bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: aqdUH8MFWhwQHn2YLu2i8meE2L3y3pLnn7Ck7GwgHq9cLPRXXEUu4w==
2024-04-24 02:18:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49854	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	692	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:02 GMT x-amzn-RequestId: ba797ebb-7d06-4dc4-b954-fe467d6fae3e Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 48dff86338c4d757c3f0caaf725b5bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: bTqc3F7hM9lxy155_FOZjjYjMDgwPmzc_UuwLGfmtaLoDNQk9yNjig==
2024-04-24 02:18:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49855	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	600	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:02 UTC	692	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Tue, 23 Apr 2024 03:14:44 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 c336b36aafb14d41a21b17f8933d9ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 7xmHrnInc-WGoM9ArqiRE5gxpQ2RIpWHnbPfE0zCedPz5m8_5gIlGg== Age: 82999
2024-04-24 02:18:02 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-24 02:18:02 UTC	16384	IN	Data Raw: 2c 67 72 69 64 52 6f 77 53 70 61 6e 3a 21 30 2c 67 72 69 64 52 6f 77 53 74 61 72 74 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 70 61 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 53 74 61 72 74 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 6c 69 6e 65 43 6c 61 6d 70 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 74 61 62 53 69 7a 65 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 Data Ascii: ,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 29 29 7d 76 61 72 20 51 6e 3d 6e 75 6c 6c 2c 47 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4b 6e 28 65 29 7b 7a 72 28 65 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 71 6e 28 65 29 7b 69 66 28 47 28 77 61 28 65 29 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 59 6e 28 65 2c 74 29 7b 69 66 28 22 63 68 61 6e 67 65 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 7d 76 61 72 20 58 6e 3d 21 31 3b 69 66 28 63 29 7b 76 61 72 20 5a 6e 3b 69 66 28 63 29 7b 76 61 72 20 4a 6e 3d 22 6f 6e 69 6e 70 75 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 28 21 4a 6e 29 7b 76 61 72 20 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 6e 69 6e 70 75 74 22 2c 22 72 65 Data Ascii: ))}var Qn=null,Gn=null;function Kn(e){zr(e,0)}function qn(e){if(G(wa(e)))return e}function Yn(e,t){if("change"===e)return t}var Xn=!1;if(c){var Zn;if(c){var Jn="oninput"in document;if(!Jn){var er=document.createElement("div");er.setAttribute("oninput","re
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 61 2c 6e 29 7d 76 61 72 20 7a 61 3d 6e 75 6c 6c 2c 46 61 3d 21 31 2c 55 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 56 61 28 65 29 7b 6e 75 6c 6c 3d 3d 3d 7a 61 3f 7a 61 3d 5b 65 5d 3a 7a 61 2e 70 75 73 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 69 66 28 21 55 61 26 26 6e 75 6c 6c 21 3d 3d 7a 61 29 7b 55 61 3d 21 30 3b 76 61 72 20 65 3d 30 2c 74 3d 62 74 3b 74 72 79 7b 76 61 72 20 6e 3d 7a 61 3b 66 6f 72 28 62 74 3d 31 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 64 6f 7b 72 3d 72 28 21 30 29 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 72 29 7d 7a 61 3d 6e 75 6c 6c 2c 46 61 3d 21 31 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 6e 75 6c 6c 21 3d 3d 7a 61 26 26 28 7a 61 3d 7a 61 2e 73 6c 69 63 65 28 65 2b Data Ascii: a,n)}var za=null,Fa=!1,Ua=!1;function Va(e){null===za?za=[e]:za.push(e)}function $a(){if(!Ua&&null!==za){Ua=!0;var e=0,t=bt;try{var n=za;for(bt=1;e<n.length;e++){var r=n[e];do{r=r(!0)}while(null!==r)}za=null,Fa=!1}catch(a){throw null!==za&&(za=za.slice(e+
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 2c 64 69 2e 63 75 72 72 65 6e 74 3d 73 6c 2c 65 3d 6e 28 72 2c 61 29 7d 77 68 69 6c 65 28 62 69 29 7d 69 66 28 64 69 2e 63 75 72 72 65 6e 74 3d 69 6c 2c 74 3d 6e 75 6c 6c 21 3d 3d 76 69 26 26 6e 75 6c 6c 21 3d 3d 76 69 2e 6e 65 78 74 2c 68 69 3d 30 2c 67 69 3d 76 69 3d 6d 69 3d 6e 75 6c 6c 2c 79 69 3d 21 31 2c 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 30 30 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 28 29 7b 76 61 72 20 65 3d 30 21 3d 3d 77 69 3b 72 65 74 75 72 6e 20 77 69 3d 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 54 69 28 29 7b 76 61 72 20 65 3d 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 53 74 61 74 65 3a 6e 75 6c 6c 2c Data Ascii: =null,t.updateQueue=null,di.current=sl,e=n(r,a)}while(bi)}if(di.current=il,t=null!==vi&&null!==vi.next,hi=0,gi=vi=mi=null,yi=!1,t)throw Error(o(300));return e}function _i(){var e=0!==wi;return wi=0,e}function Ti(){var e={memoizedState:null,baseState:null,
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 63 61 73 65 20 36 34 3a 63 61 73 65 20 31 32 38 3a 63 61 73 65 20 32 35 36 3a 63 61 73 65 20 35 31 32 3a 63 61 73 65 20 31 30 32 34 3a 63 61 73 65 20 32 30 34 38 3a 63 61 73 65 20 34 30 39 36 3a 63 61 73 65 20 38 31 39 32 3a 63 61 73 65 20 31 36 33 38 34 3a 63 61 73 65 20 33 32 37 36 38 3a 63 61 73 65 20 36 35 35 33 36 3a 63 61 73 65 20 31 33 31 30 37 32 3a 63 61 73 65 20 32 36 32 31 34 34 3a 63 61 73 65 20 35 32 34 32 38 38 3a 63 61 73 65 20 31 30 34 38 35 37 36 3a 63 61 73 65 20 32 30 39 37 31 35 32 3a 63 61 73 65 20 34 31 39 34 33 30 34 3a 63 61 73 65 20 38 33 38 38 36 30 38 3a 63 61 73 65 20 31 36 37 37 37 32 31 36 3a 63 61 73 65 20 33 33 35 35 34 34 33 32 3a 63 61 73 65 20 36 37 31 30 38 38 36 34 3a 61 3d 33 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 Data Ascii: case 64:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:case 4194304:case 8388608:case 16777216:case 33554432:case 67108864:a=32;break;case 5
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 70 75 28 65 2c 74 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 75 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 7b 65 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 75 6c 6c 3d 3d 3d 6e 26 26 28 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 65 77 20 5a 6c 29 2c 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 4e 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 74 29 3b 6e 2e 68 61 73 28 74 29 7c 7c 28 6e 2e 61 64 64 28 74 29 2c 74 2e 74 68 65 6e 28 72 2c 72 29 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 75 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: e,t,n);break;default:pu(e,t,n)}}function mu(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new Zl),t.forEach((function(t){var r=Ns.bind(null,e,t);n.has(t)\|\|(n.add(t),t.then(r,r))}))}}function vu(e,t){var
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 50 75 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 6e 75 6c 6c 2c 62 74 3d 31 36 3e 65 3f 31 36 3a 65 2c 6e 75 6c 6c 3d 3d 3d 71 75 29 76 61 72 20 72 3d 21 31 3b 65 6c 73 65 7b 69 66 28 65 3d 71 75 2c 71 75 3d 6e 75 6c 6c 2c 59 75 3d 30 2c 36 26 4e 75 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 33 31 29 29 3b 76 61 72 20 61 3d 4e 75 3b 66 6f 72 28 4e 75 7c 3d 34 2c 4a 6c 3d 65 2e 63 75 72 72 65 6e 74 3b 6e 75 6c 6c 21 3d 3d 4a 6c 3b 29 7b 76 61 72 20 69 3d 4a 6c 2c 6c 3d 69 2e 63 68 69 6c 64 3b 69 66 28 31 36 26 4a 6c 2e 66 6c 61 67 73 29 7b 76 61 72 20 75 3d 69 2e 64 65 6c 65 74 69 6f 6e 73 3b 69 66 28 6e 75 6c 6c 21 3d 3d 75 29 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 75 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 73 5d 3b 66 6f 72 28 Data Ascii: Pu.transition=null,bt=16>e?16:e,null===qu)var r=!1;else{if(e=qu,qu=null,Yu=0,6&Nu)throw Error(o(331));var a=Nu;for(Nu\|=4,Jl=e.current;null!==Jl;){var i=Jl,l=i.child;if(16&Jl.flags){var u=i.deletions;if(null!==u){for(var s=0;s<u.length;s++){var c=u[s];for(
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 64 55 70 64 61 74 65 73 3d 63 73 2c 74 2e 75 6e 73 74 61 62 6c 65 5f 72 65 6e 64 65 72 53 75 62 74 72 65 65 49 6e 74 6f 43 6f 6e 74 61 69 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 5a 73 28 6e 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 30 30 29 29 3b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 38 29 29 3b 72 65 74 75 72 6e 20 65 63 28 65 2c 74 2c 6e 2c 21 31 2c 72 29 7d 2c 74 2e 76 65 72 73 69 6f 6e 3d 22 31 38 2e 32 2e 30 2d 6e 65 78 74 2d 39 65 33 62 37 37 32 62 38 2d 32 30 32 32 30 36 30 38 22 7d 2c 37 30 32 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: dUpdates=cs,t.unstable_renderSubtreeIntoContainer=function(e,t,n,r){if(!Zs(n))throw Error(o(200));if(null==e\|\|void 0===e._reactInternals)throw Error(o(38));return ec(e,t,n,!1,r)},t.version="18.2.0-next-9e3b772b8-20220608"},7029:(e,t,n)=>{"use strict";var
2024-04-24 02:18:03 UTC	16384	IN	Data Raw: 3b 69 66 28 61 3d 3d 3d 79 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6f 29 74 68 72 6f 77 20 69 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 72 2e 6d 65 74 68 6f 64 3d 6f 2c 72 2e 61 72 67 3d 69 3b 3b 29 7b 76 61 72 20 6c 3d 72 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 6c 29 7b 76 61 72 20 75 3d 52 28 6c 2c 72 29 3b 69 66 28 75 29 7b 69 66 28 75 3d 3d 3d 62 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 75 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 72 2e 6d 65 74 68 6f 64 29 72 2e 73 65 6e 74 3d 72 2e 5f 73 65 6e 74 3d 72 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 72 2e 6d 65 74 68 6f 64 29 7b 69 66 28 61 3d 3d 3d 6d 29 74 68 72 6f 77 20 61 3d 79 2c 72 2e 61 72 67 3b 72 2e 64 69 73 70 Data Ascii: ;if(a===y){if("throw"===o)throw i;return{value:t,done:!0}}for(r.method=o,r.arg=i;;){var l=r.delegate;if(l){var u=R(l,r);if(u){if(u===b)continue;return u}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if(a===m)throw a=y,r.arg;r.disp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49857	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	386	OUT	GET /apps/desktop-wallpaper/asset-manifest.json HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	491	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 321 Connection: close Date: Wed, 24 Apr 2024 02:18:04 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT ETag: "cac32d9560401b59bcb621f1346a1691" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 610506c6c40a8c3dbab9b577acc13892.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: geF3x0xRwzShtwNvL5ZtUpq4m9583Z0rJsSP2SGT21NGENI13JSOaw==
2024-04-24 02:18:03 UTC	321	IN	Data Raw: 7b 0a 20 20 22 66 69 6c 65 73 22 3a 20 7b 0a 20 20 20 20 22 6d 61 69 6e 2e 6a 73 22 3a 20 22 30 2e 31 2e 34 37 2f 6d 61 69 6e 2e 37 35 33 32 64 66 30 65 64 37 63 64 62 36 34 66 2e 6a 73 22 2c 0a 20 20 20 20 22 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 3a 20 22 30 2e 31 2e 34 37 2f 33 72 64 70 61 72 74 79 6c 69 63 65 6e 73 65 73 2e 74 78 74 22 2c 0a 20 20 20 20 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3a 20 22 30 2e 31 2e 34 37 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 0a 20 20 20 20 22 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 3a 20 22 30 2e 31 2e 34 37 2f 70 61 63 6b 61 67 65 2e 6a 73 6f 6e 22 2c 0a 20 20 20 20 22 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 3a 20 22 30 2e 31 2e 34 37 2f 61 73 73 65 74 73 2f 2e 67 69 74 6b 65 65 70 22 0a 20 Data Ascii: { "files": { "main.js": "0.1.47/main.7532df0ed7cdb64f.js", "3rdpartylicenses.txt": "0.1.47/3rdpartylicenses.txt", "index.html": "0.1.47/index.html", "package.json": "0.1.47/package.json", "assets/.gitkeep": "0.1.47/assets/.gitkeep"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49856	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:02 UTC	1848	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
2024-04-24 02:18:03 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:03 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49859	146.75.92.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	533	OUT	GET /ct/lib/main.edb6538d.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23080 ETag: "43ca97012b8f925b548ea31836a36cea" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Wed, 24 Apr 2024 02:18:03 GMT
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: 1f 8b 08 08 fe cb 26 66 00 03 6d 61 69 6e 2e 65 64 62 36 35 33 38 64 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 48 77 33 a0 0f 5b 5b ac dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 2c 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 84 3e 6c a7 ba b1 97 d9 42 35 f3 69 c6 44 91 71 3b 39 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 e7 4d 9a 89 3c 7c d8 6e 5d 06 8f 86 f3 78 bd b6 f9 b0 6c 77 b9 5b 5f 67 04 6e d6 f4 c0 73 39 21 ba 75 9b 0d af 29 73 b3 e1 9c 26 f0 73 41 2b 64 02 5e 06 74 d9 30 c5 4b b2 d9 7c ba fc 83 cd c5 70 c1 96 09 67 9f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: &fmain.edb6538d.js\ob%8,Hw3[[ Pl:Py,7>;%4D?C`YHRn3pg>lB5iDq;9)^$:<]M<\|n]xlw[_gns9!u)s&sA+d^t0K\|pge^v{`fY\|f!b"d[zA<XWo/
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 3a d3 74 3c 63 dd 0e fc e9 94 e4 77 89 98 63 48 f2 30 8f 73 66 c5 f9 3c 49 ac 50 5e af 41 16 b9 5f de 40 d4 1a 67 f7 56 a8 e3 d5 a9 6c 95 fa 1c ea cb 41 79 dd 53 be 44 f7 fd 6a d7 78 54 d7 79 1e e8 b7 e6 f9 20 a8 29 f8 13 d8 4f d4 f4 d4 6d 49 26 78 5d 0e ba 62 7f d6 38 de bd 7b e7 ab e6 4b f8 31 19 57 4f fe 30 46 2d 23 e5 50 7a 80 16 54 9c da c0 37 8e d2 f3 73 7a c7 b2 1f 81 94 4d c0 ca c1 a6 a5 96 97 6a 9b 26 d9 07 26 0b 18 08 14 61 e3 52 f9 4e be d9 28 d5 e4 e4 1d 06 38 5a 6d 4a 17 61 c9 fe ac ee cf 36 1b 66 76 9c 19 d7 21 23 11 f5 76 5e 85 e9 42 5b 44 6d ae ae ea c7 b8 ae 82 0a f0 4d 72 51 ea a5 15 e5 d2 4a b6 21 f4 94 ca d8 Data Ascii: Tk7N0".SBVQGm:t<cwcH0sf<IP^A_@gVlAySDjxTy )OmI&x]b8{K1WO0F-#PzT7szMj&&aRN(8ZmJa6fv!#v^B[DmMrQJ!
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1b 2a 4f 40 57 ee b7 e1 97 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 e5 f3 e9 8f 5f 2f 7e 39 f9 9f 8b f7 bf 7f 3d fd 42 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fb 25 fe 53 75 c1 c4 05 b0 ec 26 4d d7 5f 92 7f 33 7a 0c 02 0e f7 ab d6 ed 4f 7b 12 d4 15 5b 57 85 44 fb 15 40 9d 9e 97 46 48 35 6e Data Ascii: Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~_/~9=BvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%Su&M_3zO{[WD@FH5n
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 57 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d f9 f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 6b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 c4 Data Ascii: 9~[<^;\EW\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: 61 7b 55 de 8c 92 01 9b d5 b7 0e f2 6f c0 cc 02 3e 56 ff f1 8f ac 44 49 79 4e 2c 1d 60 de 8f 66 53 70 67 04 4f 80 f3 32 0f 9a 39 ec bc aa 16 a7 91 cf 46 f2 44 62 d7 57 c9 ea b8 98 ce be b7 91 69 fd ce 26 67 42 7f 5e 23 a7 57 65 77 99 cb 9c 14 e4 a4 fe bb 07 4d d9 c3 83 9e ed b2 b7 ff b9 7a f9 c7 1e da ff 26 06 7e a2 c5 b1 ba dd ac 77 93 f0 ff d8 bb d6 ae b6 91 26 fd 57 12 9f 84 57 1a c9 46 ad bb 00 0d 2f 01 42 48 b8 ad 81 64 26 84 70 14 23 40 09 48 8e 2d 93 30 d8 ff 7d 9f ea 6e 49 ed 0b 73 f9 b0 7b ce be 67 3f 24 48 7d ad ae ae ae 7a 5a dd 55 9e bf 75 ca 67 21 9d 29 67 32 45 1e c5 ad 0e d5 1f c2 d2 f5 35 00 04 ae c1 06 d5 05 10 e1 bc 33 e7 ea 9b 2d 3e cc ab 03 74 2c 88 bd b1 68 48 68 fa f9 94 0b 7f f6 c4 dd 96 c5 a7 84 dc 69 66 ce 39 8b 7f da e7 7e 59 bc Data Ascii: a{Uo>VDIyN,`fSpgO29FDbWi&gB^#WewMz&~w&WWF/BHd&p#@H-0}nIs{g?$H}zZUug!)g2E53->t,hHhif9~Y
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: c6 bb 7a 5e e2 29 1c 33 7f ec d8 3a 1e 37 6f 93 bb 7e 7a a9 8b 16 5e 2c 77 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 d2 dc 75 bd 4c 05 dd a3 41 fa 2c 2f f2 36 97 20 18 98 fa 8e 5b e7 53 be 0b de 0f 2e 29 c4 53 c1 57 93 2c 62 f2 0a 22 42 a3 88 44 26 7d d8 6e 92 7b da e2 cc 09 a9 a6 3f bb 4b cb 9b e2 92 22 96 69 b3 51 06 f5 47 e9 6a 97 f3 0b bb 95 3d 9f fe b8 a0 68 6f 8b 7c d7 30 be 2a d4 23 0f a7 95 92 73 ff 59 2a e2 80 34 d7 5d 04 7c 78 9c ac 0e 3a 7b bb c7 27 f1 e3 eb a3 8b bd c3 cd 8d bd 8b e3 93 c3 ee c6 ce f6 ca 23 c0 37 46 bb c2 2c cb 1c 0d b2 95 d6 55 ff 82 c2 5c dd 1e 83 f2 e4 3a 6d 4d cc ad ed ee ee 7b 6c 9d b7 8f 76 df cd 97 ef 67 79 1b 3c ca ee d3 cb 76 da cf be a1 c2 f1 66 77 e3 68 fb 82 7a dc 3e d8 ee 1e 2f ae 34 ec 0d 92 7e da 26 Data Ascii: z^)3:7o~z^,wJ,vG+$_5&huLA,/6 [S.)SW,b"BD&}n{?K"iQGj=ho\|0#sY4]\|x:{'#7F,U\:mM{lvgy<vfwhz>/4~&
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: 71 1c 1a 69 1c f8 5c 1c 75 b7 5f ef fe 66 b4 b6 7f 92 37 3e 90 dc bf 5e 0e ff 25 57 6e f2 ec e5 d0 7c f6 65 54 3e bb a2 13 64 9e d5 e2 31 d5 72 de 37 30 8d 10 af d9 70 02 f3 71 8a ff 3c fe 5c 5a 09 43 16 17 9d 13 8d 16 a3 be 9a 57 d1 dd aa 19 cd 6b cd 4e 65 38 05 27 0b c5 bf 0a 8f d3 e2 da ba 8c 95 30 b2 fa 62 4e 8e c7 23 a1 2a c9 d6 0e 9b c7 ab ea 71 bd 5c a1 f8 ae 3a e6 e9 26 b1 3d 1f 62 28 be e8 91 ae 17 1f 3c 45 e0 01 4e 16 16 d5 1b f0 e6 4f 96 68 49 bf 0d 51 74 b8 2b 67 d1 39 20 83 cf 43 1e 51 ed af 8b 2b 94 d2 d9 95 7f 7e 54 bd be b5 d6 72 4b a7 0b f9 55 03 07 0b 1a 20 36 90 1d 12 21 11 7a 3c a6 5c 3d 01 eb 25 d6 5b 5d fd db a2 fe 6f 2a 4e a8 90 ae 50 20 5d 01 c1 18 a9 9f da f3 2a a0 c3 48 63 a4 17 46 1a 56 f8 43 7c c6 18 f3 1d cf 76 ad 90 4e d4 22 Data Ascii: qi\u_f7>^%Wn\|eT>d1r70pq<\ZCWkNe8'0bN#q\:&=b(<ENOhIQt+g9 CQ+~TrKU 6!z<\=%[]oNP ]*HcFVC\|vN"
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: 56 1a b5 02 3b 42 0f 6d 31 1b 0a 5d 41 20 20 d2 83 f9 04 23 a6 c0 08 f8 10 a1 08 d9 fa 06 97 60 4e 23 d8 6c 87 c8 6a 20 4a e0 fb 01 71 d8 57 c1 0a d0 30 2c b7 1b 92 d5 54 70 0b b0 02 ac 17 e6 4b 85 30 c8 76 01 06 00 33 54 34 63 bb 3e 61 00 3e 88 06 d8 04 5e e8 00 8e 84 2a c6 61 3e 2a 04 91 e3 2b 68 87 31 cc 44 00 62 5c 15 f8 78 10 16 97 2e ab 4d 61 20 0f 18 c2 82 64 7a 2a 1c 22 be 87 d4 87 a3 22 23 cc 01 1a 0b 30 77 2a 48 82 c5 75 69 da 48 f4 1a bc c4 20 1e 81 17 41 ae 54 e8 84 a1 5a 01 a6 6e 0a 44 81 1a 2b f4 61 6c ad 29 3c c5 88 1b 30 ed ce 14 b4 f2 20 d1 1e 56 47 a0 a2 2c 66 f9 e8 da a2 a5 3a 85 b7 c8 aa 13 b4 52 a0 17 73 1d 1b 6b 16 44 a8 28 8c b9 3e 50 05 c3 9c 29 80 2c f4 b0 6a 22 30 54 81 66 58 51 00 0a 98 08 5b 41 69 98 5e 90 88 d5 e3 29 80 0d 65 Data Ascii: V;Bm1]A #`N#lj JqW0,TpK0v3T4c>a>^a>+h1Db\x.Ma dz""#0wHuiH ATZnD+al)<0 VG,f:RskD(>P),j"0TfXQ[Ai^)e
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: c5 65 9d fd bb c8 fe dd 18 55 d9 d0 1f f7 75 f6 77 91 fd dd 48 aa 6c a8 94 87 3a fb a3 c8 fe 68 0c ab 6c 68 99 1f 75 f6 07 91 fd c1 b8 aa b2 a1 78 48 7a fe 62 ff 9f c9 fd ff d4 47 ba b2 8e 02 38 b3 af 26 d9 ce 66 ef 03 a7 d0 50 f5 09 92 26 f5 b3 64 2d ed da 35 a9 a7 2b 7e 86 75 da fb 4a 16 c4 c6 5f 93 aa bb 62 1d df d9 6b 52 89 57 0c 73 ec 3a f1 7b 25 0e 80 76 75 e2 c7 4a 1e 4c b7 e9 e8 43 25 10 f4 5d 91 a2 12 fd b3 6f 02 cd 19 38 ff 35 9e 45 f7 06 7a 83 87 7e 59 2c 2d 89 bf 74 9a d1 e5 f7 94 de d3 51 fe f0 a9 74 f1 8b e5 22 8f ff 3e d4 7c c3 77 c3 4d d9 f4 82 3b 17 f2 84 b2 2a 33 df ed 53 39 a2 e3 2a 57 5f 1d ac 6b e9 dc af 89 f0 8f 31 73 8e 09 4d 78 3b fa d5 f7 74 c2 e3 bd aa 78 f2 89 5a f5 01 a8 29 02 86 33 7f 35 37 0c dd 8a 63 cd 59 12 01 a5 1b df 62 Data Ascii: eUuwHl:hlhuxHzbG8&fP&d-5+~uJ_bkRWs:{%vuJLC%]o85Ez~Y,-tQt">\|wM;3S9W_k1sMx;txZ)357cYb
2024-04-24 02:18:03 UTC	1378	IN	Data Raw: c7 74 2e 57 75 21 41 15 ed 08 6c 13 b1 84 03 8f 7c a3 b2 a9 5a 58 02 81 4e 9c 2c 32 d1 97 a1 0a f8 2c 8c a7 03 66 a4 e0 1c 02 99 d5 12 e3 28 4f c2 e7 5a be 22 b1 cc 07 97 44 5c 46 35 e5 a2 9e bf f6 71 43 39 d5 43 c2 20 22 78 f4 57 09 59 94 31 ba ff f0 dc 77 0b 98 b2 52 4f 11 bf f2 ce 01 5f 60 de 7e 85 12 b0 58 df fa 8f 07 7f da fe ea e1 ce f9 ee f9 a3 a0 7b fe d7 bf dd ac d6 ff 3d d8 f9 af 7e b8 fb e5 3c 3a 87 41 fb b9 5f be 78 3b 28 7d 4d a5 5d 7f c7 7b c4 3e cb 7a f6 76 bf 6b 9d ef ee 9c bb e7 de f9 a3 c1 c3 07 8f d8 22 4f 3f df 6d c9 84 61 5e 62 46 5f f2 f3 9b 9e cb 44 fa 15 04 1f 3f 0e af e7 d9 6a 31 4f c5 70 91 d1 a9 0d 53 4e f9 47 68 2b 5d 4c 76 81 e8 77 b1 88 de ca c5 f3 39 c1 50 0c 55 7e a3 8c 3d 20 1f 1a 17 1c ca b6 b7 6d b7 32 c2 6f d4 67 22 1b Data Ascii: t.Wu!Al\|ZXN,2,f(OZ"D\F5qC9C "xWY1wRO_`~X{=~<:A_x;(}M]{>zvk"O?ma^bF_D?j1OpSNGh+]Lvw9PU~= m2og"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49860	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	2286	OUT	GET /_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDmuhUhnRUorH8lURh0lc9SToQ0m%2FU5FAX%2Bpv4UI%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
2024-04-24 02:18:03 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 02:18:03 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 4852bd34ee0cb10ece7fb6301e5074c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: kY7TABkToxmwXdiO_XK_nKCXNZvxYpAEbWAwV9bHqeDQi27mKVtMJA==
2024-04-24 02:18:03 UTC	54	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=
2024-04-24 02:18:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49865	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074200 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:03 GMT x-amzn-RequestId: ec8f7d38-b682-4819-a951-80dfda5da2ca X-Cache: Miss from cloudfront Via: 1.1 cfd5acc340687606c6a8d56bb1560902.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: LB5s1fZ4ySftFMeyzYg7aZ49k6Q-d9vEztS4QRSSe6G5Hvp1NHA2Cw==
2024-04-24 02:18:03 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49864	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925074176 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:03 GMT x-amzn-RequestId: 47bc7c02-ba83-40c4-a51a-1e2c7167d35e X-Cache: Miss from cloudfront Via: 1.1 48dff86338c4d757c3f0caaf725b5bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: VSBkcGQx8mq4LLTvhLUuPZcW0I7UBsTC3C-EizOXKDMOARfJmQDqZQ==
2024-04-24 02:18:03 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49862	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	909	OUT	GET /rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:03 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49863	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	909	OUT	GET /rp.gif?ts=1713925075022&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:03 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:03 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49867	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	398	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	527	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 222391 Connection: close Date: Tue, 23 Apr 2024 15:09:30 GMT Last-Modified: Wed, 17 Apr 2024 14:18:33 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c835b4ab9d422bca46b885db5c34720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: mfoNlxzdz87b-TibuWK0PwUh4Ey1sg2XOnk4BcJ75WV-ns-Q_bKfIw== Age: 40113
2024-04-24 02:18:04 UTC	15857	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 33 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 30 31 29 2c 61 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 32 36 30 39 29 2c 69 3d 6e 2e 6e 28 6f 29 28 29 28 61 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 63 72 65 61 74 69 76 65 2d 69 66 72 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: (()=>{var e={9390:(e,t,n)=>{"use strict";n.d(t,{Z:()=>l});var r=n(9601),a=n.n(r),o=n(2609),i=n.n(o)()(a());i.push([e.id,'.creative-iframe{background-color:#000;overflow:hidden;position:absolute;top:0;left:0;width:100%;height:100%;border:0;margin:0;padding
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 28 65 2c 74 29 7d 29 29 7d 3a 63 65 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 29 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 66 28 6e 26 26 6e 3d 3d 3d 65 2e 6c 61 73 74 43 68 69 6c 64 26 26 33 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6e 2e 6e 6f 64 65 56 61 6c 75 65 3d 74 29 7d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 7d 76 61 72 20 70 65 3d 7b 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e Data Ascii: xecUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ce(e,t)}))}:ce);function de(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var pe={animationIteration
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 66 6f 63 75 73 6f 75 74 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 65 3d 65 2e 64 65 74 61 69 6c 29 26 26 22 64 61 74 61 22 69 6e 20 65 3f 65 2e 64 61 74 61 3a 6e 75 6c 6c 7d 76 61 72 20 24 6e 3d 21 31 3b 76 61 72 20 42 6e 3d 7b 63 6f 6c 6f 72 3a 21 30 2c 64 61 74 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 2c 65 6d 61 69 6c 3a 21 30 2c 6d 6f 6e 74 68 3a 21 30 2c 6e 75 6d 62 65 72 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 72 61 6e 67 65 3a 21 30 2c 73 65 61 72 63 68 3a 21 30 2c Data Ascii: e"mousedown":case"focusout":return!0;default:return!1}}function Vn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var $n=!1;var Bn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 36 38 29 29 3b 54 61 28 50 61 2c 74 29 2c 54 61 28 4e 61 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 74 3d 74 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 72 3d 72 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 29 69 66 28 21 28 61 20 69 6e 20 74 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 30 38 2c 42 28 65 29 7c 7c 22 55 6e 6b 6e 6f 77 6e 22 2c 61 29 29 3b 72 65 74 75 72 6e 20 44 28 7b 7d 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 61 28 65 29 7b 72 65 74 75 72 6e Data Ascii: 68));Ta(Pa,t),Ta(Na,n)}function Ma(e,t,n){var r=e.stateNode;if(t=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var a in r=r.getChildContext())if(!(a in t))throw Error(o(108,B(e)\|\|"Unknown",a));return D({},n,r)}function ja(e){return
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 74 68 3b 65 2b 2b 29 63 69 5b 65 5d 2e 5f 77 6f 72 6b 49 6e 50 72 6f 67 72 65 73 73 56 65 72 73 69 6f 6e 50 72 69 6d 61 72 79 3d 6e 75 6c 6c 3b 63 69 2e 6c 65 6e 67 74 68 3d 30 7d 76 61 72 20 64 69 3d 77 2e 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 2c 70 69 3d 77 2e 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 2c 68 69 3d 30 2c 6d 69 3d 6e 75 6c 6c 2c 76 69 3d 6e 75 6c 6c 2c 67 69 3d 6e 75 6c 6c 2c 79 69 3d 21 31 2c 62 69 3d 21 31 2c 77 69 3d 30 2c 45 69 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 78 69 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 32 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 53 69 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 30 Data Ascii: th;e++)ci[e]._workInProgressVersionPrimary=null;ci.length=0}var di=w.ReactCurrentDispatcher,pi=w.ReactCurrentBatchConfig,hi=0,mi=null,vi=null,gi=null,yi=!1,bi=!1,wi=0,Ei=0;function xi(){throw Error(o(321))}function Si(e,t){if(null===t)return!1;for(var n=0
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 61 74 65 3f 28 74 2e 63 68 69 6c 64 3d 65 2e 63 68 69 6c 64 2c 74 2e 66 6c 61 67 73 7c 3d 31 32 38 2c 6e 75 6c 6c 29 3a 28 69 3d 72 2e 66 61 6c 6c 62 61 63 6b 2c 61 3d 74 2e 6d 6f 64 65 2c 72 3d 44 73 28 7b 6d 6f 64 65 3a 22 76 69 73 69 62 6c 65 22 2c 63 68 69 6c 64 72 65 6e 3a 72 2e 63 68 69 6c 64 72 65 6e 7d 2c 61 2c 30 2c 6e 75 6c 6c 29 2c 28 69 3d 6a 73 28 69 2c 61 2c 6c 2c 6e 75 6c 6c 29 29 2e 66 6c 61 67 73 7c 3d 32 2c 72 2e 72 65 74 75 72 6e 3d 74 2c 69 2e 72 65 74 75 72 6e 3d 74 2c 72 2e 73 69 62 6c 69 6e 67 3d 69 2c 74 2e 63 68 69 6c 64 3d 72 2c 31 26 74 2e 6d 6f 64 65 26 26 58 6f 28 74 2c 65 2e 63 68 69 6c 64 2c 6e 75 6c 6c 2c 6c 29 2c 74 2e 63 68 69 6c 64 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 44 6c 28 6c 29 2c 74 2e 6d 65 6d 6f 69 7a 65 Data Ascii: ate?(t.child=e.child,t.flags\|=128,null):(i=r.fallback,a=t.mode,r=Ds({mode:"visible",children:r.children},a,0,null),(i=js(i,a,l,null)).flags\|=2,r.return=t,i.return=t,r.sibling=i,t.child=r,1&t.mode&&Xo(t,e.child,null,l),t.child.memoizedState=Dl(l),t.memoize
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 6f 2c 64 75 3d 21 30 2c 70 75 28 65 2c 74 2c 6e 29 2c 66 75 3d 72 2c 64 75 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 31 34 3a 63 61 73 65 20 31 35 3a 69 66 28 21 58 6c 26 26 28 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 72 2e 6c 61 73 74 45 66 66 65 63 74 29 29 29 7b 61 3d 72 3d 72 2e 6e 65 78 74 3b 64 6f 7b 76 61 72 20 6f 3d 61 2c 69 3d 6f 2e 64 65 73 74 72 6f 79 3b 6f 3d 6f 2e 74 61 67 2c 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 32 26 6f 7c 7c 34 26 6f 29 26 26 74 75 28 6e 2c 74 2c 69 29 2c 61 3d 61 2e 6e 65 78 74 7d 77 68 69 6c 65 28 61 21 3d 3d 72 29 7d 70 75 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 69 66 28 21 58 6c 26 26 Data Ascii: o,du=!0,pu(e,t,n),fu=r,du=a;break;case 0:case 11:case 14:case 15:if(!Xl&&(null!==(r=n.updateQueue)&&null!==(r=r.lastEffect))){a=r=r.next;do{var o=a,i=o.destroy;o=o.tag,void 0!==i&&(2&o\|\|4&o)&&tu(n,t,i),a=a.next}while(a!==r)}pu(e,t,n);break;case 1:if(!Xl&&
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 61 6e 65 73 2c 30 3d 3d 3d 69 26 26 28 47 75 3d 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 74 2e 6f 6e 43 6f 6d 6d 69 74 46 69 62 65 72 52 6f 6f 74 29 74 72 79 7b 6f 74 2e 6f 6e 43 6f 6d 6d 69 74 46 69 62 65 72 52 6f 6f 74 28 61 74 2c 65 2c 76 6f 69 64 20 30 2c 21 28 31 32 38 26 7e 65 2e 63 75 72 72 65 6e 74 2e 66 6c 61 67 73 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 6e 2e 73 74 61 74 65 4e 6f 64 65 29 2c 61 73 28 65 2c 58 65 28 29 29 2c 6e 75 6c 6c 21 3d 3d 74 29 66 6f 72 28 72 3d 65 2e 6f 6e 52 65 63 6f 76 65 72 61 62 6c 65 45 72 72 6f 72 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 61 3d 74 5b 6e 5d 2c 72 28 61 2e 76 61 6c 75 65 2c 7b 63 6f 6d Data Ascii: anes,0===i&&(Gu=null),function(e){if(ot&&"function"==typeof ot.onCommitFiberRoot)try{ot.onCommitFiberRoot(at,e,void 0,!(128&~e.current.flags))}catch(t){}}(n.stateNode),as(e,Xe()),null!==t)for(r=e.onRecoverableError,n=0;n<t.length;n++)a=t[n],r(a.value,{com
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 2c 61 2c 30 2c 69 2c 6c 29 2c 65 5b 68 61 5d 3d 74 2e 63 75 72 72 65 6e 74 2c 24 72 28 65 29 2c 72 29 66 6f 72 28 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 61 3d 28 61 3d 28 6e 3d 72 5b 65 5d 29 2e 5f 67 65 74 56 65 72 73 69 6f 6e 29 28 6e 2e 5f 73 6f 75 72 63 65 29 2c 6e 75 6c 6c 3d 3d 74 2e 6d 75 74 61 62 6c 65 53 6f 75 72 63 65 45 61 67 65 72 48 79 64 72 61 74 69 6f 6e 44 61 74 61 3f 74 2e 6d 75 74 61 62 6c 65 53 6f 75 72 63 65 45 61 67 65 72 48 79 64 72 61 74 69 6f 6e 44 61 74 61 3d 5b 6e 2c 61 5d 3a 74 2e 6d 75 74 61 62 6c 65 53 6f 75 72 63 65 45 61 67 65 72 48 79 64 72 61 74 69 6f 6e 44 61 74 61 2e 70 75 73 68 28 6e 2c 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 59 73 28 74 29 7d 2c 74 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,a,0,i,l),e[ha]=t.current,$r(e),r)for(e=0;e<r.length;e++)a=(a=(n=r[e])._getVersion)(n._source),null==t.mutableSourceEagerHydrationData?t.mutableSourceEagerHydrationData=[n,a]:t.mutableSourceEagerHydrationData.push(n,a);return new Ys(t)},t.render=function(
2024-04-24 02:18:04 UTC	16384	IN	Data Raw: 7b 76 61 72 20 73 3d 68 28 65 5b 61 5d 2c 65 2c 6f 29 3b 69 66 28 22 74 68 72 6f 77 22 21 3d 3d 73 2e 74 79 70 65 29 7b 76 61 72 20 63 3d 73 2e 61 72 67 2c 66 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 66 26 26 22 6f 62 6a 65 63 74 22 3d 3d 72 28 66 29 26 26 69 2e 63 61 6c 6c 28 66 2c 22 5f 5f 61 77 61 69 74 22 29 3f 74 2e 72 65 73 6f 6c 76 65 28 66 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 6e 65 78 74 22 2c 65 2c 6c 2c 75 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 74 68 72 6f 77 22 2c 65 2c 6c 2c 75 29 7d 29 29 3a 74 2e 72 65 73 6f 6c 76 65 28 66 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 6c 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: {var s=h(e[a],e,o);if("throw"!==s.type){var c=s.arg,f=c.value;return f&&"object"==r(f)&&i.call(f,"__await")?t.resolve(f.__await).then((function(e){n("next",e,l,u)}),(function(e){n("throw",e,l,u)})):t.resolve(f).then((function(e){c.value=e,l(c)}),(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49868	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	2053	OUT	GET /_set_cookie?val=trZ7A4NQklPD6QNOg8QV%2FVoh1GX3hShvCdvOYEu2ymG9ZkFVo63l%2BwjV0St%2BIpR9w%2BPlHJOP4WQwbgiBdfuV6nk1b5VIfQkRWSdyva%2F%2BUabEG%2BPUIJVD8I%2FKPObfy%2BgTbmbXWmwH%2Bko2183oBLdMQsX%2Ba8dYDmuhUhnRUorH8lURh0lc9SToQ0m%2FU5FAX%2Bpv4UI%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13
2024-04-24 02:18:04 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:04 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 409c44fe5aec2ede2c5cd6cb59aad7d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: _UwVJaSzSTpmINTsjgkvL8H6K5ISnBZWvGxWwhPiB-bWFQNnBd81ug==
2024-04-24 02:18:04 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49870	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	818	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&_u=6CDAAUABAAAAICgFKgC~&z=2050603363 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49869	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	934	OUT	POST /pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=740184327.1713925069&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	927	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcu=1&gcd=13r3v3r2r5&rnd=740184327.1713925069&url=https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49872	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	600	OUT	GET /user/?tid=2612705757018&cb=1713925082664&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5937959155131376 Date: Wed, 24 Apr 2024 02:18:04 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:04 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49873	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	624	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1UTmtaVEprWWprdE9XRTFOQzAwWm1NMkxUbGpOR010TnpCbU5ESTRNVFJsTURRMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 2104353189885678 Date: Wed, 24 Apr 2024 02:18:04 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:04 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49874	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:03 UTC	1412	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925082668 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:04 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8831999311160948 Date: Wed, 24 Apr 2024 02:18:04 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49876	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	675	OUT	GET /rp.gif?ts=1713925075021&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:04 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49875	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	675	OUT	GET /rp.gif?ts=1713925075022&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:04 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49871	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:04 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:18:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49877	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	2422	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:04 UTC	120	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 35 34 32 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":15423.399999999994,"tags":{"rating":"poor","page_group":"/downloads","country":"US"}}
2024-04-24 02:18:04 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 56 Connection: close Date: Wed, 24 Apr 2024 02:18:04 GMT ETag: "38-G8mcIr/y4+gVqC93H9QkgDeefxc" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: y6-u3_D1qi6zhvR7ytFkDHNMTwetgOJID6KP-8nkpOQgJbdpctUpQg==
2024-04-24 02:18:04 UTC	56	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 31 35 34 32 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"LCP","time":15423.399999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49880	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	624	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:05 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU9EY3hOelJsTVdZdFl6VTNaaTAwWkdFd0xUaGhZelV0TnpVeU16ZG1NRE5pTjJFMA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1104055303488863 Date: Wed, 24 Apr 2024 02:18:04 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49879	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	1569	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925083570&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:04 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZKWWFwcFJoSXQ3ekZPNlQ2N3plNWRzMjNqYm0rWmlqZWNwaHJ1bWVJTFRoS0NGMlJ6NHZTY1l0ZnR1WjF1YmZnTFNmQS9NSDNDc20xYWpYOHY5clNTcXQ0VWlUTW1iRGw2Z09vcXR4djFRST0mSXRIV3FzbE9mQzUxekhPZDhXRGhrb3IyYXZjPQ=="; Expires=Thu, 24 Apr 2025 02:18:04 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1316786213563169 Date: Wed, 24 Apr 2024 02:18:04 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49881	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	2325	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-24 02:18:05 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:05 GMT Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block ETag: W/"a25e-18f0b1d3698" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -KJOg-RHEf3FF4UKiJPeNbaF6iScKiTlMfXTlMmzUtKwAa-acll2aQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49883	151.101.0.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	724	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1464569193838025 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49882	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	584	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11792855-4&cid=1577694276.1713925069&jid=2017241387&_u=6CDAAUABAAAAICgFKgC~&z=2050603363 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:05 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49886	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	418	OUT	GET /user/?tid=2612705757018&cb=1713925082664&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tUXlOelF5WmpZdFpUUmhPQzAwTmpFNExXSTJOekF0TWpBNU1XRXlPRFV4WVdVMw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1382566294709175 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:05 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49884	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	1230	OUT	GET /v3/?tid=2612705757018&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925082668 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:05 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1395462673415011 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49887	151.101.193.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:05 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:05 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49885	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:04 UTC	442	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpXUmhaR0psTUdVdFpXTmxOUzAwWmpCaExXSmpPVEV0WXpJMVpHSXpOek0yT1RCaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 7457861444040661 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49889	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	2066	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:05 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:05 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PR1G8exUr2OAGWZfhOUyy2o8JV1D6Pc6pNjaKnnveQvQiTSK0NLjMQ==
2024-04-24 02:18:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49890	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	1569	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925084289&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:05 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ4WStEK2NicmlPbmh4L0VMSTg0d2JPTW1Lc0FuSE4rV1dUOE03N25Cd2ExZkRsd2drLy8zZlQ1OUUyVCs0YUhiUkFVNERNVDV4Yk5WWlRRS0JrMjR1Z0gwaU1vUGpFY1RjWWk5K3Q3WXBudz0mWGtwVFc2RFh1QTFNMG5tdmlrYW1zbTc5Njg4PQ=="; Expires=Thu, 24 Apr 2025 02:18:05 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6762438994101798 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49888	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	2163	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA
2024-04-24 02:18:05 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:18:06 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:05 GMT ETag: W/"3e77-+HGsoIuK3vn4UN8DgdWGkXv5Fgg" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15991 Connection: Close
2024-04-24 02:18:06 UTC	11941	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 38 32 36 31 39 37 36 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 32 39 38 32 37 31 30 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 37 30 34 33 30 31 36 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 34 37 37 37 36 31 36 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 30 4e 7a 63 33 4e Data Ascii: {"creatives":[{"adId":518261976,"creativeId":342982710,"flightId":507043016,"campaignId":304777616,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA0Nzc3N
2024-04-24 02:18:06 UTC	4050	IN	Data Raw: 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 78 73 4c 43 4a 77 63 69 49 36 4d 54 4d 35 4e 6a 67 32 4c 43 4a 79 64 43 49 36 4d 53 77 69 63 6e 4d 69 4f 6a 55 77 4d 43 77 69 63 32 45 69 4f 69 49 31 4e 53 49 73 49 6e 4e 69 49 6a 6f 69 61 53 30 77 5a 6a 68 6b 5a 57 55 32 4d 54 4d 79 4d 32 51 34 4f 57 4d 77 4d 53 49 73 49 6e 4e 77 49 6a 6f 78 4d 54 67 78 4d 7a 51 34 4c 43 4a 7a 64 43 49 36 4d 54 41 31 4e 54 6b 79 4d 69 77 69 64 57 73 69 4f 69 4a 7a 63 43 31 6a 4e 44 51 30 4d 7a 41 77 5a 69 30 32 4d 44 41 32 4c 54 52 6c 4f 44 4d 74 4f 57 4d 7a 4f 43 30 7a 5a 6a 51 78 4f 47 49 35 59 6a 45 78 4d 57 4d 69 4c 43 4a 36 62 69 49 36 4d 54 6b 35 4d 44 63 78 4c 43 4a 30 63 79 49 36 4d 54 63 78 4d 7a 6b 79 4e 54 41 34 4e 54 67 31 4e 79 77 69 63 47 34 69 4f 69 4a 70 5a 6e 4a 68 Data Ascii: jAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wZjhkZWU2MTMyM2Q4OWMwMSIsInNwIjoxMTgxMzQ4LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcxLCJ0cyI6MTcxMzkyNTA4NTg1NywicG4iOiJpZnJh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49891	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	1580	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925083570&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZKWWFwcFJoSXQ3ekZPNlQ2N3plNWRzMjNqYm0rWmlqZWNwaHJ1bWVJTFRoS0NGMlJ6NHZTY1l0ZnR1WjF1YmZnTFNmQS9NSDNDc20xYWpYOHY5clNTcXQ0VWlUTW1iRGw2Z09vcXR4djFRST0mSXRIV3FzbE9mQzUxekhPZDhXRGhrb3IyYXZjPQ=="
2024-04-24 02:18:05 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:05 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZRYzFFcnR2YVMxcERlVE9DMWFtVjVqQzEweWV3NFRRa04vbFZvN0dKdlhnV3llbk1raWdkSTR6cmFjVWwwTzVNMUFNR0JOcUFQV3RsMEwwdEtqUDBtcldKTGxQd0RhQSt6S1JtUTg1V2xhdz0mVk5wVFNqdUQ2eU1HbFAwTHZkcUxpU1AxY1Y4PQ=="; Expires=Thu, 24 Apr 2025 02:18:05 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1278990639416793 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49892	151.101.193.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 713 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:05 UTC	713	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 30 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e 67 69 66 3f 74 73 Data Ascii: [{"age":0,"body":{"elapsed_time":800,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.1.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.gif?ts
2024-04-24 02:18:05 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:05 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49893	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	442	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925082666&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-24 02:18:05 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpqWTRNVEU1TldVdE56TXhZUzAwWlRJekxXSmlNekl0TlRCbE1tUTBPV1kyTm1GaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 7633411090964162 Date: Wed, 24 Apr 2024 02:18:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:05 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49895	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	2090	OUT	GET /favicon.ico HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969 If-None-Match: W/"a25e-18f0b1d3698" If-Modified-Since: Tue, 23 Apr 2024 13:20:15 GMT
2024-04-24 02:18:06 UTC	680	IN	HTTP/1.1 304 Not Modified Connection: close Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:06 GMT ETag: W/"a25e-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e71c7f7563801eb72fe27eb8f7c3e658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OMu5J8pU-gXMWxSdVSdhNKMxSWRl_DUZ6r7B79QcEXubGFtJMxZrpw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49896	172.67.69.191	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:05 UTC	577	OUT	GET /tag/a79d0565d5244a0f813e40f2c4832d09/wetransfer.js?slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:06 UTC	759	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=4830 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3443 Last-Modified: Wed, 24 Apr 2024 01:20:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UkuSkS3b6mX4a%2BpTbqzU%2F76%2Fhlxe9wa2%2FbI1MXNOXTgBxj5U%2FKnJawJaKM03NqJRsZrFp0LLHBanKLcFWi7sTe43G3Udr%2BXawNsZ89aUqmWpzT3MxsHsdqZehWoI2fqdpsJfYd6l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879299cceccf29f6-LAX
2024-04-24 02:18:06 UTC	610	IN	Data Raw: 31 32 32 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 72 61 6e 64 6d 65 74 72 69 63 73 2c 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e Data Ascii: 122c"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).
2024-04-24 02:18:06 UTC	1369	IN	Data Raw: 74 72 69 63 73 2e 61 70 69 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 61 73 43 6f 6e 73 65 6e 74 28 29 29 29 64 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 65 2c 6f 28 29 7d 29 3b 65 6c 73 65 20 69 66 28 21 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 7b 68 61 73 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 69 73 52 65 61 64 Data Ascii: trics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isRead
2024-04-24 02:18:06 UTC	1369	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 73 70 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 33 34 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 73 74 6f 6d 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 32 33 29 29 28 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 63 6f 6e 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 68 61 6e 64 6c 65 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 3a 20 22 2b 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 74 79 70 65 29 7d 65 2e 63 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 61 28 74 2c 6e 29 3a 73 28 21 31 2c 74 2c 6e 29 7d 29 7d 65 6c 73 65 20 61 28 74 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 Data Ascii: );break;case"usp":e=new(l.getModule(34));break;case"custom":e=new(l.getModule(23))(t.consentMode.conf);break;default:throw new Error("Cannot handle consent type: "+t.consentMode.type)}e.check(function(e){e?a(t,n):s(!1,t,n)})}else a(t,n)},a=function(e,t){i
2024-04-24 02:18:06 UTC	1312	IN	Data Raw: 2c 74 28 29 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2c 6f 3d 6e 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 6f 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 2e 62 6f 64 79 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 2c 73 3d 74 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 73 5b 61 5d 3b 69 7c 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 63 29 7d 76 61 72 20 64 3d 6f 26 26 6f 2e 73 65 61 72 63 68 26 26 2d 31 21 3d 3d 6f 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 62 6d 5f 64 22 29 2c 75 3d 72 26 26 30 3c 72 2e 6c 65 6e 67 74 68 3f 72 3a 5b 6f 2e 68 72 65 66 5d 2c 6c 3d 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 2c 70 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 Data Ascii: ,t())},g=function(e,t){var n=document,o=n.location,r=o.ancestorOrigins;if(n.body){for(var i=0,a=0,s=t;a<s.length;a++){var c=s[a];i\|=Math.pow(2,c)}var d=o&&o.search&&-1!==o.search.indexOf("bm_d"),u=r&&0<r.length?r:[o.href],l=u[u.length-1],p=n.createElement
2024-04-24 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49899	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	640	OUT	GET /_next/static/media/ActiefGrotesque_W_Medium.7e37a161.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:06 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 32124 Connection: close Date: Thu, 14 Mar 2024 16:35:51 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 14 Mar 2024 16:07:26 GMT ETag: "868aedeefe7669e8a4f7196f7df5d058" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TaON6p_Zf9BlkIrsf7zeb7iEOo6iErV7MhALq_RQYN6BuPyMhNNyVg== Age: 3490936
2024-04-24 02:18:06 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7d 7c 00 11 00 00 00 00 f6 e0 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 6d 18 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 6d 34 00 00 0b 90 00 00 33 94 f7 fc d9 35 47 53 55 42 00 00 78 c4 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 87 35 60 c0 63 6d 61 70 00 00 06 08 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 64 00 00 01 97 00 00 0b f2 4b e1 31 a5 66 70 67 6d 00 00 07 e0 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 6d 0c 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 10 00 00 58 bd 00 00 90 82 5a 21 5b f3 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 71 43 9b 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFF}\|GDEFmo]GPOSm435GSUBx8-jQOS/2Z`5`cmap;<cvt dK1fpgm06gaspmglyfXZ![head66qChhea
2024-04-24 02:18:06 UTC	16384	IN	Data Raw: 0b 25 7e 51 89 bf a6 c4 4a a3 1d db e1 a3 f5 65 f0 9f 70 45 0b a4 36 fd 64 77 f2 64 3e d0 07 8b 02 4c 96 d8 73 e0 b2 99 c7 23 af cf 7b ec 79 b7 6d cf 37 df 6b b0 29 c4 4a c1 9e 0a 5a dd 36 ac a9 05 28 93 17 3b 3d ee a2 d7 f9 e6 ea b3 f8 51 d1 63 35 ba bb 7b 0d be 94 2f 94 d3 2f 4c 7c f0 83 88 de 2c 42 c2 af 59 54 9a 15 74 e1 88 75 42 af 47 06 51 d1 12 28 8b 6b 81 b2 98 58 78 b8 9e 6c 26 e2 81 7b b8 c9 1c 54 a2 cd 32 47 05 fc 6e d2 d3 64 f9 a9 fe e0 c4 69 12 ea 7f 2b 0f a2 7d f1 45 3c 8e bd d5 97 58 0c 6c 98 45 25 2f a3 11 6a 42 68 08 0f 49 dd 25 8f 37 0f 7f ed e9 49 6d 49 0a 4d da 85 da 84 9d 4f d4 4c 97 40 7e d0 00 99 46 3e 52 39 27 fc d5 60 e5 a2 41 50 cb 09 20 49 6c 76 06 0d 3e 87 27 ee 0f 8c dc bc 22 fe b7 c2 97 4f a8 da 46 6f ac e8 fd 09 bb 38 55 31 Data Ascii: %~QJepE6dwd>Ls#{ym7k)JZ6(;=Qc5{//L\|,BYTtuBGQ(kXxl&{T2Gndi+}E<XlE%/jBhI%7ImIMOL@~F>R9'`AP Ilv>'"OFo8U1
2024-04-24 02:18:06 UTC	107	IN	Data Raw: 4e a0 c1 da ee e5 2e ee e4 3a 2e e7 36 ae a6 01 e1 9b 62 5b 49 f8 a4 e9 4c 3d b9 d8 55 d5 90 34 e1 a1 f3 06 91 e4 f2 43 27 45 ec 7c cf b3 1a 50 48 19 75 74 e3 04 cd c1 e3 1a ae d7 5c ab 37 69 3a 86 6b 34 13 13 d9 66 63 b8 09 21 ae 89 75 3f 85 d2 f6 b9 28 3b 13 0f 3f 11 11 a5 b1 19 67 e7 db e1 a7 db ff 01 f1 e1 40 52 00 Data Ascii: N.:.6b[IL=U4C'E\|PHut\7i:k4fc!u?(;?g@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49898	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	633	OUT	GET /_next/static/media/GT-Super-WT-Super.3397811e.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:06 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43188 Connection: close Date: Sat, 30 Dec 2023 16:08:48 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 23 Dec 2023 05:02:11 GMT ETag: "55576599a2d772f9297c5036d355b1fb" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DGqiKD2urbbICXcX0biqnKaGOr06G-YkjuqHNPWnKnRSFP6vwwjzPg== Age: 9972559
2024-04-24 02:18:06 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a8 b4 00 12 00 00 00 01 76 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 a8 ac 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8c 00 00 00 b8 19 5c 21 89 47 50 4f 53 00 00 02 20 00 00 14 91 00 00 34 a4 41 b8 64 b5 47 53 55 42 00 00 16 b4 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1c 70 00 00 00 4e 00 00 00 60 6a 7b 86 e3 63 6d 61 70 00 00 1c c0 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a1 2c 00 00 00 29 00 00 00 34 0c 4d 03 7a 66 70 67 6d 00 00 a1 58 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a1 24 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 1f d8 00 00 73 28 00 01 04 0c d6 66 63 d7 68 65 61 64 00 00 93 00 00 00 00 Data Ascii: wOFFvDSIGGDEF\!GPOS 4AdGSUB^_OS/2pN`j{cmaph=jccvt ,)4MzfpgmX6gasp$glyfs(fchead
2024-04-24 02:18:06 UTC	16384	IN	Data Raw: 9d c3 f4 6c 6d b5 ed 2c 46 2e 0b 34 66 05 35 bd 82 23 d7 4f b9 2c eb 0e e5 5e b9 db ac 4f 97 a6 67 33 76 92 13 f1 51 8c 63 75 74 d8 95 f1 5c 16 a0 1f 27 f3 39 fe af b1 6b 44 db be 90 3a 97 f8 70 0b 75 cb 02 63 2d 00 74 f9 c8 55 d2 f0 ca 69 cc 9b c3 eb a4 50 08 87 29 b5 0f 27 86 f3 e1 5c 22 46 43 34 c4 99 b2 85 51 db 16 ae ed 6a 10 cf 5e bc c7 03 1f 26 3e 9f 0e 42 fc ef 0b e9 11 f1 ff f1 bf ef 62 17 f1 97 55 57 44 07 8e f4 93 29 64 e0 56 b3 90 cf 46 98 ec 14 83 41 37 4e 4e 59 7d 82 a4 d9 67 aa 5b 12 21 7d 34 3f 43 90 65 ec 37 9c 07 39 90 99 60 b5 5a ed 54 db ad 44 27 d1 e2 bc 38 38 45 2a cf 1a d8 a8 64 d8 02 d9 a4 42 94 90 91 33 c9 ac e1 4f 9e 26 70 3c f6 5e ab 8b 67 9c 74 ba fc e9 c8 da e2 99 3b 4f 32 7f 5f 3e 74 7a ff e3 7d fe 87 ca 1d f1 b9 cf ba ab 40 Data Ascii: lm,F.4f5#O,^Og3vQcut\'9kD:puc-tUiP)'\"FC4Qj^&>BbUWD)dVFA7NNY}g[!}4?Ce79`ZTD'88E*dB3O&p<^gt;O2_>tz}@
2024-04-24 02:18:06 UTC	11171	IN	Data Raw: f0 c5 0e 07 43 b5 af d0 b0 28 e3 f6 77 5c 73 e4 d8 fa f5 e3 43 7d 93 b1 36 8c 0e fa 02 b5 5f 31 27 f9 b6 4c ae f6 9e fc 58 50 8d 90 b2 ff 8a 62 be 90 21 03 c3 3d 39 7f da ce 81 3a 74 3a be 99 d2 31 03 af a9 da 62 08 b2 c0 ad ec e2 28 cf 6a 40 28 75 78 19 07 17 fa e2 7e d5 3e 5b 41 7d bd dc 98 c9 d3 32 53 35 0c 32 00 ca b0 b4 fa 2a 5f 41 57 cd 3e 35 28 4c ba 0e 57 a3 75 ba 96 c1 61 fc 1a 11 de 4c 27 b5 6c 61 20 1e de b9 b3 4e 0a db 83 57 5f 32 3f 55 07 f6 ff 7d a4 bd 10 8f e7 68 9c 98 dc 58 48 a5 c2 85 c7 63 31 0d e6 01 c8 e9 5f 9f fe 38 be 95 e3 4d f8 a0 b7 5a 6c 08 63 a9 2a 30 89 48 78 4c e2 6b 79 14 4b 9f e4 b5 db 0c 0a 07 97 50 e4 3a b8 44 26 ab 47 d9 52 a3 08 7f 87 22 4c 7c b6 d3 3d 3e 92 68 c7 d9 f6 d0 cb 2f 55 e3 ce 3f a1 18 84 9d 1b f1 e1 91 dd be Data Ascii: C(w\sC}6_1'LXPb!=9:t:1b(j@(ux~>[A}2S52_AW>5(LWuaL'la NW_2?U}hXHc1_8MZlc0HxLkyKP:D&GR"L\|=>h/U?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49900	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	1580	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925084289&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fdownloads%2F04c739eb07109cb2a1e7a9e50e8b62bd20240423085053%2F58be84%3Futm_campaign%3DTRN_TDL_05%26utm_source%3Dsendgrid%26utm_medium%3Demail%26trk%3DTRN_TDL_05%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ4WStEK2NicmlPbmh4L0VMSTg0d2JPTW1Lc0FuSE4rV1dUOE03N25Cd2ExZkRsd2drLy8zZlQ1OUUyVCs0YUhiUkFVNERNVDV4Yk5WWlRRS0JrMjR1Z0gwaU1vUGpFY1RjWWk5K3Q3WXBudz0mWGtwVFc2RFh1QTFNMG5tdmlrYW1zbTc5Njg4PQ=="
2024-04-24 02:18:06 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:06 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="; Expires=Thu, 24 Apr 2025 02:18:06 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5609159746377848 Date: Wed, 24 Apr 2024 02:18:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49897	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	772	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ4WStEK2NicmlPbmh4L0VMSTg0d2JPTW1Lc0FuSE4rV1dUOE03N25Cd2ExZkRsd2drLy8zZlQ1OUUyVCs0YUhiUkFVNERNVDV4Yk5WWlRRS0JrMjR1Z0gwaU1vUGpFY1RjWWk5K3Q3WXBudz0mWGtwVFc2RFh1QTFNMG5tdmlrYW1zbTc5Njg4PQ=="
2024-04-24 02:18:06 UTC	364	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4101 ETag: "2a8d051abafd7b1d3f62592455b15f0c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 0 Date: Wed, 24 Apr 2024 02:18:06 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-24 02:18:06 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-24 02:18:06 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-24 02:18:06 UTC	1345	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49902	172.67.69.191	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	614	OUT	GET /scripts/bundle/65568.js?sid=7f2d78d4-f913-42d1-8d60-7c59cb6b6daf&toploc=wetransfer.com&&slang=US HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:07 UTC	752	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=49261 Request-Context: appId=cid-v1:5c986aee-9723-4541-b38e-d4ac73c46937 CF-Cache-Status: HIT Age: 3443 Last-Modified: Wed, 24 Apr 2024 01:20:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MLO%2By6fbqnvK656G%2BYTRCKUWajWwVnf1kJeJRKR8nP6xwRFVe35LpHMPyPvqZbYG5VJYLD2i1jtogdyWWf0baPX9ns2jIc4oM7TXCLEh2wp7dqfGQBLw1p84dzLRpIl5S4zUBwP9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879299d16a0a78e4-LAX
2024-04-24 02:18:07 UTC	617	IN	Data Raw: 37 63 62 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 66 2c 75 2c 79 2c 77 2c 61 2c 63 2c 62 3d 21 31 2c 72 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 66 3d 65 2c 61 3d 6f 2c 77 3d 72 2c 6d 3d 74 2c 75 3d 69 29 79 3d 75 2e 73 74 6f 72 61 67 65 3b 65 6c 73 65 20 69 66 28 22 6c 73 22 3d 3d 3d 65 2e 73 74 6f 72 61 67 65 29 74 72 79 7b 79 3d 6e 65 77 28 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 35 29 29 28 66 2c 6d 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 79 3d 76 6f 69 64 20 30 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7cb2"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function()
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 6f 77 65 64 3a 21 31 7d 29 7d 2c 6f 2e 74 69 6d 65 6f 75 74 29 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 72 29 7d 2c 75 3d 7b 6d 69 64 3a 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6d 69 64 2c 62 69 64 3a 6f 2e 62 69 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 61 75 74 6f 52 65 6e 64 65 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 75 74 6f 52 65 6e 64 65 72 7c 7c 6f 2e 61 75 74 6f 52 65 6e 64 65 72 2c 66 6f 72 63 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 66 6f 72 63 65 26 26 6f 2e 66 6f 72 63 65 2c 69 73 54 65 73 74 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 69 73 54 65 73 74 26 26 6f 2e 69 73 54 65 73 74 2c 64 74 4e 61 6d 65 3a 6f 2e 64 74 Data Ascii: owed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dt
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 29 3b 69 66 28 61 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 28 65 29 3b 72 65 74 75 72 6e 20 72 5b 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 5d 3d 74 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 61 6e 64 6d 65 74 72 69 63 73 3a 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 72 65 61 74 69 6e 67 20 73 75 72 76 65 79 73 2e 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 Data Ascii: {if(void 0===e\|\|void 0===e.measurementId\|\|void 0===e.displayOption)throw new Error("");if(a){var t=a.create(e);return r[e.measurementId]=t}throw new Error("brandmetrics: This configuration does not support creating surveys.")},e.prototype.addMetadata=func
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 73 74 6f 70 28 29 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2e 73 74 6f 70 28 29 7d 2c 65 7d 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 72 65 67 69 73 74 65 72 28 7b 69 64 3a 30 2c 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 69 2c 61 2c 6e 29 7b 76 61 72 20 73 3d 6e 65 77 20 76 28 65 2c 74 2c 72 2c 6f 2c 69 29 2c 64 3d 7b 62 6d 3a 73 2c 63 6f 6c 6c 65 63 74 69 6f 6e 3a 75 2c 6f 70 74 69 6f 6e 73 3a 65 2c 75 74 69 6c 73 3a 74 2c 63 6c 69 65 6e 74 3a 72 2c 73 74 6f 72 61 67 65 3a Data Ascii: ype.getOptions=function(){return f},e.prototype.stop=function(){void 0!==u&&u.stop(),void 0!==m&&m.stop()},e}();window.brandmetrics.register({id:0,ctor:function(e,t,r,o,i,a,n){var s=new v(e,t,r,o,i),d={bm:s,collection:u,options:e,utils:t,client:r,storage:
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 65 2e 74 79 70 65 2c 74 68 69 73 2e 69 64 3d 74 2c 74 68 69 73 2e 62 65 61 63 6f 6e 49 64 3d 65 2e 69 64 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 65 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6e 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 74 68 69 73 2e 6f 6e 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 72 2c 74 68 69 73 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 31 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 7d 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6f 7c 7c 21 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 32 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 2c 70 Data Ascii: e.type,this.id=t,this.beaconId=e.id,this.source=e.source,this.element=n,this.measurements=i,this.onPropertyChange=r,this.type){case 0:this.threshold=1e3,this.props={inview:o\|\|!1},this.active=o\|\|!1;break;case 1:this.threshold=2e3,this.props={inview:o\|\|!1,p
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 79 70 65 29 29 2c 45 2e 70 75 73 68 28 66 29 29 2c 76 6f 69 64 20 30 21 3d 3d 66 26 26 28 6c 3d 30 3d 3d 3d 28 64 3d 66 29 2e 73 74 61 74 65 3f 31 32 3a 31 33 2c 64 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 70 6f 73 74 45 76 65 6e 74 28 6c 2c 65 2e 69 64 2c 76 6f 69 64 20 30 2c 7b 70 69 64 3a 64 2e 69 64 7d 29 7d 29 2c 78 28 30 2c 64 29 2c 30 3d 3d 3d 28 65 2e 69 6e 76 69 65 77 48 61 6e 64 6c 69 6e 67 7c 7c 30 29 29 29 69 66 28 66 2e 65 6c 65 6d 65 6e 74 26 26 67 29 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 6f 62 73 65 72 76 65 28 66 2e 65 6c 65 6d 65 6e 74 29 3b 65 6c 73 65 20 69 66 28 22 61 6c 77 61 79 73 22 21 Data Ascii: nview)\|\|void 0===n?void 0:n.type)),E.push(f)),void 0!==f&&(l=0===(d=f).state?12:13,d.measurements.forEach(function(e){w.postEvent(l,e.id,void 0,{pid:d.id})}),x(0,d),0===(e.inviewHandling\|\|0)))if(f.element&&g)null==g\|\|g.observe(f.element);else if("always"!
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 22 65 78 70 6f 73 75 72 65 20 65 6e 64 65 64 20 28 22 2e 63 6f 6e 63 61 74 28 72 2c 22 20 73 65 63 29 2c 20 22 29 2c 69 29 7d 69 66 28 74 29 7b 69 2e 65 6c 65 6d 65 6e 74 26 26 28 6e 75 6c 6c 3d 3d 67 7c 7c 67 2e 75 6e 4f 62 73 65 72 76 65 28 69 2e 65 6c 65 6d 65 6e 74 29 29 3b 76 61 72 20 65 3d 45 2e 69 6e 64 65 78 4f 66 28 69 29 3b 2d 31 21 3d 3d 65 26 26 28 45 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 78 28 30 2c 69 29 29 7d 7d 29 2c 69 26 26 66 28 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 45 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 31 3d 3d 3d 74 2e 73 74 61 74 65 26 26 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 70 75 73 68 28 7b 6d Data Ascii: "exposure ended (".concat(r," sec), "),i)}if(t){i.element&&(null==g\|\|g.unObserve(i.element));var e=E.indexOf(i);-1!==e&&(E.splice(e,1),x(0,i))}}),i&&f()},f=function(){var i=[];E.forEach(function(t){1===t.state&&t.measurements.forEach(function(e){i.push({m
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 2c 69 29 7d 65 6c 73 65 20 72 26 26 28 65 2e 6b 65 79 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 73 6f 75 72 63 65 2e 74 79 70 65 7c 7c 31 65 33 3c 72 2e 61 67 65 28 29 29 26 26 53 28 5b 72 5d 2c 21 30 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 73 77 69 74 63 68 28 74 2e 73 6f 75 72 63 65 29 7b 63 61 73 65 22 61 70 6e 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 70 74 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 62 6a 22 3a 69 3d 5b 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 74 76 22 3a 63 61 73 65 22 61 70 69 22 3a 63 61 73 65 22 73 Data Ascii: ,i)}else r&&(e.key.source===r.source.type\|\|1e3<r.age())&&S([r],!0)},P=function(t,e){var i;if(void 0===e)switch(t.source){case"apn":i=["creativeId"];break;case"gpt":i=["creativeId","lineItemId"];break;case"pbj":i=["dealId"];break;case"ntv":case"api":case"s
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 67 65 74 53 65 73 73 69 6f 6e 28 29 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 69 2c 72 2c 6e 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 2c 6b 3d 6e 2c 79 3d 65 2c 77 3d 74 2c 73 3d 72 2c 62 3d 69 3b 76 61 72 20 61 3d 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 32 37 29 3b 61 26 26 28 63 3d 6e 65 77 20 61 29 2c 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 26 26 28 67 3d 54 28 7b 63 6f 6c 6c 65 63 74 69 6f 6e 3a 74 68 69 73 2c 63 61 6c 6c 62 61 63 6b 3a 4d 2c 75 74 69 6c 73 3a 69 7d 29 29 2c 62 2e 6f 6e 28 7b 65 76 65 6e 74 3a 22 70 Data Ascii: getSession())},e=function(){function e(e,t,i,r,n){var o;this.storage=n,k=n,y=e,w=t,s=r,b=i;var a=brandmetrics.getModule(27);a&&(c=new a),"always"!==(null===(o=e.inview)\|\|void 0===o?void 0:o.type)&&(g=T({collection:this,callback:M,utils:i})),b.on({event:"p
2024-04-24 02:18:07 UTC	1369	IN	Data Raw: 75 72 65 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 61 28 65 29 3b 69 26 26 69 2e 75 70 64 61 74 65 50 72 6f 70 65 72 74 69 65 73 28 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 45 78 70 6f 73 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 61 28 65 29 29 2c 74 7c 7c 28 74 3d 41 28 68 28 65 29 29 29 2c 74 26 26 53 28 5b 74 5d 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 73 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 74 5d 3b 72 2e 67 65 74 54 79 Data Ascii: ureProperties=function(e,t){var i=a(e);i&&i.updateProperties(t)},e.prototype.endExposure=function(e){var t;"string"==typeof e&&(t=a(e)),t\|\|(t=A(h(e))),t&&S([t],!0)},e.prototype.triggerListener=function(e){for(var t=0,i=s;t<i.length;t++){var r=i[t];r.getTy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49903	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	639	OUT	GET /_next/static/media/ActiefGrotesque-Medium.1acd899d.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:07 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28644 Connection: close Date: Thu, 02 Nov 2023 10:14:24 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 02 Nov 2023 09:51:45 GMT ETag: "fbe81375a88b68a2a2d7ffc63e6a0d8d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1ww4cyTqfUche4aLmGOWva7Ms0QY5hjn9R5qqCgL5TkFP_axp1H4Dg== Age: 15005023
2024-04-24 02:18:07 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f e4 00 12 00 00 00 01 16 3c 00 00 6f 79 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 3a 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9f 54 81 f7 5f 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 84 4a 1b e5 fc 37 64 6e 4e 78 27 28 a8 9d 80 aa c8 ea f6 62 69 c0 1d 86 8d 03 06 f3 3e 65 64 20 8f 03 28 f5 ff 95 fd ff ff 27 26 13 39 2c 77 b5 4b d2 16 0a e3 7f 9b 89 c9 04 2e 73 90 4b 11 90 e9 b5 39 b4 ae 98 13 9a a8 50 26 ba cc 6b b0 d5 fa bc a5 75 6f 30 76 c8 40 87 d5 0f 38 21 62 5b 57 bb 54 2b ce 20 22 78 c3 10 de e5 83 6a c2 99 af d8 41 a9 d3 4e 8c c7 c4 ce 9d f5 7d f2 c3 fe 4a 9b 89 c9 f4 2a ff 5b 9a 3a 64 b0 4d c5 9f 74 3a 44 87 42 d0 f1 d3 76 Data Ascii: wOF2o<oy?FFTM4:p`nrWT_&6$H \~J7dnNx'(bi>ed ('&9,wK.sK9P&kuo0v@8!b[WT+ "xjAN}J*[:dMt:DBv
2024-04-24 02:18:07 UTC	13013	IN	Data Raw: 00 db aa 38 a2 f3 f4 78 2b 00 22 35 2b 2b 54 de a2 c7 b9 d8 84 15 ef eb d2 fa 01 08 8c dc fe fc ba 97 9b 82 3b 38 7c 1c b5 63 8f 37 bb a4 9c d0 6a 9e 40 03 f6 69 13 fc 25 0f 75 a8 cc b9 12 5f 8a b4 fe ca b7 7c 09 1c 9f fb ca 10 c6 a7 57 9b c2 b5 76 3c e0 eb 74 40 85 5e dc 0a 06 0f 23 ff f2 13 3a e6 f5 2a 84 eb 0f 3c 7d 0d 87 dd 96 a6 de ad 1e a7 4e 7f f8 d3 52 f3 52 1b 2c e0 9c 40 18 9d 56 5b 12 18 d6 3a 18 2b 26 b8 77 69 b6 0f 90 c7 15 2b a0 fb 2a fa 13 91 61 c7 41 ee b4 d8 2c 97 15 de ba aa 9a 01 83 c1 a0 81 dc d7 77 6a 98 14 7d e7 25 7e 97 52 f9 b8 63 75 8d c1 65 70 d5 76 ae 86 fd 60 eb 5c 53 6b 70 1b dc 35 1d 6b 60 87 ae 55 64 54 40 ee 3f 60 db b1 18 3b db 65 b4 1a 54 1a 93 d1 00 7f b2 19 33 be 2e 42 29 a3 19 0b 31 98 ae 4c 41 5e de 7d 2c e8 ab 79 28 Data Ascii: 8x+"5++T;8\|c7j@i%u_\|Wv<t@^#:<}NRR,@V[:+&wi+aA,wj}%~Rcuepv`\Skp5k`UdT@?`;eT3.B)1LA^},y(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49905	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:06 UTC	814	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:07 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6660ab8f212f5d056276a19c9f134554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: m_YkUJ2Dv_NtOdl06wZzOaIT-_N-rpwr8sBkjw5FNi2pm4sUyVDTCg== Age: 71255
2024-04-24 02:18:07 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49904	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:07 UTC	1908	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925077.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.6; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA
2024-04-24 02:18:07 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:07 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:18:07 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49906	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:07 UTC	729	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714950390606 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:07 UTC	697	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18513 Connection: close Date: Tue, 23 Apr 2024 09:00:04 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 a04007dc83c72b87cce3372a74e47668.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: nshCseC9wL2_wMrXTFxeRImzX3LNr_xZpCw0wweGN9jEn4_CZxVrDQ== Age: 62284
2024-04-24 02:18:07 UTC	15687	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 28 74 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 65 2e 6f 28 6e 2c 72 29 26 26 21 65 2e 6f 28 74 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 72 3a 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 Data Ascii: (()=>{"use strict";var e={d:(t,n)=>{for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,S
2024-04-24 02:18:07 UTC	2826	IN	Data Raw: 6e 63 20 65 3d 3e 7b 69 66 28 4b 28 42 29 3d 3d 3d 65 2e 6f 72 69 67 69 6e 29 74 72 79 7b 63 6f 6e 73 74 7b 6d 65 74 68 6f 64 3a 74 2c 64 61 74 61 3a 6e 7d 3d 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 61 74 61 3a 74 7d 3d 65 3b 6c 65 74 20 6e 3d 7b 7d 3b 74 72 79 7b 6e 3d 74 2e 72 61 77 3f 74 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 7b 51 28 22 55 6e 61 62 6c 65 54 6f 50 61 72 73 65 4d 65 73 73 61 67 65 22 2c 74 29 7d 6e 2e 63 6f 6d 6d 61 6e 64 7c 7c 51 28 22 45 6d 70 74 79 57 61 6c 6c 70 61 70 65 72 43 6f 6d 6d 61 6e 64 22 2c 74 29 3b 63 6f 6e 73 74 20 72 3d 60 61 70 69 5f 24 7b 6e 2e 63 6f 6d 6d 61 6e 64 7d 60 3b 72 65 74 75 72 6e 20 7a 5b 72 5d 7c 7c 51 28 60 4d 65 74 68 6f 64 4e 6f 74 46 6f 75 6e 64 3a 20 24 7b 72 7d 60 2c 74 29 2c 7b 6d Data Ascii: nc e=>{if(K(B)===e.origin)try{const{method:t,data:n}=(e=>{const{data:t}=e;let n={};try{n=t.raw?t:JSON.parse(t)}catch{Q("UnableToParseMessage",t)}n.command\|\|Q("EmptyWallpaperCommand",t);const r=`api_${n.command}`;return z[r]\|\|Q(`MethodNotFound: ${r}`,t),{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49909	18.164.171.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:07 UTC	561	OUT	GET /eu1/v5/datadog-rum-slim.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:08 UTC	596	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 106028 Connection: close Last-Modified: Tue, 23 Apr 2024 12:34:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:18:09 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "f57f5bbcb09d115f917b0efad0e910fa" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 9c81639f33cc2c26621812a05e08bf2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: G69GMvJkikBx41s5QXlwsq2UtagdjPwURrIQgRXI9V1hDX8AgTEZpg== Timing-Allow-Origin: *
2024-04-24 02:18:08 UTC	15788	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-04-24 02:18:08 UTC	16384	IN	Data Raw: 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 64 32 30 78 74 7a 77 7a 63 6c 30 63 65 62 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 5d 2c 6c 65 3d 5b 22 64 64 6f 67 2d 67 6f 76 2e 63 6f 6d 22 5d 2c 64 65 3d 7b 6d 61 78 45 76 65 6e 74 73 50 65 72 50 61 67 65 3a 30 2c 73 65 6e 74 45 76 65 6e 74 43 6f 75 6e 74 3a 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 65 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 6e 65 77 20 58 2c 6f 3d 21 76 28 6c 65 2c 65 2e 73 69 74 65 29 26 26 61 74 28 65 2e 74 65 6c 65 6d 65 74 72 79 53 61 6d 70 6c 65 52 61 74 65 29 2c 75 3d 28 28 6e 3d 7b 7d 29 5b 63 65 2e 6c 6f 67 5d 3d 6f 2c 6e 5b 63 65 2e 63 6f 6e 66 69 Data Ascii: oudfront.net","https://d20xtzwzcl0ceb.cloudfront.net","http://localhost","<anonymous>"],le=["ddog-gov.com"],de={maxEventsPerPage:0,sentEventCount:0};function ve(t,e){var n,r,i=new X,o=!v(le,e.site)&&at(e.telemetrySampleRate),u=((n={})[ce.log]=o,n[ce.confi
2024-04-24 02:18:08 UTC	16384	IN	Data Raw: 73 74 61 72 74 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 52 65 63 6f 72 64 69 6e 67 4d 61 6e 75 61 6c 6c 79 3a 21 21 74 2e 73 74 61 72 74 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 52 65 63 6f 72 64 69 6e 67 4d 61 6e 75 61 6c 6c 79 2c 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 3a 74 2e 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 2c 61 6c 6c 6f 77 65 64 54 72 61 63 69 6e 67 55 72 6c 73 3a 72 2c 65 78 63 6c 75 64 65 64 41 63 74 69 76 69 74 79 55 72 6c 73 3a 6e 75 6c 6c 21 3d 3d 28 6e 3d 74 2e 65 78 63 6c 75 64 65 64 41 63 74 69 76 69 74 79 55 72 6c 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 5b 5d 2c 77 6f 72 6b 65 72 55 72 6c 3a 74 2e 77 6f 72 6b 65 72 55 72 6c 2c 63 6f 6d 70 72 65 73 73 49 6e 74 61 6b 65 52 65 71 75 65 73 74 73 3a 21 21 74 2e 63 6f 6d Data Ascii: startSessionReplayRecordingManually:!!t.startSessionReplayRecordingManually,traceSampleRate:t.traceSampleRate,allowedTracingUrls:r,excludedActivityUrls:null!==(n=t.excludedActivityUrls)&&void 0!==n?n:[],workerUrl:t.workerUrl,compressIntakeRequests:!!t.com
2024-04-24 02:18:08 UTC	16384	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 26 26 65 2e 63 6f 64 65 3d 3d 3d 44 4f 4d 45 78 63 65 70 74 69 6f 6e 2e 41 42 4f 52 54 5f 45 52 52 2c 72 2e 65 72 72 6f 72 3d 65 29 3a 22 73 74 61 74 75 73 22 69 6e 20 65 26 26 28 72 2e 72 65 73 70 6f 6e 73 65 3d 65 2c 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 65 2e 74 79 70 65 2c 72 2e 73 74 61 74 75 73 3d 65 2e 73 74 61 74 75 73 2c 72 2e 69 73 41 62 6f 72 74 65 64 3d 21 31 29 2c 74 2e 6e 6f 74 69 66 79 28 72 29 7d 3b 65 2e 74 68 65 6e 28 66 28 72 29 2c 66 28 72 29 29 7d 28 65 2c 74 2c 6c 29 7d 29 29 7d 28 65 2c 74 29 7d 29 29 2e 73 74 6f 70 3b 72 65 74 75 72 6e 20 65 7d 7d 29 29 29 2c 50 72 7d 76 61 72 20 46 72 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 74 2c 65 2c 6e 29 7b 76 61 72 Data Ascii: nstanceof DOMException&&e.code===DOMException.ABORT_ERR,r.error=e):"status"in e&&(r.response=e,r.responseType=e.type,r.status=e.status,r.isAborted=!1),t.notify(r)};e.then(f(r),f(r))}(e,t,l)}))}(e,t)})).stop;return e}}))),Pr}var Fr=1;function qr(t,e,n){var
2024-04-24 02:18:08 UTC	16384	IN	Data Raw: 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 7d 7d 29 29 7d 28 72 29 29 2c 51 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 46 69 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 6e 3f 5a 74 28 7b 6e 61 6d 65 3a 74 2c 6d 65 73 73 61 67 65 3a 65 2c 73 74 61 63 6b 3a 5b 7b 66 75 6e 63 3a 22 3f 22 2c 75 72 6c 3a 6e 2c 6c 69 6e 65 3a 6e 75 6c 6c 21 3d 72 3f 72 3a 76 6f 69 64 20 30 2c 63 6f 6c 75 6d 6e 3a 6e 75 6c 6c 21 3d 69 3f 69 3a 76 6f 69 64 20 30 7d 5d 7d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 71 69 28 65 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 58 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: rn r.observe(),function(){r.disconnect()}}}))}(r)),Q.apply(void 0,n)}function Fi(t,e,n,r,i){return n?Zt({name:t,message:e,stack:[{func:"?",url:n,line:null!=r?r:void 0,column:null!=i?i:void 0}]}):void 0}function qi(e,n,r,i){var o=new X;return function(e){v
2024-04-24 02:18:08 UTC	16384	IN	Data Raw: 74 66 75 6c 5f 70 61 69 6e 74 3a 62 74 28 6e 75 6c 6c 3d 3d 3d 28 67 3d 74 2e 69 6e 69 74 69 61 6c 56 69 65 77 4d 65 74 72 69 63 73 2e 6c 61 72 67 65 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 67 3f 76 6f 69 64 20 30 3a 67 2e 76 61 6c 75 65 29 2c 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 5f 74 61 72 67 65 74 5f 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 3d 3d 3d 28 79 3d 74 2e 69 6e 69 74 69 61 6c 56 69 65 77 4d 65 74 72 69 63 73 2e 6c 61 72 67 65 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 79 2e 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 2c 6c 6f 61 64 5f 65 76 65 6e 74 3a 62 74 28 6e 75 6c 6c 3d 3d 3d 28 68 3d 74 2e Data Ascii: tful_paint:bt(null===(g=t.initialViewMetrics.largestContentfulPaint)\|\|void 0===g?void 0:g.value),largest_contentful_paint_target_selector:null===(y=t.initialViewMetrics.largestContentfulPaint)\|\|void 0===y?void 0:y.targetSelector,load_event:bt(null===(h=t.
2024-04-24 02:18:08 UTC	7826	IN	Data Raw: 72 6e 20 65 2e 67 65 74 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 4c 69 6e 6b 28 29 7d 29 29 2c 73 74 61 72 74 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 52 65 63 6f 72 64 69 6e 67 3a 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 74 61 72 74 28 29 2c 67 65 28 7b 66 65 61 74 75 72 65 3a 22 73 74 61 72 74 2d 73 65 73 73 69 6f 6e 2d 72 65 70 6c 61 79 2d 72 65 63 6f 72 64 69 6e 67 22 7d 29 7d 29 29 2c 73 74 6f 70 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 52 65 63 6f 72 64 69 6e 67 3a 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 29 29 7d 2c 6d 3d 62 28 7b 76 65 72 73 69 6f 6e 3a 22 35 2e 31 36 2e 30 22 2c 6f 6e 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 29 7d 7d 2c 70 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: rn e.getSessionReplayLink()})),startSessionReplayRecording:f((function(){e.start(),ge({feature:"start-session-replay-recording"})})),stopSessionReplayRecording:f((function(){return e.stop()}))},m=b({version:"5.16.0",onReady:function(t){t()}},p),Object.def
2024-04-24 02:18:08 UTC	494	IN	Data Raw: 74 69 6f 6e 56 69 74 61 6c 3a 4d 2e 73 74 61 72 74 44 75 72 61 74 69 6f 6e 56 69 74 61 6c 2c 73 74 6f 70 44 75 72 61 74 69 6f 6e 56 69 74 61 6c 3a 4d 2e 73 74 6f 70 44 75 72 61 74 69 6f 6e 56 69 74 61 6c 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 29 7d 29 29 7d 7d 7d 29 2c 28 62 61 3d 4f 2c 7b 73 74 61 72 74 3a 4f 2c 73 74 6f 70 3a 4f 2c 6f 6e 52 75 6d 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 68 61 28 74 2c 7b 65 72 72 6f 72 54 79 70 65 3a 22 73 6c 69 6d 2d 70 61 63 6b 61 67 65 22 7d 29 7d 28 65 29 7d 7d 2c 69 73 52 Data Ascii: tionVital:M.startDurationVital,stopDurationVital:M.stopDurationVital,stop:function(){s.forEach((function(t){return t()}))}}}),(ba=O,{start:O,stop:O,onRumStart:function(t,e){ba=function(){return function(t){return ha(t,{errorType:"slim-package"})}(e)}},isR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49910	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:08 UTC	2224	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7
2024-04-24 02:18:08 UTC	1132	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 3f 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 54 52 4e 5f 54 44 4c 5f 30 35 26 75 74 6d 5f 73 6f 75 72 63 65 3d 73 65 6e 64 67 72 69 64 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 74 72 6b 3d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=
2024-04-24 02:18:08 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:08 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:08 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:08 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49912	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:09 UTC	813	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:09 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:21 GMT ETag: "16057a2d3b51238bbd5f3eef09bf2908" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 54xaCarIwGTdozaTSHuEoAxTMwUbNK2Wnt8XUzYFSkZ_5FXSZpOYWA== Age: 48
2024-04-24 02:18:09 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49911	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:09 UTC	2006	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:18:10 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:10 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49913	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:09 UTC	730	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/bundle.cf3813e004e0be548281.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:10 UTC	524	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 290377 Connection: close Date: Wed, 24 Apr 2024 02:17:23 GMT Last-Modified: Thu, 28 Mar 2024 15:00:15 GMT ETag: "18dc1214c0129d05f9be4606a6a39660" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ad3c0e63e032c703faf8afd0daa0f23c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: udEC2fL-5TW0psIRVTNb3EKb5XX_PmsUSLzkidgNA9W1hFc2v3hs4A== Age: 48
2024-04-24 02:18:10 UTC	15860	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 63 66 33 38 31 33 65 30 30 34 65 30 62 65 35 34 38 32 38 31 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 38 31 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3b 72 2e 72 28 74 29 2c Data Ascii: /! For license information please see bundle.cf3813e004e0be548281.js.LICENSE.txt /!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),
2024-04-24 02:18:10 UTC	130	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 29 29 7d 2c 58 3d 7b 73 68 61 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 65 3b 72 2e 6c 65 6e 67 74 68 3b 72 3d 72 5b 30 5d 29 74 2e 70 75 73 68 28 72 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 7d 2c 66 6c 61 74 74 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b Data Ascii: ion(t){return e[t]}))},X={shape:function(e){for(var t=[],r=e;r.length;r=r[0])t.push(r.length);return t},flatten:function(e,t,r,n){
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 76 61 72 20 69 3d 31 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 69 2a 3d 74 5b 61 5d 3b 65 6c 73 65 20 69 3d 30 3b 76 61 72 20 6f 3d 6e 7c 7c 56 2e 61 6c 6c 6f 63 54 79 70 65 28 72 2c 69 29 3b 73 77 69 74 63 68 28 74 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 2b 2b 6e 29 72 5b 6e 5d 3d 65 5b 6e 5d 7d 28 65 2c 74 5b 30 5d 2c 6f 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 3b 61 3c 74 3b 2b 2b 61 29 66 6f 72 28 76 61 72 20 6f 3d 65 5b 61 5d Data Ascii: var i=1;if(t.length)for(var a=0;a<t.length;++a)i*=t[a];else i=0;var o=n\|\|V.allocType(r,i);switch(t.length){case 0:break;case 1:!function(e,t,r){for(var n=0;n<t;++n)r[n]=e[n]}(e,t[0],o);break;case 2:!function(e,t,r,n){for(var i=0,a=0;a<t;++a)for(var o=e[a]
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 41 28 63 2c 6e 29 2c 63 2e 77 69 64 74 68 3d 30 2c 63 2e 68 65 69 67 68 74 3d 30 2c 44 28 63 2c 65 29 2c 63 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 7c 7c 28 6e 2e 77 69 64 74 68 3e 3e 75 29 2d 6f 2c 63 2e 68 65 69 67 68 74 3d 63 2e 68 65 69 67 68 74 7c 7c 28 6e 2e 68 65 69 67 68 74 3e 3e 75 29 2d 73 2c 43 28 6e 2e 74 79 70 65 3d 3d 3d 63 2e 74 79 70 65 26 26 6e 2e 66 6f 72 6d 61 74 3d 3d 3d 63 2e 66 6f 72 6d 61 74 26 26 6e 2e 69 6e 74 65 72 6e 61 6c 66 6f 72 6d 61 74 3d 3d 3d 63 2e 69 6e 74 65 72 6e 61 6c 66 6f 72 6d 61 74 2c 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 66 6f 72 6d 61 74 20 66 6f 72 20 74 65 78 74 75 72 65 2e 73 75 62 69 6d 61 67 65 22 29 2c 43 28 6f 3e 3d 30 26 26 73 3e 3d 30 26 26 6f 2b 63 2e 77 69 64 74 68 3c 3d 6e 2e Data Ascii: eturn A(c,n),c.width=0,c.height=0,D(c,e),c.width=c.width\|\|(n.width>>u)-o,c.height=c.height\|\|(n.height>>u)-s,C(n.type===c.type&&n.format===c.format&&n.internalformat===c.internalformat,"incompatible format for texture.subimage"),C(o>=0&&s>=0&&o+c.width<=n.
2024-04-24 02:18:10 UTC	394	IN	Data Raw: 22 2c 59 6e 2c 22 2d 22 2c 6c 29 29 2c 5b 63 2c 6c 2c 6e 2c 69 5d 7d 29 29 7d 69 66 28 65 20 69 6e 20 69 29 7b 76 61 72 20 66 3d 69 5b 65 5d 2c 70 3d 5a 69 28 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 6e 3d 74 2e 69 6e 76 6f 6b 65 28 72 2c 66 29 3b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 73 73 65 72 74 28 72 2c 6e 2b 22 26 26 74 79 70 65 6f 66 20 22 2b 6e 2b 27 3d 3d 3d 22 6f 62 6a 65 63 74 22 27 2c 22 69 6e 76 61 6c 69 64 20 22 2b 65 29 7d 29 29 3b 76 61 72 20 69 3d 74 2e 73 68 61 72 65 64 2e 63 6f 6e 74 65 78 74 2c 61 3d 72 2e 64 65 66 28 6e 2c 22 2e 78 7c 30 22 29 2c 6f 3d 72 2e 64 65 66 28 6e 2c 22 2e 79 7c 30 22 29 2c 73 3d 72 2e 64 65 66 28 27 22 77 69 64 74 68 22 20 69 6e 20 27 2c 6e 2c 22 Data Ascii: ",Yn,"-",l)),[c,l,n,i]}))}if(e in i){var f=i[e],p=Zi(f,(function(t,r){var n=t.invoke(r,f);C.optional((function(){t.assert(r,n+"&&typeof "+n+'==="object"',"invalid "+e)}));var i=t.shared.context,a=r.def(n,".x\|0"),o=r.def(n,".y\|0"),s=r.def('"width" in ',n,"
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 74 2e 61 73 73 65 72 74 28 72 2c 73 2b 22 3e 3d 30 26 26 22 2b 75 2b 22 3e 3d 30 22 2c 22 69 6e 76 61 6c 69 64 20 22 2b 65 29 7d 29 29 2c 5b 61 2c 6f 2c 73 2c 75 5d 7d 29 29 3b 72 65 74 75 72 6e 20 74 26 26 28 70 2e 74 68 69 73 44 65 70 3d 70 2e 74 68 69 73 44 65 70 7c 7c 74 2e 74 68 69 73 44 65 70 2c 70 2e 63 6f 6e 74 65 78 74 44 65 70 3d 70 2e 63 6f 6e 74 65 78 74 44 65 70 7c 7c 74 2e 63 6f 6e 74 65 78 74 44 65 70 2c 70 2e 70 72 6f 70 44 65 70 3d 70 2e 70 72 6f 70 44 65 70 7c 7c 74 2e 70 72 6f 70 44 65 70 29 2c 70 7d 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 58 69 28 74 2e 74 68 69 73 44 65 70 2c 74 2e 63 6f 6e 74 65 78 74 44 65 70 2c 74 2e 70 72 6f 70 44 65 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 73 68 61 72 65 64 2e 63 Data Ascii: t.assert(r,s+">=0&&"+u+">=0","invalid "+e)})),[a,o,s,u]}));return t&&(p.thisDep=p.thisDep\|\|t.thisDep,p.contextDep=p.contextDep\|\|t.contextDep,p.propDep=p.propDep\|\|t.propDep),p}return t?new Xi(t.thisDep,t.contextDep,t.propDep,(function(e,t){var r=e.shared.c
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 7c 6e 2e 62 75 66 66 65 72 2b 22 2e 64 74 79 70 65 22 29 2c 72 5b 73 5d 3d 6e 2c 6e 7d 29 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 6f 5b 65 5d 3d 5a 69 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 76 61 72 20 69 3d 72 2e 69 6e 76 6f 6b 65 28 6e 2c 74 29 2c 61 3d 72 2e 73 68 61 72 65 64 2c 6f 3d 72 2e 63 6f 6e 73 74 61 6e 74 73 2c 73 3d 61 2e 69 73 42 75 66 66 65 72 41 72 67 73 2c 75 3d 61 2e 62 75 66 66 65 72 3b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 73 73 65 72 74 28 6e 2c 69 2b 22 26 26 28 74 79 70 65 6f 66 20 22 2b 69 2b 27 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 27 2b 69 Data Ascii: \|n.buffer+".dtype"),r[s]=n,n}))})),Object.keys(i).forEach((function(e){var t=i[e];o[e]=Zi(t,(function(r,n){var i=r.invoke(n,t),a=r.shared,o=r.constants,s=a.isBufferArgs,u=a.buffer;C.optional((function(){r.assert(n,i+"&&(typeof "+i+'==="object"\|\|typeof '+i
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 22 2c 6f 2c 22 29 7b 22 2c 75 2c 22 2e 65 6e 61 62 6c 65 28 22 2c 69 2c 22 29 7d 65 6c 73 65 7b 22 2c 75 2c 22 2e 64 69 73 61 62 6c 65 28 22 2c 69 2c 22 29 7d 22 2c 6c 2c 22 2e 22 2c 6e 2c 22 3d 22 2c 6f 2c 22 3b 22 29 2c 72 28 73 29 2c 74 28 22 69 66 28 22 2c 6f 2c 22 21 3d 3d 22 2c 6c 2c 22 2e 22 2c 6e 2c 22 29 7b 22 2c 73 2c 22 7d 22 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 54 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 2c 6f 2c 73 3d 54 5b 6e 5d 2c 66 3d 77 5b 6e 5d 2c 70 3d 65 2e 62 6c 6f 63 6b 28 29 3b 69 66 28 70 28 75 2c 22 2e 22 2c 73 2c 22 28 22 29 2c 4f 65 28 66 29 29 7b 76 61 72 20 64 3d 66 2e 6c 65 6e 67 74 68 3b 69 3d 65 2e 67 6c 6f 62 61 6c 2e 64 65 66 28 63 2c 22 2e 22 2c 6e 29 2c 6f 3d 65 Data Ascii: ",o,"){",u,".enable(",i,")}else{",u,".disable(",i,")}",l,".",n,"=",o,";"),r(s),t("if(",o,"!==",l,".",n,"){",s,"}")})),Object.keys(T).forEach((function(n){var i,o,s=T[n],f=w[n],p=e.block();if(p(u,".",s,"("),Oe(f)){var d=f.length;i=e.global.def(c,".",n),o=e
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 73 70 65 63 69 66 79 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 61 74 74 72 69 62 75 74 65 22 29 3b 76 61 72 20 6c 3d 7b 7d 2c 66 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 3b 66 2e 6c 65 6e 67 74 68 3d 69 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 70 29 7b 76 61 72 20 64 2c 68 3d 69 5b 70 5d 2c 6d 3d 66 5b 70 5d 3d 6e 65 77 20 7a 72 2c 76 3d 68 2e 64 61 74 61 7c 7c 68 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 76 29 7c 7c 65 28 76 29 7c 7c 55 28 76 29 3f 28 6e 2e 62 75 66 66 65 72 73 5b 70 5d 26 26 28 64 3d 6e 2e 62 75 66 66 65 72 73 5b 70 5d 2c 65 28 76 29 26 26 64 2e 5f 62 75 66 66 65 72 2e 62 79 74 65 4c 65 6e 67 74 68 3e 3d 76 2e 62 79 74 65 4c 65 6e 67 74 68 3f 64 2e 73 75 62 64 61 74 61 28 76 29 Data Ascii: specify at least one attribute");var l={},f=n.attributes;f.length=i.length;for(var p=0;p<i.length;++p){var d,h=i[p],m=f[p]=new zr,v=h.data\|\|h;Array.isArray(v)\|\|e(v)\|\|U(v)?(n.buffers[p]&&(d=n.buffers[p],e(v)&&d._buffer.byteLength>=v.byteLength?d.subdata(v)
2024-04-24 02:18:10 UTC	16384	IN	Data Raw: 63 68 6d 65 6e 74 2c 72 2c 6e 29 2c 79 28 61 2e 64 65 70 74 68 53 74 65 6e 63 69 6c 41 74 74 61 63 68 6d 65 6e 74 2c 72 2c 6e 29 2c 61 2e 77 69 64 74 68 3d 66 2e 77 69 64 74 68 3d 72 2c 61 2e 68 65 69 67 68 74 3d 66 2e 68 65 69 67 68 74 3d 6e 2c 6b 28 61 29 2c 66 7d 2c 5f 72 65 67 6c 54 79 70 65 3a 22 66 72 61 6d 65 62 75 66 66 65 72 22 2c 5f 66 72 61 6d 65 62 75 66 66 65 72 3a 61 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 28 61 29 2c 78 28 61 29 7d 2c 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 2e 73 65 74 46 42 4f 28 7b 66 72 61 6d 65 62 75 66 66 65 72 3a 66 7d 2c 65 29 7d 7d 29 7d 72 65 74 75 72 6e 20 74 28 73 2c 7b 67 65 74 46 72 61 6d 65 62 75 66 66 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 Data Ascii: chment,r,n),y(a.depthStencilAttachment,r,n),a.width=f.width=r,a.height=f.height=n,k(a),f},_reglType:"framebuffer",_framebuffer:a,destroy:function(){j(a),x(a)},use:function(e){s.setFBO({framebuffer:f},e)}})}return t(s,{getFramebuffer:function(e){if("functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49914	13.226.228.126	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:10 UTC	560	OUT	GET /packs/js/wallpaper-api-v2.js HTTP/1.1 Host: prod-cdn.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:10 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10327 Connection: close Date: Fri, 19 Apr 2024 14:49:41 GMT Last-Modified: Tue, 27 Jun 2023 07:15:46 GMT ETag: "4b0b7d731b18d770c7c8e83ccbb777f8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e8b8ac2bd1c41091f8a91957b9166c02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: p-cUgK45cgwPGxnnxLCEhd3d-l0IEZVckwdz_2GZirio_G9copQQ1Q== Age: 386910
2024-04-24 02:18:10 UTC	10327	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49916	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:10 UTC	2374	OUT	GET /undefined HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:11 UTC	674	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 7084 Connection: close Date: Wed, 24 Apr 2024 02:18:11 GMT ETag: "1bac-IqYh/scqwg6iJo6XRC7Bmz3b2Aw" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ikMJpGnMEHT4TC02nClmXT9uGdKqg6sX6KsOCcvPOa4UMzIlqQvWNA==
2024-04-24 02:18:11 UTC	7084	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49915	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:10 UTC	2580	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:10 UTC	104	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 34 30 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":40,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-24 02:18:11 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Wed, 24 Apr 2024 02:18:11 GMT ETag: "28-Uwz6iPL7Ppzoc7Te77e1ppN2noQ" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Fr5tp_KhJlKX3xR6K9Or_u2HvFhDChrah5Pj3cTnRSMjw65vnh35-w==
2024-04-24 02:18:11 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 34 30 7d Data Ascii: {"status":"ok","metric":"INP","time":40}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49917	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:10 UTC	2580	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:10 UTC	122	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 37 36 34 31 30 36 38 35 39 38 34 30 31 33 33 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 64 6f 77 6e 6c 6f 61 64 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.004764106859840133,"tags":{"rating":"good","page_group":"/downloads","country":"US"}}
2024-04-24 02:18:11 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Wed, 24 Apr 2024 02:18:11 GMT ETag: "3a-8MlwrWvyP6zvgrW2olfc30rRTYA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 ad3c0e63e032c703faf8afd0daa0f23c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OsSHRXTQ1TiIp9a_VdYjsHKUNbbd5GTb6a59U6qUjBgQssP56nFTMw==
2024-04-24 02:18:11 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 34 37 36 34 31 30 36 38 35 39 38 34 30 31 33 33 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.004764106859840133}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49918	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	799	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:11 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: SAChgdxH21sMVioPxvjy9TQfnlu_c6HGHoMK7IjLWQpU38bOlzZxVA== Age: 47
2024-04-24 02:18:11 UTC	14839	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49919	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	788	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:11 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1002077 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:16 GMT ETag: "25ee8e8c018a2d9addc20a03b331b97a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: cs1LgzaQBIStHIwxqRH0isiGyg7_1Qn1BmNORyzArIU3GRhVM-a6EQ== Age: 47
2024-04-24 02:18:11 UTC	15888	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 00 00 00 05 a0 08 03 00 00 00 a5 de ea ed 00 00 03 00 50 4c 54 45 47 70 4c 15 14 15 5e 89 77 6a 98 85 6a 98 85 6a 98 85 6a 97 84 69 98 85 6a 98 85 69 98 85 70 9f 8c 49 66 5a 31 40 39 57 7d 6d 6d 9b 88 6a 98 87 43 5c 52 0d 10 0f 11 16 14 52 72 65 09 0c 0b 38 4c 44 75 a4 90 5a 8c 77 14 14 15 6a 98 85 6c 96 85 69 97 84 69 97 85 72 77 79 67 93 82 74 8b 84 68 95 84 79 70 7a 64 91 7f 58 8c 76 04 04 04 04 04 04 01 01 01 0a 0a 0a 01 01 01 04 04 04 03 04 03 0f 0f 10 04 04 04 02 02 02 09 09 09 02 03 03 07 07 07 05 05 05 01 01 00 06 06 06 00 00 00 01 01 01 00 00 00 60 97 e2 7b a8 e6 5a 8a cb 2e 41 68 10 17 25 05 02 01 4a 72 a7 65 9a e3 65 98 de 60 97 e2 5d 92 da 3f 61 8f 25 32 52 5f 95 de 53 7e ba 6b 56 5e 1a Data Ascii: PNGIHDRPLTEGpL^wjjjjijipIfZ1@9W}mmjC\RRre8LDuZwjliirwygthypzdXv`{Z.Ah%Jree`]?a%2R_S~kV^
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 8e b6 cd 25 25 e0 1a 6c 32 91 94 09 fd e8 65 93 64 04 22 91 46 52 44 02 2e 09 6e 75 3e 1d 9f 1e 2e 7b 09 c2 35 f3 79 6d 77 78 39 9f ef b7 35 de ee bf 6e 9f 63 82 20 d2 4c 42 66 96 49 24 c5 4d d4 2b 37 25 50 24 a9 4d a2 85 e5 75 34 33 cb 8f eb a2 65 59 a4 a8 85 e0 36 49 fd a6 ef 6c c7 6f 20 61 d5 fd eb f9 97 28 a0 da 9d ce 8f cf eb 6a 89 91 4d 35 ca f2 aa 19 cd 8f c9 d0 b3 2c cb 24 8a 89 dc 96 b8 3f 50 f7 2a b3 ae af f7 7b 35 f8 6e b7 fb 45 5c ee 15 45 aa f1 8f 37 bd 99 d1 ed 84 37 b3 2c a3 48 84 6c 8f c7 c3 af 71 25 bf b6 90 94 04 12 50 b0 01 65 fb f6 33 9d 74 1e b7 d6 70 ab 58 35 40 50 26 9a 84 7e 07 4d 82 b1 49 a8 12 45 49 69 28 4e a2 55 af 87 6b f1 cb 7e ea b9 39 3d bd 95 55 3f bc 9e be 3d 5f 0e 7f dc a7 a3 75 05 42 66 94 68 34 8b 9c 04 20 b8 36 49 ec Data Ascii: %%l2ed"FRD.nu>.{5ymwx95nc LBfI$M+7%P$Mu43eY6Ilo a(jM5,$?P*{5nE\E77,Hlq%Pe3tpX5@P&~MIEIi(NUk~9=U?=_uBfh4 6I
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 8c 30 9e 9e 1d 44 44 3c ee 67 fc 7c b2 54 e2 94 f5 1b 11 40 11 2c 59 7f 2d d8 77 9f 71 2f 08 7f ec 03 11 c3 86 b2 34 6f 8c 34 6e 18 89 41 85 4f bc cf ca 7a 60 ad 28 9d 15 07 d9 92 f1 a1 e3 3a cc b0 aa 30 03 4b 18 35 8c d6 2e b5 d3 c5 d8 48 03 dc b0 0b 39 69 78 3e 6e 6f f7 fe 80 62 8c 58 4b da 07 d2 c7 73 3f f0 3f 98 82 df bf 79 f3 e6 ed eb 0f 17 14 fd 60 f9 c5 0b 5c 4f 62 df 1a 9b d8 58 62 73 b1 c0 a0 5c 3f 38 07 92 27 e2 b5 5c ad f8 eb ec f3 f6 ed 3c ce bc 39 f7 3c cd 27 a9 9a ff 49 c2 0b 34 7f ea 8e fe ef 1a 80 87 bd cc 79 b3 4c 29 a7 4c 2d a4 44 a3 b9 0b 3a 86 c7 08 8f 07 53 b3 4f f3 41 60 98 cf 19 11 51 47 02 99 68 36 7b d5 66 d1 6e 57 93 cc 27 f9 91 4a b6 29 51 0b 3f d3 64 7d d6 33 7c cb 39 31 40 97 28 f3 39 79 20 bf 04 e2 7d dc af 84 eb a2 79 98 b2 Data Ascii: 0DD<g\|T@,Y-wq/4o4nAOz`(:0K5.H9ix>nobXKs??y`\ObXbs\?8'\<9<'I4yL)L-D:SOA`QGh6{fnW'J)Q?d}3\|91@(9y }y
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: f9 ff cd dd 7e 26 8f df f3 a7 00 91 a7 b2 02 f3 3b 28 f3 6d b2 74 ef ef ef ef ee ef 4a e4 36 71 a2 b8 50 f9 f1 f1 93 9f 3d d9 df dd d9 1b 4b da 18 d0 aa 03 08 c7 6e 1a 95 d5 64 04 90 e3 35 e2 d7 d7 30 31 94 9d f2 ca 70 f8 42 5e da 38 87 bb b3 e3 c2 f8 37 d1 b4 16 62 a8 d7 98 1c 27 fd 9c 07 58 c8 67 67 62 e3 6f 44 0c f4 8e 9c b4 f4 e3 75 9f 8f 76 d3 f0 bd 7b df 7d 77 ef 6b 59 81 85 7f 7c 90 af 05 83 a8 03 45 87 ef 5d 8c 5c 97 02 30 5c 3a b0 eb 02 71 2a 1c 0c 9a e3 7c 0b f2 fe b8 3e 3d 2b f0 d3 35 2d 2d 20 0c 68 8d df 55 2f 43 2f 08 00 ce b0 70 ee f6 ed f7 df e8 d9 95 24 49 92 24 59 1c d5 99 f4 7f 19 00 a8 0b 79 99 57 ef d9 ba c3 c1 0e dd 2c d1 79 4e a9 17 dd 98 da 2d ef 0a 5f 2f 71 2a 89 29 a6 c4 f6 66 7e 22 7d e5 39 00 bc b9 7a 7a d5 ca b9 af 99 24 c9 e2 Data Ascii: ~&;(mtJ6qP=Knd501pB^87b'XggboDuv{}wkY\|E]\0\:q\|>=+5-- hU/C/p$I$YyW,yN-_/q)f~"}9zz$
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 3f 01 00 87 a6 cb 85 ec 4d f6 9b 99 9b 1c fd a1 ff 43 6e 56 8c 48 25 91 24 85 bf 26 d6 bf 28 f2 a9 e1 9b 93 22 ba 37 3b ff d6 6f 3e 0e f5 fe 2d c4 68 56 84 aa b9 71 ff f7 eb 11 ce f0 ae 6b 55 68 4c ba 95 ec a2 40 0e d2 8b 72 23 d5 ba 9b d3 3a 11 cc ad 42 3d e4 3d 64 26 21 de d7 36 80 28 8c 80 3a 6d d1 8a a1 c1 10 31 ab 2d 04 dc dc 5e 4e 2c a4 01 81 a9 93 b1 48 ac f6 85 98 ec c4 7f 8b 7e 54 50 e3 c7 3a 10 a8 a7 b3 71 7a 75 1b ef 30 8f 97 c5 a1 4d bf 4e fa 3a c3 db 23 c0 5e 21 18 0e a4 fd 9d bf d8 77 d9 17 37 0d 01 3d 25 32 ea a8 ee 44 a7 85 21 83 12 d9 2f e9 26 9e ad 98 24 5c 06 4f 05 9b 3c 1d 26 66 15 33 2f 14 1a e5 7a 5e 0e e4 d3 e8 3b 6c f2 73 b0 f3 4c c0 a8 05 63 00 84 06 2f 01 90 96 20 65 59 6c 6f 2c 9a b2 f5 a7 f9 6b ac 0d 1d 30 1d a7 20 67 00 1b b5 Data Ascii: ?MCnVH%$&("7;o>-hVqkUhL@r#:B==d&!6(:m1-^N,H~TP:qzu0MN:#^!w7=%2D!/&$\O<&f3/z^;lsLc/ eYlo,k0 g
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 9c c8 87 2d 1f 9a 11 c9 cd 8d 86 0b 6a 43 80 2c 04 54 e3 98 2a e1 a0 c9 ef 64 c7 18 b8 83 a5 7b 12 f3 1c f9 2b 96 63 d5 1f 5e 5c 91 9f 24 bd 3d 7c c0 3c 8d 60 6a 89 02 f7 ee 7f 67 60 68 37 73 c1 c2 5d 4e 13 a3 db 75 03 24 48 0c c8 5b 6f 34 00 fe 67 33 e3 79 81 bc 50 91 e0 20 45 f1 e5 5c 3b 97 6c ae ae ac 72 76 a3 37 56 ff 6b ac b1 99 bc 08 03 7b 54 c8 7c 65 35 6c f2 3f 1a 99 53 a3 b6 6d 4f 01 1c 1d 4f 4f c7 61 2b 50 c2 11 dc 92 fa 87 57 36 5b cd 2c df 69 50 1f cd c0 91 0b 00 66 b1 fd 68 59 d1 6b 30 cb 32 03 57 95 8b fd be 21 8d 8c 4e b9 90 75 5a d1 ab f4 9c bc a5 17 88 e5 08 2d d6 54 a4 3a 2b ff f9 6a 20 a0 3e c2 bf 96 2f c4 8d 79 29 76 14 00 7a 61 a0 1d 73 5d 4f 6d 91 f0 cb 0b 84 a3 17 7a c4 71 ca 48 c5 6a 62 91 1c ba 63 96 83 b4 8c 94 a6 c3 cc 8b e9 ca Data Ascii: -jC,T*d{+c^\$=\|<`jg`h7s]Nu$H[o4g3yP E\;lrv7Vk{T\|e5l?SmOOOa+PW6[,iPfhYk02W!NuZ-T:+j >/y)vzas]OmzqHjbc
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 67 b4 6b 5e 3e 07 f8 c7 93 59 2c bc b3 0b 30 fb 1a 77 92 61 4a f2 08 c4 03 00 dd 66 6b ba 6e 34 0d 67 bd 39 22 27 4f 1e 2c 6f 7f 17 59 23 ab 5d 61 cf 3d 4f 5c ce 05 31 07 b6 6b 02 00 f3 b2 5f e0 63 f6 84 87 2a f7 2f 34 20 bb 20 3e cf a5 97 c1 80 1e 2b 1d 02 69 7f b4 a1 22 be 02 7f 5d 3b 44 b0 8c 56 bf 13 d7 0c 6d d2 00 67 bd 94 c7 b7 e9 f4 e2 e8 ea a6 24 e0 63 59 a5 fc 0f bc f1 8d f6 71 64 be 89 90 89 22 57 26 3f 76 61 76 56 05 a4 b9 16 fe 9b bd 36 d2 ce 0c 12 0e 9d 8c 2f 9f e1 44 04 c8 67 39 18 82 ee 4b af e9 5f 07 d1 df 25 83 9d 89 2e 2d 3c f6 ac 24 e4 eb c5 bf ab 5e 5e 7d ed 7c d3 d9 28 91 76 bc f2 fe c8 56 2c e3 93 ab 46 9f b5 cf 35 1a fc 0a 0d bc 14 7b a9 f8 0b c2 38 d1 7e fe be b5 8b b7 c1 5a e9 12 49 83 e5 a0 25 2d 13 4d 55 84 f6 5d 7f f0 d9 cf 3e Data Ascii: gk^>Y,0waJfkn4g9"'O,oY#]a=O\1k_c*/4 >+i"];DVmg$cYqd"W&?vavV6/Dg9K_%.-<$^^}\|(vV,F5{8~ZI%-MU]>
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 0a b7 4c f1 42 48 db 28 02 8e bd b0 b4 aa 15 14 40 ea c2 e0 2f a9 e2 7d cc 59 f8 d0 e7 3e 4c d3 5f 91 d9 d3 ac 33 25 22 02 82 25 ae 60 2d 13 00 7a cc 75 1a 91 80 b9 42 25 db ed e3 37 c9 dc b8 dc 6a 76 8e 93 df 61 ba 33 fd e1 cf 9d d5 2e d6 d9 eb 65 48 7e 1e 39 cb 0d e3 88 e3 3b 7e 21 55 85 a6 52 0c bb d9 56 7a 08 bc 0e fe 08 00 b9 4c 07 75 7f 6e 31 92 6b 3f d2 58 e7 18 1a a0 73 7b 1c 6a 59 e4 76 b1 56 d1 cb 43 e5 a0 2f a5 f4 df 5e fc b3 c5 0a 83 17 97 d8 e1 d5 4b 2f 2b 84 10 f7 2b 41 77 bf 89 ad 58 9f fc af 46 67 00 de 2f 12 f4 2b 64 fe be a2 07 a1 81 af 35 31 71 ec f8 65 c9 a9 23 17 2f 5c 50 34 e5 71 e7 d6 58 4b 46 00 de f8 eb 29 27 dd 57 b0 6e 23 bd 47 56 96 45 f4 bc 21 5e 0a b7 58 d5 f9 00 5d 2e c8 af 1b a8 e7 cd ae 39 8c 2f e2 ff c4 6e 48 7f d0 1c 8c Data Ascii: LBH(@/}Y>L_3%"%`-zuB%7jva3.eH~9;~!URVzLun1k?Xs{jYvVC/^K/++AwXFg/+d51qe#/\P4qXKF)'Wn#GVE!^X].9/nH
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 7b 1f 74 45 39 4a c3 39 b5 f0 9c 25 36 99 c3 81 f1 a2 09 9e d8 8a ed a4 fd 35 f1 bf f2 dd 3a 86 97 ad 5c c7 ce f5 9c 96 04 b2 8d 8e 56 b6 22 2c 79 73 13 32 7a 92 66 e0 52 9e 9b ed 15 2e 54 9b 15 59 a8 67 99 82 30 c2 a3 57 1b f2 56 ba 3b c7 55 c0 c4 0c c9 18 e1 f9 99 91 4e a7 db a3 c4 17 e0 6c e8 4e cf ce ce 3f c7 f7 99 13 77 52 44 24 22 4e 75 51 ee 97 89 a5 fd ce 71 89 63 0a 63 99 9d 1e e9 d2 2b d9 fb af 8f 1d 11 f5 59 08 c4 8f 08 89 47 4a 85 12 9b 1f ca 56 f5 bf 7e db 51 08 80 7d 07 36 e8 01 fe d6 13 88 f6 f8 e6 1f 10 02 81 80 6c 68 dc 7d fb 3b df d8 24 db 79 d0 35 d6 0a 15 bd 1c 3e 7d fc 14 bc b4 5a 90 87 f5 7b 29 d6 e5 44 ac cd c1 67 c5 11 7b 02 43 8d 69 88 54 c8 21 4f 03 e8 29 1a 1a 0c 78 0a 1b cc b3 f5 15 21 b8 97 ba 1e df 51 b9 af b2 81 23 44 43 8c Data Ascii: {tE9J9%65:\V",ys2zfR.TYg0WV;UNlN?wRD$"NuQqcc+YGJV~Q}6lh};$y5>}Z{)Dg{CiT!O)x!Q#DC
2024-04-24 02:18:11 UTC	16384	IN	Data Raw: 0e 5a a6 ec 81 7a b6 47 4c 8c be ae c7 7a b2 ee 31 02 c6 c0 f0 15 97 d9 4b fd 7e 08 7d 50 60 13 5d 86 eb 8b 2a 03 97 45 6c ca d0 30 85 58 8c 94 c5 12 b5 40 20 70 6c 52 cd 3c 30 54 ce d0 16 79 6d 34 36 23 66 59 f8 a7 59 c2 dd 7c 72 81 8a 5f 5e f2 96 13 21 c3 88 7f 95 34 bf 42 45 90 b1 89 c8 a9 d4 d2 4f 7d 5c be 5f 91 1f 7a 6d f4 08 28 ea a6 7b 17 95 85 1b dc c2 9b 8d 9f f1 08 dd ca f6 f9 1a b1 1c 7f 4c d7 71 0e b7 40 ef 30 b1 33 d5 0d 32 d1 8c 07 49 7f 6d dd 0f 7e 87 21 95 16 05 43 f6 ca 75 6a 3a 80 d1 fe e8 e7 04 40 08 80 6c 7e fe 23 57 b2 2d 36 6c be cd ca 86 1a c6 77 55 f5 e4 02 65 cb 79 01 ac 23 54 f4 69 14 1f c3 e1 f9 93 5d 3c 90 74 42 ad 28 fe 2b 5f 21 00 4e 69 8d 53 00 1a 55 75 73 96 e9 55 08 60 64 2c 89 69 c4 32 d1 1e 47 7d ce 09 cc f2 72 f9 b2 2a Data Ascii: ZzGLz1K~}P`]El0X@ plR<0Tym46#fYY\|r_^!4BEO}\_zm({Lq@032Im~!Cuj:@l~#W-6lwUey#Ti]<tB(+_!NiSUusU`d,i2G}r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49920	34.149.169.145	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	963	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.30.1%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Atransfer-web%2Cversion%3Ac98be9eb9f206547aea10d46f253ea37ea3d3db7&dd-api-key=pubabbc81b16855ec184b0753bf36600da1&dd-evp-origin-version=4.30.1&dd-evp-origin=browser&dd-request-id=ce37528d-2492-425c-b8ac-ab9224132f1d&batch_time=1713925089914 HTTP/1.1 Host: rum.browser-intake-datadoghq.eu Connection: keep-alive Content-Length: 644 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:11 UTC	644	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 74 65 6c 65 6d 65 74 72 79 22 2c 22 64 61 74 65 22 3a 31 37 31 33 39 32 35 30 37 34 39 34 34 2c 22 73 65 72 76 69 63 65 22 3a 22 62 72 6f 77 73 65 72 2d 72 75 6d 2d 73 64 6b 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 33 30 2e 31 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 7d 2c 22 74 65 6c 65 6d 65 74 72 79 22 3a 7b 22 74 79 70 65 22 3a 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 2c 22 75 73 65 5f 61 6c 6c 6f 77 65 64 5f 74 72 61 63 69 6e 67 5f 6f 72 69 67 69 6e 73 22 3a 74 72 75 65 2c 22 Data Ascii: {"type":"telemetry","date":1713925074944,"service":"browser-rum-sdk","version":"4.30.1","source":"browser","_dd":{"format_version":2},"telemetry":{"type":"configuration","configuration":{"session_replay_sample_rate":10,"use_allowed_tracing_origins":true,"
2024-04-24 02:18:11 UTC	504	IN	HTTP/1.1 202 Accepted content-type: application/json Content-Length: 53 dd-request-id: ce37528d-2492-425c-b8ac-ab9224132f1d cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Wed, 24 Apr 2024 02:18:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49921	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	2140	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:12 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Cn2odfFDo5LA1fY-GmadY4NFB9ZIr6RpZRtjJrTab7n4Aav29JYKyQ==
2024-04-24 02:18:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49924	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	2292	OUT	GET /_next/static/css/7eebedc3bb83273f.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 360749 Connection: close Date: Tue, 23 Apr 2024 11:40:40 GMT Last-Modified: Tue, 23 Apr 2024 10:34:54 GMT ETag: "92a4b56120b62df1365864c3710c27bd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hg5IJnDsFvjF0VjZbAcPaE5-K1LaEHE8-SAeBD0v2uReTHNtE90EHA== Age: 52653
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 66 34 65 37 36 39 37 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 41 63 74 69 65 66 47 72 6f 74 65 73 71 75 65 2d 52 65 67 75 6c 61 72 2e 31 66 35 61 62 Data Ascii: @font-face{font-family:Actief Grotesque;font-weight:400;font-style:normal;font-display:swap;src:local("Actief Grotesque"),url(/_next/static/media/ActiefGrotesque-Regular.f4e76979.woff2) format("woff2"),url(/_next/static/media/ActiefGrotesque-Regular.1f5ab
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 2e 39 33 37 35 65 6d 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 2e 39 33 37 35 65 6d 29 7b 2e 6f 6e 62 6f 61 72 64 69 6e 67 5f 5f 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 62 75 74 74 6f 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 30 36 32 35 65 6d Data Ascii: m,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;padding-left:0;padding-right:0}@media(min-width:19.9375em)and (max-width:47.9375em){.onboarding__form-buttons .button:nth-child(2){margin-top:1.0625em
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 65 20 4d 65 64 69 75 6d 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 70 61 79 6d 65 6e 74 5f 5f 63 61 6e 63 65 6c 2c 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 62 65 64 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 70 61 79 6d 65 6e 74 5f 5f 72 65 61 63 74 69 76 61 74 65 2d 2d 73 75 62 74 69 74 Data Ascii: e Medium,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif}.payment__cancel,.payment__reactivate{border-top:1px solid #e8ebed}.payment__reactivate--text{margin-bottom:1.5rem}.payment__reactivate--subtit
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 37 34 31 64 39 7d 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 5f 5f 6f 70 74 69 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 69 74 65 6d 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: :not(:last-child){margin-right:1rem}.contact-item .contact-item__option:focus,.contact-item .contact-item__option:hover{color:#3741d9}.contact-item .contact-item__option--disabled,.contact-item .contact-item__option--disabled:focus,.contact-item .contact-
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 61 78 2d 77 69 64 74 68 3a 34 38 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 2e 38 31 32 35 72 65 6d 29 7b 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 61 72 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 7d 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 2e 76 65 72 74 69 63 61 6c 6e 61 76 5f 5f 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 61 63 63 6f 75 6e 74 5f 5f 6d 65 6e 75 20 Data Ascii: ax-width:48rem){.account__menu{width:100%;margin-left:0}}.account__menu .verticalnav{margin-bottom:2em}@media(max-width:72.8125rem){.account__menu .verticalnav__arrow{margin-left:.25em}}.account__menu .verticalnav__list{margin:0;float:none}.account__menu
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 74 3a 2e 38 31 32 35 65 6d 3b 6c 65 66 74 3a 31 2e 31 32 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2e 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 38 31 32 35 65 6d 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 6d 65 73 73 61 67 65 7b 6c 65 66 74 3a 31 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 38 37 35 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 39 33 37 35 65 6d 20 31 2e 32 35 65 6d 7d 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 5f 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 32 36 38 Data Ascii: t:.8125em;left:1.125em;position:absolute;top:.875em;width:.8125em;z-index:0}.form-notification--validated .form-notification__message{left:1.25em;margin-left:1.875em;padding:.9375em 1.25em}.form-notification--validated .form-notification__icon{color:#5268
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 42 6f 6c 64 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 3b 63 6f 6c 6f 72 3a 23 34 38 34 61 34 64 7d 2e 66 72 65 65 2d 61 63 63 6f 75 6e 74 2d 74 69 65 72 73 20 2e 74 69 65 72 5f 5f 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 66 72 Data Ascii: a Grande,sans-serif;font-family:Actief Grotesque Bold,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-size:1.125em;color:#484a4d}.free-account-tiers .tier__price{font-size:1em;margin-bottom:0}.fr
2024-04-24 02:18:12 UTC	13232	IN	Data Raw: 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 63 74 69 65 66 20 47 72 6f 74 65 73 71 75 65 20 4e 6f 72 6d 61 6c 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 5c 2e 53 46 4e 53 54 65 78 74 2d 52 65 67 75 6c 61 72 2c 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 2c 52 6f 62 6f 74 6f 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 77 69 64 74 68 3a 35 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e Data Ascii: ystem,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;font-family:Actief Grotesque Normal,-apple-system,\.SFNSText-Regular,San Francisco,Roboto,Segoe UI,Helvetica Neue,Lucida Grande,sans-serif;width:50%;font-size:.
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 20 23 68 61 6d 62 75 72 67 65 72 2d 73 68 61 70 65 2c 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 20 2e 6c 6f 67 6f 2d 73 68 61 70 65 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 68 6f 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 2d 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 68 65 61 64 65 72 2e 62 62 62 33 36 30 32 63 2e 70 6e 67 29 7d 2e 69 73 2d 6d 6f 62 69 6c 65 2d 72 65 61 64 79 20 2e 6e 61 76 5f 5f 69 Data Ascii: mobile-ready .nav--plus #hamburger-shape,.is-mobile-ready .nav--plus .logo-shape{fill:#fff}.is-mobile-ready .nav--home{background-color:#f63}.is-mobile-ready .nav--plus{background-image:url(/_next/static/media/header.bbb3602c.png)}.is-mobile-ready .nav__i
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 37 36 39 32 33 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 38 34 61 34 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 70 61 64 64 69 6e 67 3a 2e 37 36 39 32 33 30 37 36 39 32 65 6d 20 2e 39 32 33 30 37 36 39 32 33 31 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 74 6f 6f 6c 74 69 70 2d 2d 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 74 6f 6f 6c 74 69 70 2d 2d 6d 61 6e 75 61 6c 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 6d 65 64 69 61 2f 61 72 72 6f 77 2e 30 63 Data Ascii: 76923em;background:#484a4d;color:#fff;font-size:.8125em;line-height:1.4;padding:.7692307692em .9230769231em;position:absolute;text-align:left;white-space:normal}.tooltip--hover:after,.tooltip--manual:after{background-image:url(/_next/static/media/arrow.0c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49923	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	2292	OUT	GET /_next/static/css/7ec742af40df2646.css HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	572	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 911 Connection: close Date: Wed, 24 Apr 2024 02:16:33 GMT Last-Modified: Tue, 23 Apr 2024 23:19:13 GMT ETag: "e434b9481e572ce66aaaf238a1f3be93" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xJYYr49HjuELPfaF1NGx2x0ENNHAoyj3b-Xri605OMURUxByTuZk9A== Age: 100
2024-04-24 02:18:12 UTC	911	IN	Data Raw: 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 53 74 61 74 65 5f 5f 52 32 77 43 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 4c 6f 67 6f 5f 5f 52 4f 50 4d 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 35 70 78 3b 74 6f 70 3a 31 35 70 78 3b 77 69 64 74 68 3a 35 32 70 78 3b 68 65 69 67 68 74 3a 32 39 70 78 7d 2e 45 72 72 6f 72 53 74 61 74 65 5f 45 72 72 6f 72 5f 5f 59 5f 55 68 4f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 6f 6c Data Ascii: .ErrorState_ErrorState__R2wCf{position:relative;z-index:0;background:#fff;display:flex;justify-content:center;justify-items:center}.ErrorState_Logo__ROPMn{position:absolute;left:15px;top:15px;width:52px;height:29px}.ErrorState_Error__Y_UhO{margin:auto;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49925	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	2323	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:12 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: le9lx2wcCGN_a9B_yDSsOD6OA0kEzooqnYLsR5iuMFkmRoq8WLXR7g==
2024-04-24 02:18:12 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49922	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	2325	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:12 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qXWG2FtScM4S_KBcZa7xke61TSW7eX77anjcZvE0qN6DjdxjSnrOmA==
2024-04-24 02:18:12 UTC	3542	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 36 20 33 32 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 31 36 2e 32 2d 33 32 31 2e 32 63 2d 31 38 2e 37 2d 36 2e 38 2d 33 37 2e 39 2d 31 32 2d 35 37 2e 35 2d 31 35 2e 34 6c 35 2e 37 2d 33 32 2e 35 63 32 31 2e 35 20 33 2e 38 20 34 32 2e 36 20 39 2e 34 20 36 33 2e 31 20 31 36 2e 39 6c 2d 31 31 2e 33 20 33 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 37 30 2e 32 2d 32 39 36 2e 32 63 2d 31 37 2e 33 2d 39 2e 38 2d 33 35 2e 34 2d 31 38 2e 32 2d 35 34 2e 31 2d 32 35 6c 31 31 2e 32 2d 33 31 63 32 30 2e 35 20 37 2e 35 20 34 30 2e 33 20 31 36 2e 36 20 35 39 2e 33 20 32 37 2e 34 6c 2d 31 36 2e 34 20 32 38 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 Data Ascii: 6 32.5z"/> <path class="st1" d="M116.2-321.2c-18.7-6.8-37.9-12-57.5-15.4l5.7-32.5c21.5 3.8 42.6 9.4 63.1 16.9l-11.3 31z"/> <path class="st2" d="M170.2-296.2c-17.3-9.8-35.4-18.2-54.1-25l11.2-31c20.5 7.5 40.3 16.6 59.3 27.4l-16.4 28.6z"/> <path
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 2d 31 31 37 2e 39 20 32 30 34 2e 39 63 31 31 2e 39 20 36 2e 39 20 32 34 2e 35 20 31 32 2e 37 20 33 37 2e 34 20 31 37 2e 34 6c 2d 37 2e 38 20 32 31 2e 34 63 2d 31 34 2e 32 2d 35 2e 31 2d 32 37 2e 39 2d 31 31 2e 35 2d 34 31 2d 31 39 6c 31 31 2e 34 2d 31 39 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 2d 31 35 31 2e 38 20 31 38 31 2e 33 63 32 2e 37 20 32 2e 32 20 35 2e 33 20 34 2e 34 20 38 2e 31 20 36 2e 35 6c 38 2e 33 20 36 2e 31 20 38 2e 36 20 35 2e 37 63 32 2e 39 20 31 2e 38 20 35 2e 39 20 33 2e 35 20 38 2e 38 20 35 2e 33 6c 2d 31 31 2e 34 20 31 39 2e 38 63 2d 33 2e 32 2d 32 2d 36 2e 35 2d 33 2e 38 2d 39 2e 37 2d 35 2e 38 6c 2d 39 2e 34 2d Data Ascii: path class="st0" d="M-117.9 204.9c11.9 6.9 24.5 12.7 37.4 17.4l-7.8 21.4c-14.2-5.1-27.9-11.5-41-19l11.4-19.8z"/> <path class="st1" d="M-151.8 181.3c2.7 2.2 5.3 4.4 8.1 6.5l8.3 6.1 8.6 5.7c2.9 1.8 5.9 3.5 8.8 5.3l-11.4 19.8c-3.2-2-6.5-3.8-9.7-5.8l-9.4-
2024-04-24 02:18:12 UTC	4096	IN	Data Raw: 32 2d 35 2e 38 20 33 2e 39 2d 36 63 31 2e 33 2d 32 20 32 2e 35 2d 34 2e 31 20 33 2e 37 2d 36 2e 31 6c 31 33 2e 37 20 37 2e 39 63 2d 31 2e 33 20 32 2e 32 2d 32 2e 36 20 34 2e 35 2d 34 20 36 2e 37 6c 2d 34 2e 33 20 36 2e 35 2d 34 2e 36 20 36 2e 33 63 2d 31 2e 36 20 32 2e 31 2d 33 2e 33 20 34 2e 31 2d 34 2e 39 20 36 2e 31 6c 2d 31 32 2e 32 2d 31 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 30 35 2e 35 20 31 32 35 2e 31 63 37 2e 33 2d 36 2e 31 20 31 34 2d 31 32 2e 39 20 32 30 2e 31 2d 32 30 2e 32 6c 31 32 2e 31 20 31 30 2e 31 63 2d 36 2e 37 20 38 2d 31 34 2e 31 20 31 35 2e 34 2d 32 32 2e 31 20 32 32 2e 32 6c 2d 31 30 2e 31 2d 31 32 2e 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 Data Ascii: 2-5.8 3.9-6c1.3-2 2.5-4.1 3.7-6.1l13.7 7.9c-1.3 2.2-2.6 4.5-4 6.7l-4.3 6.5-4.6 6.3c-1.6 2.1-3.3 4.1-4.9 6.1l-12.2-10z"/> <path class="st1" d="M105.5 125.1c7.3-6.1 14-12.9 20.1-20.2l12.1 10.1c-6.7 8-14.1 15.4-22.1 22.2l-10.1-12.1z"/> <path class="s
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 36 20 32 39 2e 35 2d 31 31 2e 37 20 34 33 2e 37 6c 2d 32 31 2e 35 2d 37 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 32 30 34 2e 39 20 31 31 37 2e 39 63 36 2e 39 2d 31 31 2e 39 20 31 32 2e 37 2d 32 34 2e 35 20 31 37 2e 34 2d 33 37 2e 34 6c 32 31 2e 34 20 37 2e 38 63 2d 35 2e 31 20 31 34 2e 32 2d 31 31 2e 35 20 32 37 2e 39 2d 31 39 20 34 31 6c 2d 31 39 2e 38 2d 31 31 2e 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 38 31 2e 34 20 31 35 31 2e 37 63 32 2e 32 2d 32 2e 37 20 34 2e 34 2d 35 2e 33 20 36 2e 35 2d 38 6c 36 2e 31 2d 38 2e 33 20 35 2e 37 2d 38 2e 36 63 31 2e 38 2d 32 2e 39 20 33 2e 35 2d 35 2e 39 20 35 2e 33 2d 38 2e 38 6c 31 39 2e 38 20 31 31 Data Ascii: 6 29.5-11.7 43.7l-21.5-7.8z"/> <path class="st3" d="M204.9 117.9c6.9-11.9 12.7-24.5 17.4-37.4l21.4 7.8c-5.1 14.2-11.5 27.9-19 41l-19.8-11.4z"/> <path class="st0" d="M181.4 151.7c2.2-2.7 4.4-5.3 6.5-8l6.1-8.3 5.7-8.6c1.8-2.9 3.5-5.9 5.3-8.8l19.8 11
2024-04-24 02:18:12 UTC	6910	IN	Data Raw: 31 2e 33 2d 32 20 32 32 2e 37 2d 33 20 33 34 2e 31 2d 33 76 31 37 2e 32 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 33 31 2d 31 37 36 2e 38 63 2d 32 2e 36 2d 2e 34 2d 35 2e 31 2d 2e 39 2d 37 2e 37 2d 31 2e 32 6c 2d 37 2e 38 2d 2e 38 2d 37 2e 38 2d 2e 35 63 2d 32 2e 36 2d 2e 31 2d 35 2e 32 2d 2e 31 2d 37 2e 38 2d 2e 31 76 2d 31 37 2e 33 63 32 2e 39 2e 31 20 35 2e 37 20 30 20 38 2e 36 2e 32 6c 38 2e 36 2e 35 20 38 2e 35 2e 39 63 32 2e 38 2e 34 20 35 2e 36 2e 39 20 38 2e 35 20 31 2e 33 6c 2d 33 2e 31 20 31 37 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 31 2e 32 2d 31 36 38 2e 37 63 2d 39 2e 38 2d 33 2e 35 2d 31 39 2e 39 2d 36 2e 32 2d 33 30 2e 32 2d 38 2e 31 Data Ascii: 1.3-2 22.7-3 34.1-3v17.2z"/> <path class="st3" d="M31-176.8c-2.6-.4-5.1-.9-7.7-1.2l-7.8-.8-7.8-.5c-2.6-.1-5.2-.1-7.8-.1v-17.3c2.9.1 5.7 0 8.6.2l8.6.5 8.5.9c2.8.4 5.6.9 8.5 1.3l-3.1 17z"/> <path class="st0" d="M61.2-168.7c-9.8-3.5-19.9-6.2-30.2-8.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49926	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	780	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:12 UTC	667	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47828 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 15:00:13 GMT ETag: "6dbab1c1c6f168db27cbe727e3ad7fe8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: jlJmtXpS-jL_nl7f3bG-aPJzNBTNvICnx25EfyTV4Fp8fa8rSm9mnQ== Age: 48
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ba d4 00 12 00 00 00 02 53 f4 00 00 ba 6b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 30 1b 81 c6 5e 1c e1 12 06 60 00 88 26 08 2a 09 82 73 11 10 0a 85 da 44 85 8b 2a 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 70 07 d2 72 0c 81 1b 5b 97 22 92 0a a9 71 ed 65 de 26 3e 00 09 e8 36 04 c8 32 75 d3 aa ce d7 7b 41 1c 63 3b 08 5a 3a c7 26 e7 03 15 a4 98 95 e2 02 ee ec 89 31 6e 47 38 e2 f4 3b 7a f6 ff ff ff ff ff ff af 4a fe f3 8c f3 cf 3d e9 dc fb 5e a5 12 08 44 7d ec 6f db 06 31 b9 23 04 a5 48 39 e5 4a 75 55 a5 26 a3 5a 57 15 5a e4 2e 67 f5 15 32 02 be 09 1b 1a c8 b6 c6 6e 1f 07 54 38 e6 71 9f f2 98 57 b0 53 61 71 f1 18 72 ed 7b 73 82 90 10 38 5f d2 59 bd e9 d2 95 aa 65 bd 6f a8 8a Data Ascii: wOF2Sk?FFTM0^`&sD6$ pr["qe&>62u{Ac;Z:&1nG8;zJ=^D}o1#H9JuU&ZWZ.g2nT8qWSaqr{s8_Yeo
2024-04-24 02:18:12 UTC	10463	IN	Data Raw: f0 62 9b 15 be 04 77 52 01 17 9b 71 ed 90 e0 d4 63 9f 90 3a 4b 96 bf 36 80 5e 1c 9f 2b ff 67 29 99 6c 17 eb 35 e6 a5 1a 1e 7d 32 16 68 c1 0c ab 06 84 d6 e0 2c bf 2f 84 c8 28 f7 2a 55 25 7d 9a e9 d1 ac c7 9c f8 84 fd 19 ee cf 72 4f 43 59 60 62 8f 33 26 4b ba 67 3f 0a 80 c2 f0 4c 19 16 1d 3d 82 7a 48 d6 7a 3f 9b c3 7a a4 5e ab 64 f9 0d f9 d6 66 61 20 e1 ea d5 67 5c 1d 0a 88 e6 55 69 a1 77 51 9f 04 50 85 19 74 d8 2a 29 7c 60 e7 e7 67 3e 5f fa a4 69 6b 40 7a fc 8e 37 94 29 b8 d4 60 98 4b 59 65 6d d5 50 9c d2 4c ea 09 b0 60 f9 d0 bd 27 7c 9f 07 13 c0 6c 17 96 b5 24 d5 1e ef 52 a8 92 13 95 ef 74 83 50 a8 d7 c0 f3 83 8a f0 0d ce da 8c 4c 38 88 b1 ee 7c e8 7c 0d 0c ce 22 c8 11 51 16 4b 82 38 7d ee 49 a0 72 ee 2e 52 9d 19 ba 4c 19 c6 12 d5 f6 a0 2b 32 f2 37 bd b0 Data Ascii: bwRqc:K6^+g)l5}2h,/(U%}rOCY`b3&Kg?L=zHz?z^dfa g\UiwQPt)\|`g>_ik@z7)`KYemPL`'\|l$RtPL8\|\|"QK8}Ir.RL+27
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 72 11 e5 8b 9d 98 af a2 e9 d2 1d 18 e5 d3 51 3a e9 f4 4e ca 22 8f 9d 4d 18 47 fb 69 28 e4 4a 84 db 22 39 1f 53 33 93 d8 35 59 29 cd d7 c9 3a 87 46 4f ab f4 67 51 19 96 87 ae a1 c1 39 61 25 c3 ba e7 05 10 a6 02 29 93 7c 39 31 36 dd f4 fb 9f 6c 04 76 b9 a2 e6 30 88 1d 7e 3e 89 74 9d 45 8b d0 bd 8c 25 8d 54 aa dd 6b 34 ff e2 13 a6 8d 20 fa 9d b7 67 2f 99 3f f3 d4 22 1c e1 06 85 6d 94 c7 54 69 48 f3 e4 4c 4e da a3 4b 1a a3 6c 0e c1 2a 16 13 6d 07 16 32 f8 4d 8f d2 b4 70 60 af b6 50 c0 57 82 5a ad 88 cf 17 e1 6a 18 7b 79 04 cb 95 17 42 4e 5b 75 25 39 a0 73 b0 f3 72 e6 7d 4c cc 97 5a 45 3c a7 33 40 9e db 3b 9f 2d fc 67 28 cf 62 60 ec 16 93 6c 43 9d 0c 51 e1 a3 34 0e 36 a7 0d c1 c0 da b4 47 17 ef 64 94 2d 21 58 4a 44 5a 91 80 27 c4 8d d3 16 f2 05 f2 1a c6 5e 01 Data Ascii: rQ:N"MGi(J"9S35Y):FOgQ9a%)\|916lv0~>tE%Tk4 g/?"mTiHLNKl*m2Mp`PWZj{yBN[u%9sr}LZE<3@;-g(b`lCQ46Gd-!XJDZ'^
2024-04-24 02:18:12 UTC	4597	IN	Data Raw: 3d 3b a0 41 ea c1 80 22 88 5d 2a 92 15 72 e5 da 15 50 6c be bc 0b 0b 0e cc ee 68 b9 8a a4 d8 3a 6d ee 9f 1a 47 9d b1 31 aa f4 43 55 6c 6c 9e 7a 43 05 ca 30 80 77 a1 09 c5 e1 af 01 ff ff aa 44 89 60 9a ee f2 1c ea 45 f3 15 7b db 68 fa 4f 79 10 d2 59 73 eb 16 24 dc 97 6d bd 35 a4 1f af cf 9d c8 7b f2 14 6d c6 b7 86 b8 77 c8 1c 85 80 99 70 19 60 a0 02 35 15 84 74 ac 64 0b ab 9f 70 af 31 52 21 6d 76 ec ba 52 5e 3a c3 3a 3f 1f 6b 0e ae a5 2f 95 4c 28 77 5a 09 f9 05 ae e9 59 94 5b 08 32 37 f4 35 df 79 9a fc a9 30 0a b1 1d b0 6b 16 d5 52 0f 69 53 76 26 03 a4 81 e5 69 cf 51 aa f6 08 ea 8b b0 4c 92 0c e5 5d d9 44 f2 8c 45 7e 04 91 24 a5 f4 3e e9 02 1a 53 df 4e b7 35 00 a4 7d 73 ee bf 74 10 70 1e ca 6a 86 8c 9b d8 07 11 94 ce 19 39 18 31 2c e3 b3 59 00 80 55 11 b0 Data Ascii: =;A"]*rPlh:mG1CUllzC0wD`E{hOyYs$m5{mwp`5tdp1R!mvR^::?k/L(wZY[275y0kRiSv&iQL]DE~$>SN5}stpj91,YU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49927	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:11 UTC	431	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:12 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:17 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 0jCD3qi5CIy5bMZaHifpEs26XWKRlsBmxYah7TZXoiPtCVrVh0O37A== Age: 48
2024-04-24 02:18:12 UTC	14839	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49930	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2288	OUT	GET /_next/static/chunks/webpack-069d168508eed678.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	606	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 10127 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:38 GMT ETag: "8a82ce8be8db77081a8255882af37a92" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: I8Qz2jBk_Sb5xWY8_zlVnh0f6rHkjLTuNulzBvnkZlIyrznYULbFKg== Age: 41146
2024-04-24 02:18:12 UTC	10127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 62 3d 61 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 61 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 64 3d 21 30 3b 74 72 79 7b 65 5b 74 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 63 29 2c 64 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 64 26 26 64 65 6c 65 74 65 20 61 5b 74 5d 7d 72 65 74 75 72 6e 20 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 65 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 66 75 6e 63 Data Ascii: !function(){"use strict";var e={},a={};function c(t){var b=a[t];if(void 0!==b)return b.exports;var f=a[t]={id:t,loaded:!1,exports:{}},d=!0;try{e[t].call(f.exports,f,f.exports,c),d=!1}finally{d&&delete a[t]}return f.loaded=!0,f.exports}c.m=e,c.amdO={},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49929	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2290	OUT	GET /_next/static/chunks/framework-45ce3d09104a2cae.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 129996 Connection: close Date: Thu, 22 Feb 2024 02:45:11 GMT Last-Modified: Wed, 21 Feb 2024 21:08:01 GMT ETag: "810b8db8296df1f82a3ddecef6ac0832" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: luYunw7DedEbn-6P-PVMM6KPtGW1SsSM4Ohm5DdHpSbXDPMyWnf1RA== Age: 5355182
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 37 38 34 29 2c 6c 3d 6e 28 34 30 37 39 29 2c 61 3d 6e 28 31 34 36 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(e,t,n){var r=n(2784),l=n(4079),a=n(14616);function o(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 6f 2c 75 2c 69 29 7b 57 65 3d 21 31 2c 48 65 3d 6e 75 6c 6c 2c 24 65 2e 61 70 70 6c 79 28 4b 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 76 61 72 20 74 3d 65 2c 6e 3d 65 3b 69 66 28 65 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 74 2e 72 65 74 75 72 6e 3b 29 74 3d 74 2e 72 65 74 75 72 6e 3b 65 6c 73 65 7b 65 3d 74 3b 64 6f 7b 30 21 3d 3d 28 31 30 32 36 26 28 74 3d 65 29 2e 66 6c 61 67 73 29 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 29 2c 65 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 29 7d 72 65 74 75 72 6e 20 33 3d 3d 3d 74 2e 74 61 67 3f 6e 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 76 61 72 20 74 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 Data Ascii: o,u,i){We=!1,He=null,$e.apply(Ke,arguments)}function Xe(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!==(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ge(e){if(13===e.tag){var t=e.memoizedStat
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 65 20 70 61 75 73 65 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 43 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 44 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 70 6f 69 6e 74 65 72 55 70 20 72 61 74 65 63 68 61 6e 67 65 20 72 61 74 65 43 68 61 6e 67 65 20 72 65 73 65 74 20 72 65 73 65 74 20 73 65 65 6b 65 64 20 73 65 65 6b 65 64 20 73 75 62 6d 69 74 20 73 75 62 6d 69 74 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 43 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 45 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 53 74 61 72 74 20 76 6f 6c 75 6d 65 63 68 61 6e 67 65 20 76 6f 6c 75 6d 65 43 68 61 6e 67 65 22 2e 73 70 6c 69 74 28 Data Ascii: e pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 72 3d 64 69 28 29 2c 6c 3d 70 69 28 65 29 2c 61 3d 63 61 28 72 2c 6c 29 3b 61 2e 74 61 67 3d 31 2c 61 2e 70 61 79 6c 6f 61 64 3d 74 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 66 61 28 65 2c 61 29 2c 68 69 28 65 2c 6c 2c 72 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 64 69 28 29 2c 72 3d 70 69 28 65 29 2c 6c 3d 63 61 28 6e 2c 72 29 3b 6c 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 6c 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 66 61 28 65 Data Ascii: =e._reactInternals;var r=di(),l=pi(e),a=ca(r,l);a.tag=1,a.payload=t,void 0!==n&&null!==n&&(a.callback=n),fa(e,a),hi(e,l,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=di(),r=pi(e),l=ca(n,r);l.tag=2,void 0!==t&&null!==t&&(l.callback=t),fa(e
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 63 68 3a 6e 75 6c 6c 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3a 65 2c 6c 61 73 74 52 65 6e 64 65 72 65 64 53 74 61 74 65 3a 74 7d 29 2e 64 69 73 70 61 74 63 68 3d 7a 6f 2e 62 69 6e 64 28 6e 75 6c 6c 2c 4a 61 2c 65 29 2c 5b 72 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 65 5d 7d 2c 75 73 65 52 65 66 3a 79 6f 2c 75 73 65 53 74 61 74 65 3a 76 6f 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 50 6f 2c 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 6f 28 65 29 2c 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 31 5d 3b 72 65 74 75 72 6e 20 53 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 47 61 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 31 3b 74 72 Data Ascii: ch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=zo.bind(null,Ja,e),[r.memoizedState,e]},useRef:yo,useState:vo,useDebugValue:Po,useDeferredValue:function(e){var t=vo(e),n=t[0],r=t[1];return So((function(){var t=Ga.transition;Ga.transition=1;tr
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 32 3a 31 26 74 29 2c 6e 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 45 69 28 29 2c 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 21 3d 3d 28 6e 75 6c 6c 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 22 75 6e 73 74 61 62 6c 65 2d 64 65 66 65 72 2d 77 69 74 68 6f 75 74 2d 68 69 64 69 6e 67 22 21 3d 3d 72 2e 6d 6f 64 65 26 26 28 74 2e 66 6c 61 67 73 7c 3d 34 29 2c 6e 75 6c 6c 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 35 36 2c 74 2e 74 61 67 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 75 28 65 29 7b 73 77 69 74 63 68 28 65 2e 74 61 67 29 7b 63 61 73 65 20 31 3a 67 6c 28 65 2e 74 79 70 65 29 26 26 79 6c 28 29 3b 76 61 72 20 74 3d 65 2e 66 6c 61 67 Data Ascii: 2:1&t),n):null;case 23:case 24:return Ei(),null!==e&&null!==e.memoizedState!==(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags\|=4),null}throw Error(o(156,t.tag))}function iu(e){switch(e.tag){case 1:gl(e.type)&&yl();var t=e.flag
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 66 28 30 3d 3d 3d 28 36 34 26 64 2e 66 6c 61 67 73 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 7c 7c 6e 75 6c 6c 21 3d 3d 53 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 26 26 28 6e 75 6c 6c 3d 3d 3d 5a 75 7c 7c 21 5a 75 2e 68 61 73 28 53 29 29 29 29 7b 64 2e 66 6c 61 67 73 7c 3d 34 30 39 36 2c 74 26 3d 2d 74 2c 64 2e 6c 61 6e 65 73 7c 3d 74 2c 64 61 28 64 2c 70 75 28 64 2c 61 2c 74 29 29 3b 62 72 65 61 6b 20 65 7d 7d 64 3d 64 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 64 29 7d 7a 69 28 6e 29 7d 63 61 74 63 68 28 45 29 7b 74 3d 45 2c 4d 75 3d 3d 3d 6e 26 Data Ascii: f(0===(64&d.flags)&&("function"===typeof k.getDerivedStateFromError\|\|null!==S&&"function"===typeof S.componentDidCatch&&(null===Zu\|\|!Zu.has(S)))){d.flags\|=4096,t&=-t,d.lanes\|=t,da(d,pu(d,a,t));break e}}d=d.return}while(null!==d)}zi(n)}catch(E){t=E,Mu===n&
2024-04-24 02:18:13 UTC	15308	IN	Data Raw: 6c 6c 21 3d 3d 28 69 3d 75 2e 73 69 62 6c 69 6e 67 29 29 7b 69 2e 72 65 74 75 72 6e 3d 75 2e 72 65 74 75 72 6e 2c 75 3d 69 3b 62 72 65 61 6b 7d 75 3d 75 2e 72 65 74 75 72 6e 7d 69 3d 75 7d 55 6f 28 65 2c 74 2c 6c 2e 63 68 69 6c 64 72 65 6e 2c 6e 29 2c 74 3d 74 2e 63 68 69 6c 64 7d 72 65 74 75 72 6e 20 74 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 6c 3d 74 2e 74 79 70 65 2c 72 3d 28 61 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 29 2e 63 68 69 6c 64 72 65 6e 2c 61 61 28 74 2c 6e 29 2c 72 3d 72 28 6c 3d 6f 61 28 6c 2c 61 2e 75 6e 73 74 61 62 6c 65 5f 6f 62 73 65 72 76 65 64 42 69 74 73 29 29 2c 74 2e 66 6c 61 67 73 7c 3d 31 2c 55 6f 28 65 2c 74 2c 72 2c 6e 29 2c 74 2e 63 68 69 6c 64 3b 63 61 73 65 20 31 34 3a 72 65 74 75 72 6e 20 61 3d 47 6c 28 6c 3d 74 Data Ascii: ll!==(i=u.sibling)){i.return=u.return,u=i;break}u=u.return}i=u}Uo(e,t,l.children,n),t=t.child}return t;case 9:return l=t.type,r=(a=t.pendingProps).children,aa(t,n),r=r(l=oa(l,a.unstable_observedBits)),t.flags\|=1,Uo(e,t,r,n),t.child;case 14:return a=Gl(l=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49931	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2285	OUT	GET /_next/static/chunks/main-3f0c3e8b10ca351e.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 120412 Connection: close Date: Sat, 21 Oct 2023 16:35:10 GMT Last-Modified: Fri, 20 Oct 2023 16:44:07 GMT ETag: "0d42cbc6f4575509a4b48ab8458f42a8" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vHuChcnB02PvOgNjeBkjDX8NBuV8IkwFHLP_kxNVP2q1eWFQOxxy-A== Age: 16018982
2024-04-24 02:18:12 UTC	15774	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5651:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 43 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 48 61 73 68 28 29 2c 54 2e 69 73 53 73 72 26 26 22 2f 34 30 34 22 21 3d 3d 44 2e 70 61 67 65 26 26 22 2f 5f 65 72 72 6f 72 22 21 3d 3d 44 2e 70 61 67 65 26 26 28 44 2e 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 44 2e 6e 65 78 74 45 78 70 6f 72 74 26 26 28 76 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 54 2e 70 61 74 68 6e 61 6d 65 29 7c 7c Data Ascii: guments)}return a(r,[{key:"componentDidCatch",value:function(e,t){this.props.fn(e,t)}},{key:"componentDidMount",value:function(){this.scrollToHash(),T.isSsr&&"/404"!==D.page&&"/_error"!==D.page&&(D.isFallback\|\|D.nextExport&&(v.isDynamicRoute(T.pathname)\|\|
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 63 72 69 70 74 3a 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 29 7d 2c 74 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 29 7d 28 65 29 29 2c 74 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 63 2e 73 65 74 28 65 2c 74 3d 66 65 74 63 68 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 73 74 79 6c 65 73 68 65 65 74 3a 20 22 2e 63 6f Data Ascii: new Error("Failed to load script: ".concat(e))))},t.crossOrigin=void 0,t.src=e,document.body.appendChild(t)}))}(e)),t))},r=function(e){var t=c.get(e);return t\|\|(c.set(e,t=fetch(e).then((function(t){if(!t.ok)throw new Error("Failed to load stylesheet: ".co
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 2b 31 29 3b 65 2e 68 61 73 28 75 29 3f 6f 3d 21 31 3a 65 2e 61 64 64 28 75 29 7d 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 63 61 73 65 22 62 61 73 65 22 3a 74 2e 68 61 73 28 61 2e 74 79 70 65 29 3f 6f 3d 21 31 3a 74 2e 61 64 64 28 61 2e 74 79 70 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 65 74 61 22 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 73 3d 70 2e 6c 65 6e 67 74 68 3b 63 3c 73 3b 63 2b 2b 29 7b 76 61 72 20 6c 3d 70 5b 63 5d 3b 69 66 28 61 2e 70 72 6f 70 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 69 66 28 22 63 68 61 72 53 65 74 22 3d 3d 3d 6c 29 72 2e 68 61 73 28 6c 29 3f 6f 3d 21 31 3a 72 2e 61 64 64 28 6c 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 70 72 6f 70 73 5b 6c 5d 2c 64 3d 6e 5b 6c 5d Data Ascii: +1);e.has(u)?o=!1:e.add(u)}switch(a.type){case"title":case"base":t.has(a.type)?o=!1:t.add(a.type);break;case"meta":for(var c=0,s=p.length;c<s;c++){var l=p[c];if(a.props.hasOwnProperty(l))if("charSet"===l)r.has(l)?o=!1:r.add(l);else{var f=a.props[l],d=n[l]
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 34 3a 4f 3d 53 26 26 21 28 22 69 6e 69 74 69 61 6c 22 69 6e 20 53 29 3f 53 3a 76 6f 69 64 20 30 3b 63 61 73 65 20 32 35 3a 69 66 28 22 2f 61 70 69 22 21 3d 3d 67 26 26 21 67 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 61 70 69 2f 22 29 29 7b 65 2e 6e 65 78 74 3d 32 38 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 4b 28 7b 75 72 6c 3a 69 2c 72 6f 75 74 65 72 3a 79 7d 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 3b 63 61 73 65 20 32 38 3a 69 66 28 65 2e 74 30 3d 4f 2c 65 2e 74 30 29 7b 65 2e 6e 65 78 74 3d 33 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 33 32 2c 79 2e 66 65 74 63 68 43 6f 6d 70 6f 6e 65 6e 74 28 67 29 2e 74 68 65 6e 28 28 66 75 Data Ascii: 4:O=S&&!("initial"in S)?S:void 0;case 25:if("/api"!==g&&!g.startsWith("/api/")){e.next=28;break}return K({url:i,router:y}),e.abrupt("return",new Promise((function(){})));case 28:if(e.t0=O,e.t0){e.next=33;break}return e.next=32,y.fetchComponent(g).then((fu
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 30 5d 26 26 28 6c 3d 22 3f 22 2b 6c 29 2c 69 3d 69 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 23 5d 2f 67 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6c 3d 6c 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 25 32 33 22 29 2c 22 22 2e 63 6f 6e 63 61 74 28 61 29 2e 63 6f 6e 63 61 74 28 73 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 75 29 7d 74 2e 75 72 6c 4f 62 6a 65 63 74 4b 65 79 73 3d 5b 22 61 75 74 68 22 2c 22 68 61 73 68 22 2c 22 68 6f 73 74 22 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 22 68 72 65 66 22 2c 22 70 61 74 68 22 2c 22 70 61 74 68 6e 61 6d 65 22 2c 22 70 6f 72 74 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 2c 22 71 75 65 72 79 22 2c 22 73 65 61 72 63 68 22 2c 22 73 6c 61 73 68 65 73 22 5d 7d 2c 38 38 37 33 Data Ascii: 0]&&(l="?"+l),i=i.replace(/[?#]/g,encodeURIComponent),l=l.replace("#","%23"),"".concat(a).concat(s).concat(i).concat(l).concat(u)}t.urlObjectKeys=["auth","hash","host","hostname","href","path","pathname","port","protocol","query","search","slashes"]},8873
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 64 72 65 6e 2e 73 65 74 28 61 2c 6e 65 77 20 65 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 67 65 74 28 61 29 2e 5f 69 6e 73 65 72 74 28 74 2e 73 6c 69 63 65 28 31 29 2c 72 2c 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 21 31 7d 7d 5d 29 2c 65 7d 28 29 7d 2c 39 36 31 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 65 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: dren.set(a,new e),this.children.get(a)._insert(t.slice(1),r,n)}else this.placeholder=!1}}]),e}()},96112:function(e,t){"use strict";var r;Object.defineProperty(t,"__esModule",{value:!0}),t.setConfig=function(e){r=e},t.default=void 0;t.default=function(){re
2024-04-24 02:18:13 UTC	6334	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 21 3d 3d 72 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 72 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 6d 61 78 28 65 5b 72 5d 2d 65 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 63 28 29 3b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 Data Ascii: avigationStart"!==r&&"toJSON"!==r&&(t[r]=Math.max(e[r]-e.navigationStart,0));return t}())},s=function(e,t){var r=c();return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49932	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2140	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:13 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:12 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rftE9t4g5WKq9T5Xmmy8d80Psk2uO6Ii3aPZXP0z9kCb0DvOvuSRXQ==
2024-04-24 02:18:13 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49934	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2088	OUT	GET /assets/images/logo.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:13 UTC	742	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1069 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:12 GMT ETag: W/"42d-18f0b1d2ec8" Last-Modified: Tue, 23 Apr 2024 13:20:13 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OjK9JYZsbA83eIy1n4qED_vAU-7qi2zjuvU0OBXO9Oe8Jd-ewnP2DA==
2024-04-24 02:18:13 UTC	1069	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 35 32 20 32 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 37 33 20 31 34 2e 36 34 36 63 2e 36 31 33 20 30 20 2e 39 35 38 2e 33 35 32 20 31 2e 33 38 20 31 2e 30 31 38 6c 31 2e 38 34 20 32 2e 39 34 63 2e 36 39 20 31 2e 31 33 35 20 31 2e 32 36 34 20 31 2e 39 31 38 20 32 2e 36 30 36 20 31 2e 39 31 38 20 31 2e 33 34 20 30 20 31 2e 39 35 34 2d 2e 35 34 38 20 32 2e 36 30 35 2d 32 2e 30 37 36 2e 38 30 35 2d 31 2e 38 38 20 31 2e Data Ascii: <svg viewBox="-4 -2 52 29" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <path d="M12.073 14.646c.613 0 .958.352 1.38 1.018l1.84 2.94c.69 1.135 1.264 1.918 2.606 1.918 1.34 0 1.954-.548 2.605-2.076.805-1.88 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49933	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	2291	OUT	GET /_next/static/chunks/pages/_app-8d7329f2c361b0c9.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:12 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093 Connection: close Date: Sat, 03 Feb 2024 10:04:07 GMT Last-Modified: Fri, 02 Feb 2024 17:50:15 GMT ETag: "daff3ef8f54d4473d8048108fb36e699" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KRpavDs0xQ2bvqcB9Uq_IMGnZbzNnAGoS17izhXdNQWcYdboEGxgkQ== Age: 6970446
2024-04-24 02:18:12 UTC	1093	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 34 30 35 38 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 33 38 36 36 37 29 7d 5d 29 7d 2c 33 38 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 74 29 3b 76 61 72 20 72 3d 65 28 37 30 38 36 35 29 2c 75 3d 65 28 35 32 33 32 32 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{40582:function(n,t,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return e(38667)}])},38667:function(n,t,e){"use strict";e.r(t);var r=e(70865),u=e(52322);t.default=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49936	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	420	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/img.ee3dbb2b82990dc7e451.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:12 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1002077 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Last-Modified: Thu, 28 Mar 2024 15:00:16 GMT ETag: "25ee8e8c018a2d9addc20a03b331b97a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: dHzQLKlpMuQK0nde5Zv2jtOMp2iDZkj5oiDx1Xy-zeyJMIV9fxN4iA== Age: 48
2024-04-24 02:18:12 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0a 00 00 00 05 a0 08 03 00 00 00 a5 de ea ed 00 00 03 00 50 4c 54 45 47 70 4c 15 14 15 5e 89 77 6a 98 85 6a 98 85 6a 98 85 6a 97 84 69 98 85 6a 98 85 69 98 85 70 9f 8c 49 66 5a 31 40 39 57 7d 6d 6d 9b 88 6a 98 87 43 5c 52 0d 10 0f 11 16 14 52 72 65 09 0c 0b 38 4c 44 75 a4 90 5a 8c 77 14 14 15 6a 98 85 6c 96 85 69 97 84 69 97 85 72 77 79 67 93 82 74 8b 84 68 95 84 79 70 7a 64 91 7f 58 8c 76 04 04 04 04 04 04 01 01 01 0a 0a 0a 01 01 01 04 04 04 03 04 03 0f 0f 10 04 04 04 02 02 02 09 09 09 02 03 03 07 07 07 05 05 05 01 01 00 06 06 06 00 00 00 01 01 01 00 00 00 60 97 e2 7b a8 e6 5a 8a cb 2e 41 68 10 17 25 05 02 01 4a 72 a7 65 9a e3 65 98 de 60 97 e2 5d 92 da 3f 61 8f 25 32 52 5f 95 de 53 7e ba 6b 56 5e 1a Data Ascii: PNGIHDRPLTEGpL^wjjjjijipIfZ1@9W}mmjC\RRre8LDuZwjliirwygthypzdXv`{Z.Ah%Jree`]?a%2R_S~kV^
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 33 28 51 80 04 d3 a6 ee 1b 68 bb ce b7 fd fa 6b b7 db fd 62 9e 1e fe ff b6 46 57 58 dc 46 8d 49 5a 26 52 92 28 04 c2 7a fc 15 1e cf c4 d4 80 5b 00 67 ca 55 b2 dd ff 34 81 d2 e5 eb 5a 30 d8 6e 4d 0b 50 22 58 22 aa 7c ec 2b 6f ec 36 a4 25 fc f8 e9 d5 ba 6a 79 3c ea f2 e9 7f fd a8 76 a7 c3 cb e5 72 fa f4 e5 e1 78 79 dc b2 7e 9b 6c 44 92 b0 92 44 c2 28 15 60 70 ac 68 46 43 52 42 94 4c b4 4c 86 44 22 c9 04 93 84 3a 50 b7 4e cb fb 96 cc 1a 4a 0d 4e 6d af 5a d7 fb c7 c7 f3 a7 9f cf 5e f6 71 3a af a0 90 34 aa 73 ab 1e 72 23 14 34 99 45 09 ca 84 66 82 c1 49 6b c5 7d 63 77 f3 79 2f fb dd ed 76 bf a0 fb 67 2d a3 49 28 89 44 26 5a 14 59 99 d8 d1 60 48 b2 de 9f 7e 81 26 30 4a 5c 02 d8 35 38 b4 75 a4 e7 3f 7e 92 bc eb f1 b8 6e ae 6b 4c 4d 6d 43 6d 97 94 08 1a 43 4d 78 Data Ascii: 3(QhkbFWXFIZ&R(z[gU4Z0nMP"X"\|+o6%jy<vrxy~lDD(`phFCRBLLD":PNJNmZ^q:4sr#4EfIk}cwy/vg-I(D&ZY`H~&0J\58u?~nkLMmCmCMx
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: bc 8b 53 d9 79 1f d5 3d b2 1c 65 41 ce 90 3f 58 a1 7e 72 24 73 c9 b0 a6 dd 28 5c 50 d2 20 37 4e e3 79 82 64 3c be b9 e5 15 30 72 a3 9e a0 93 bc 03 36 3d 4f 26 1d 92 04 88 fd 96 37 23 0c fe 03 3b 44 c1 37 6f 98 1c e6 c3 d2 54 34 51 5f 30 6c 84 82 db f4 d0 1c 46 27 6e 65 55 79 43 cd 30 2c ac 9f 5e 8c 8f 4e f2 71 76 72 32 1e 3f c3 3c 31 39 90 4c ce a2 a7 e1 cd 6e f4 3d 7d 32 25 a0 8d e5 04 06 c3 cf e0 b3 56 9e a7 58 c3 a2 d5 8d db 0c 2f 88 4c 62 25 e0 03 8c 28 14 0a e4 b7 fd da 94 af 6b d0 ef 3f 8b 1c 65 8d 35 d6 92 33 31 6d e5 e9 b0 f7 6a 98 76 0e 26 52 f0 54 3f 4e 4b 3d 94 bb 69 b7 2c b7 33 99 b4 99 11 90 63 3c a9 39 54 0a 3f d6 fa d6 b5 bb c5 be 34 76 b6 fd 48 80 83 c1 01 93 ff 1d be a0 0d f0 b0 fe fe 70 78 3c e9 4d 8e f9 a9 4c 92 d1 1f 55 bf c6 b2 93 73 Data Ascii: Sy=eA?X~r$s(\P 7Nyd<0r6=O&7#;D7oT4Q_0lF'neUyC0,^Nqvr2?<19Ln=}2%VX/Lb%(k?e531mjv&RT?NK=i,3c<9T?4vHpx<MLUs
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: ff 77 6b 6e f6 f6 9c 43 04 3a f8 b3 e6 a0 02 64 66 4b 80 90 21 4e c4 3a fd f7 d1 ad 37 1f fe 25 49 92 24 29 1b 5c 99 39 63 6f 5d ea a7 95 b3 71 9e f9 39 2f 67 99 ef 8c 97 06 bc 36 1c f6 7b 43 46 88 ba 8b d4 c3 61 19 57 79 76 9f 8e 0f 11 38 74 d8 2f cf 47 20 8c ff 7b aa 87 bd 51 af df bf fb 3c 00 de ad 4f cb 68 ea 0d e0 c4 fc fc cd 95 b5 a5 a9 f9 45 85 1f 5c 5e 9e 9f 5a 54 43 49 26 a6 e6 e7 a7 e6 97 de a3 ad 49 fa 50 27 f9 7f 40 56 aa 1c 0d b2 53 4d 1b 72 76 42 01 18 9a 24 35 e9 80 73 6e 59 64 d3 04 68 98 46 c1 2d d3 0b 94 82 9d 37 78 44 77 18 b6 1a cb 6c 06 de e0 43 e2 b8 7f 0e 85 0c 1f e2 5d 1b 49 2c e2 64 a1 ba aa 6c 60 1e 87 47 6f 9c 3f b4 ca d1 51 00 11 c0 12 3c 92 bb 04 ce 15 ec 16 e6 6a 98 50 cb 21 21 1b 4b 01 b3 83 cd 6d 60 4e 6c 87 5f 7f fe ec 8f Data Ascii: wknC:dfK!N:7%I$)\9co]q9/g6{CFaWyv8t/G {Q<OhE\^ZTCI&IP'@VSMrvB$5snYdhF-7xDwlC]I,dl`Go?Q<jP!!Km`Nl_
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 30 e3 5f 5a 37 06 ab 09 2a 92 d7 51 dd 22 08 42 14 0c 86 00 48 84 f6 72 3a fa 23 a4 bf 0e 95 ac 43 f8 07 87 78 c5 ed b4 37 5c 28 80 42 13 61 c9 71 1c c1 99 d3 bf 44 dc 47 5e 52 58 90 b4 14 57 2d 2e 4b 18 f3 62 b6 90 0f 81 1d e7 3f e1 eb 1d 3b bc 58 fb 1e dc b8 a7 d7 8d 7c c2 3f 34 38 3c ac 98 68 cb 7b b4 25 2d 4e 81 bb 5a b5 97 6b 3d 42 96 97 88 d2 b0 5d 25 0a cc 0b a4 3c 23 a1 9f 18 11 2a 6a 3b 37 65 ea 29 f9 46 6a 64 aa 40 c1 60 4f 19 37 13 d4 9c ad 9c bf 68 dc 24 02 e4 12 fe df e0 d1 ee 3e 70 aa 28 c2 07 cc 34 36 23 b9 78 f1 f2 4a 2b ab 0b a5 c4 26 ba 86 20 eb c0 64 b5 84 7f ae 3f e5 9a 58 9b 8e 4a 5d 0a 86 97 42 98 d5 2d 32 34 52 67 eb ee f8 e7 92 72 06 9a 0f 97 74 e9 21 07 ea 7c 75 f2 5b 6d 02 22 19 f0 58 62 3e b5 bd 15 c8 4f dd 0a 6e df 7b 6f 41 7f Data Ascii: 0_Z7Q"BHr:#Cx7\(BaqDG^RXW-.Kb?;X\|?48<h{%-NZk=B]%<#j;7e)Fjd@`O7h$>p(46#xJ+& d?XJ]B-24Rgrt!\|u[m"Xb>On{oA
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 77 77 13 4c c7 3c 33 e3 25 bf 16 03 02 39 68 ad 9f cb 93 6e 5f 1d bd bc ce c3 cd 7a fe 42 11 a3 02 de c5 43 7c 43 f2 2c 27 fd 8f 2f 0c 85 ae eb 2b fd 7f ff cb df 7c 7e aa bd b8 bc 40 1c 6f 5a 56 69 e8 d3 11 92 20 57 e8 a3 76 c3 93 6c 1b 60 d6 54 0d 31 ba 70 70 f9 c0 91 c5 ec c8 c1 05 27 8c 56 81 b7 de ce f4 4f 52 f0 87 bc fe 11 02 d2 21 0b a4 32 40 5b 10 64 64 87 98 4d 74 67 88 db 2d 53 83 3d 7f 71 02 27 7f b0 8c 1e 4b 80 94 7b f6 12 e0 b1 af 3f f1 60 ac 10 b4 ef d7 73 77 82 8e 6f 0f bd c1 4b d9 67 5a b9 37 30 8c ad ab a5 3b 2c b6 16 17 8f 1c 59 f4 3f d0 8b dc 91 20 de f6 b2 f5 c5 7f d6 60 c0 1b 6a 8d cd 3c 31 2e 21 61 a0 53 96 19 11 30 47 01 6f d3 03 8c 65 15 04 55 10 87 7b 7a ad 95 e7 6b 5e 7e e7 6d 71 7f 78 69 8e 78 66 98 02 93 38 01 31 80 25 42 39 aa Data Ascii: wwL<3%9hn_zBC\|C,'/+\|~@oZVi Wvl`T1pp'VOR!2@[ddMtg-S=q'K{?`swoKgZ70;,Y? `j<1.!aS0GoeU{zk^~mqxixf81%B9
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: f6 37 97 7f e9 06 be 2b 1e 73 01 18 bc be e0 9f ab c0 b8 99 08 72 e0 53 f7 b9 17 6b 95 05 75 1c 22 ae 4e 56 0e f4 ef ed 8b ec 75 14 57 d4 3f 0a 9f 8f f7 ed 1b 80 0e 8d e4 45 a3 98 5e f9 d0 a2 2d da 03 6d cb d7 11 58 b6 a0 bd 7c e9 8a ca c0 5c 85 ff 7e 2c 47 b0 a6 2b ca 08 91 20 f8 d6 f5 57 5e 6a a6 7c 8e d0 66 a8 a7 15 9b eb ef 9e 04 0c 00 fa 4f 90 73 6e 5d 1e 59 ca 56 84 43 55 f3 ad a8 81 3e 1a dd 4e 4d c9 c7 39 39 d9 9e 9c b6 7c a7 2b bb 9d 6b ed 07 ce 55 07 79 4a b4 07 28 e5 53 59 41 99 3d f1 a2 ea a3 dc 86 95 4d 57 60 8e f0 c0 c6 2f 2d 04 1d c9 c4 3d 7b 10 14 0f 26 c0 8b fe 1c 76 26 0b c8 7c 06 45 fb d2 31 3a 02 1f ae 7b dd e9 65 9e 49 e8 13 5d d5 1a 0b 8d 85 ab e8 6a a6 5a 20 ce e4 3b 5f 8a e3 f9 75 1e bc a8 eb c3 13 ab d3 99 1c e2 6c 09 30 59 a6 ec Data Ascii: 7+srSku"NVuW?E^-mX\|\~,G+ W^j\|fOsn]YVCU>NM99\|+kUyJ(SYA=MW`/-={&v&\|E1:{eI]jZ ;_ul0Y
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: f8 97 b5 d6 a3 aa a6 f6 37 61 38 ce 89 ce d7 da af 65 96 ef 78 52 99 24 cb 57 6d 50 d4 de 72 11 d9 bc 9f db ba e9 fb 37 23 f9 6e 68 c7 70 9f f3 3e 64 fa 7c 77 b9 db b2 0b 41 0f f7 17 55 37 92 fd fb 6b 8c 94 4b 96 af 5e b3 79 db d6 28 bb b4 7c d5 43 2b 2b db e6 d5 62 be 0d 2b 7c 8a 1b 15 44 2f a0 45 5b b4 fb dd b6 cc cf 8d b5 b1 1a 45 28 6e 07 c0 f2 15 80 ef ed 2b 32 a2 ff d0 00 df d6 88 4f f8 ca 4b c9 0f 19 f1 6e 77 6b 05 bc 7c 9d 11 31 1a 2b 44 31 16 51 50 fc 7b e8 bd 77 da e0 34 7d 80 eb ee 4c 1d 40 e4 30 67 54 98 8b 1a a5 b5 19 6d 56 91 62 ec 57 d1 00 0b 5d cd a6 d7 32 09 89 8e ee c3 2c f2 0d fe cf ff fa 7f f9 5f 71 00 96 52 a7 b0 28 f9 8b 55 55 e4 34 8b d1 06 b9 6f eb e0 0d e5 f7 2a c3 e3 c6 58 2b 77 7e 70 84 4c 32 93 df 30 76 d8 00 a8 73 0e 8f c4 7f Data Ascii: 7a8exR$WmPr7#nhp>d\|wAU7kK^y(\|C++b+\|D/E[E(n+2OKnwk\|1+D1QP{w4}L@0gTmVbW]2,_qR(UU4o*X+w~pL20vs
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 5a 17 68 ee 23 02 2e f9 14 27 da 0f dc 51 02 3d 22 df d0 12 b3 42 07 a5 df 25 f9 a9 e4 8c 57 63 f2 53 5f 78 1e 25 e1 5e e7 eb 75 02 20 09 90 f1 20 44 3f f6 58 08 e4 cd 17 15 e2 dd 2a b2 a7 76 6c a8 d0 86 e2 37 18 0f 43 aa a3 45 67 b6 1e 3d 05 33 eb 2c 9f 3e 12 ed e2 e2 d2 b9 4e a6 3c c2 0a d2 c6 e6 7c 7d 2a 0a a8 32 c4 9b 60 4f 3e 8b 2f 45 4e 35 2d 90 28 02 93 40 33 cb 9f 34 39 8b 71 a6 3b 0f 98 bf 54 df 03 ad d9 8f b3 d8 ae 2c 0b ff 34 a2 6b 38 27 b9 80 2d f3 71 0c 2d f1 71 79 85 61 c2 be 9f 6e e4 f7 b4 d8 b7 c2 2e 7b 7e 47 82 20 27 eb 9e 04 c4 15 fa 86 7f 8e 3b ff b3 8f b0 16 b0 ae 5a fa cf 16 72 98 18 cb d4 a7 58 60 76 d9 ae e6 87 f6 3a b9 14 c2 41 f1 4f 27 79 88 29 09 19 1d 7b 9b ea fa 92 0b 75 1d 21 8c b1 bb 9a ab 01 89 80 31 8b 20 37 d1 27 23 7b a7 Data Ascii: Zh#.'Q="B%WcS_x%^u D?Xvl7CEg=3,>N<\|}2`O>/EN5-(@349q;T,4k8'-q-qyan.{~G ';ZrX`v:AO'y){u!1 7'#{
2024-04-24 02:18:13 UTC	16384	IN	Data Raw: 06 d4 02 c0 07 59 16 e4 1b ab ef 51 a9 5e 5f 11 e0 95 20 32 61 05 20 08 0e 54 b7 75 fb d6 ad 39 a0 97 07 01 9e 71 4e 60 98 d7 07 d2 78 4d bb a6 63 ca 9e ad f8 c2 dd 46 47 16 fe 48 b5 bd cb 63 bb 9e 7a 6a fb 33 bb 6f f5 cb 96 95 4d 65 aa b1 b5 c3 b7 03 c0 03 53 77 bd 24 b0 39 d0 b4 dd 78 a0 b8 35 08 18 a9 a5 72 19 90 35 23 eb d7 2e a3 c3 b2 dd 0f b6 62 e3 90 02 18 94 06 36 2f b9 cd 4b f8 94 ab 77 18 4e 74 f2 8b 37 de 80 37 8e 4e e0 57 40 82 af bd fc b2 62 40 2c 00 1a 00 d5 94 5a 5b 1f 42 b0 ce 54 d3 23 17 55 78 ed a6 85 a0 e9 f2 38 93 d0 62 f2 cd 36 de 53 ba 97 e8 01 8e bd 03 7f ce df b8 d5 f0 1c 4c 88 d7 3f fb 2c 3b 81 3f 93 30 67 76 cb d0 f6 89 be bb 17 f1 fc e6 06 b4 3c 5e be b5 c2 1b 27 b3 6f 2c 6c 8d 3d 8d 67 c0 63 33 70 14 bb af 69 b6 a1 9e df 8d 81 Data Ascii: YQ^_ 2a Tu9qN`xMcFGHczj3oMeSw$9x5r5#.b6/KwNt77NW@b@,Z[BT#Ux8b6SL?,;?0gv<^'o,l=gc3pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49935	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:12 UTC	787	OUT	GET /creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p2/wp1-fs/1_BGJiUP/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:13 UTC	667	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28464 Connection: close Date: Wed, 24 Apr 2024 02:17:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 15:00:13 GMT ETag: "ff4429feba146d5a8e608db1b13cd9b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 95026a1fefec6be0989146de8d9def62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: FA9FlWlPE-MUo64pwAjSvTH9hAsFcxFhGr_8QZlnDfuhjC9Tk3JB1A== Age: 48
2024-04-24 02:18:13 UTC	15717	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 30 00 0f 00 00 00 01 59 1c 00 00 6e d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 6c 1b d8 48 1c 9d 3c 06 60 00 87 66 11 08 0a 83 da 38 83 8f 36 0b 87 1e 00 01 36 02 24 03 8e 36 04 20 05 a6 2f 07 99 07 5b f5 2e 71 02 bd 6d 8f 42 74 27 c0 a8 5a 6d ff 5d ce 12 36 b8 9a cd 79 0e 4a 99 79 2e 65 01 77 7e 70 1e 84 f0 3d bf aa 26 fb ff ff d3 92 8e 18 6b ec 6c 00 9c a6 69 d6 7f 5c ee 2c 3c cb db 2a 26 9c b8 4c ae f0 90 75 c8 d7 ed b9 a2 b7 dd ec c9 0e 04 e9 03 b2 af e1 c9 c5 35 ee 5d 8d c2 81 ad 5f 4f 73 56 55 e1 ea 77 77 9b ca 7b ab 32 55 85 3c ce 0d 9e c8 79 65 d9 0f 72 9e 58 b3 a9 fb 49 de c1 5c e6 24 e1 ec 74 17 09 d5 db 4c 54 c6 c0 6d 0e 08 eb 17 bb ec a4 21 3a 21 e6 10 d3 d0 Data Ascii: wOF2o0Yn?FFTMlH<`f866$6 /[.qmBt'Zm]6yJy.ew~p=&kli\,<*&Lu5]_OsVUww{2U<yerXI\$tLTm!:!
2024-04-24 02:18:13 UTC	12747	IN	Data Raw: 96 3e 46 98 c9 5b 4e 5d aa 5d 0e 48 0d a3 db 4c 5c 87 5c 85 70 73 9a a3 50 a3 28 49 c4 14 1a 33 37 c4 28 bf 0f f9 e9 65 b5 d9 dd 64 67 6a 70 6f 1d 5f 37 d1 2d 69 c0 e3 2d a1 6d dc 32 84 37 b5 c7 5d 41 c3 e9 03 1c a5 e8 53 9c b0 49 ec 37 09 ee 5e ba 3f 08 b5 85 8c 57 c9 99 f9 28 d0 34 67 3a fa 41 e0 ee 12 80 eb 9a f0 46 ec 04 e6 99 de 7e 71 f9 89 be de dc ec 66 ed a7 ee 65 ba e4 48 97 eb 65 f6 bd 62 e8 f5 5c cf 4d f3 b6 24 17 3b 47 b8 69 9f 89 dc c6 8e 64 fb 10 2f b9 1b 95 43 b6 70 dd 7d 86 ec 67 7e 06 1e dc 37 4e 09 47 9f 2c 74 f3 f3 1b 0f 7a 69 1a 78 ee 26 1d 93 ca fd c1 40 cb 35 38 23 c3 af ef 45 e2 90 e9 a6 29 83 12 2e 7b f6 7f d8 6a aa 65 67 45 1b 93 8c 66 8f 25 77 f7 7a 42 69 a8 04 7d 32 14 68 ac fa a9 f8 3c c3 dd a4 6e 12 bb 7b 51 8e 51 b0 96 2c bf Data Ascii: >F[N]]HL\\psP(I37(edgjpo_7-i-m27]ASI7^?W(4g:AF~qfeHeb\M$;Gid/Cp}g~7NG,tzix&@58#E).{jegEf%wzBi}2h<n{QQ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49937	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:13 UTC	2290	OUT	GET /_next/static/chunks/pages/404-2628cd0d85d8ff64.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:13 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4562 Connection: close Date: Thu, 28 Mar 2024 13:47:35 GMT Last-Modified: Thu, 28 Mar 2024 13:47:23 GMT ETag: "34eae0e4b14ba01eee4d85c9c6fa8bbd" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8CsGISzPDMABitB-yqF_EW9rzZnitxM_qQWRWwY9BF_ih1W2rmK4bQ== Age: 2291438
2024-04-24 02:18:13 UTC	4562	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 39 37 5d 2c 7b 33 30 35 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 34 30 34 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 33 32 39 33 38 29 7d 5d 29 7d 2c 31 32 31 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 72 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6e 3d 74 28 35 32 33 32 32 29 2c 6f 3d 74 28 31 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2197],{30594:function(e,r,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/404",function(){return t(32938)}])},12146:function(e,r,t){"use strict";t.d(r,{T:function(){return s}});var n=t(52322),o=t(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49938	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:13 UTC	2312	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_buildManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:13 UTC	605	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9917 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "5b03575b6d4e43f997e8080e4765bd87" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lcksGH8pNxLJYtGmUpKHNRkLbCIqDUywsQsA_q1SWD-gvAMelHl0gA== Age: 41147
2024-04-24 02:18:13 UTC	9917	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 2c 63 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 7b 73 6f 75 72 63 65 3a 22 2f 63 6f 6f 6b 69 65 73 2f 63 6c 65 61 72 22 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 22 2f 61 70 69 2f 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 73 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 63 73 6d 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 77 65 62 68 6f 6f 6b 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 72 61 69 6c 73 2f 6d 61 69 6c 65 72 73 2f 3a 70 61 74 68 2a 22 7d 2c 7b 73 6f 75 72 63 65 3a 22 2f 70 61 79 70 61 6c 2f 72 65 74 75 72 6e 22 7d 2c 7b 73 6f Data Ascii: self.__BUILD_MANIFEST=function(e,a,s,c,t,n){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/cookies/clear",destination:"/api/clear-cookies"},{source:"/csm"},{source:"/webhooks/:path"},{source:"/rails/mailers/:path"},{source:"/paypal/return"},{so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49939	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:13 UTC	2310	OUT	GET /_next/static/c98be9eb9f206547aea10d46f253ea37ea3d3db7/_ssgManifest.js HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _ga=GA1.2.1577694276.1713925069; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925074.0.0.496837087; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:13 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 77 Connection: close Date: Tue, 23 Apr 2024 14:52:27 GMT Last-Modified: Tue, 23 Apr 2024 13:52:33 GMT ETag: "b6652df95db52feb4daf4eca35380933" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KqLL5OoNXTtovx69qzZwT0ofERnhGYv8yYJ-8ZnuQJPjd41HcQumyw== Age: 41147
2024-04-24 02:18:13 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49940	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:13 UTC	651	OUT	GET /api/segment?pid=712597&pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:14 UTC	748	IN	HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: Location: https://di.rlcdn.com/api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 02:18:14 GMT; Secure; SameSite=None Date: Wed, 24 Apr 2024 02:18:14 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49942	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:14 UTC	3449	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925092439&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=361605886.1713925093&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925092439&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A18%3A12.608%2B02%3A00&epn.hit_timestamp_unix=1713925092608&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925092439-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925092439-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=10&tfd=3323&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069
2024-04-24 02:18:14 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:14 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775979; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 40da406c5110ccf04e1cf549a71698dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: BZSjInLHUnqhNKkJrbP54n07tBTT0m7uEfEWHycXAC_yb0jAc_fzbg==
2024-04-24 02:18:14 UTC	661	IN	Data Raw: 32 38 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 33 38 39 37 38 32 35 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 Data Ascii: 28eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.171392506
2024-04-24 02:18:14 UTC	593	IN	Data Raw: 32 34 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 33 38 39 37 38 32 35 34 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 24aevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%
2024-04-24 02:18:14 UTC	653	IN	Data Raw: 32 38 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 38 34 39 30 35 38 34 31 26 66 73 74 3d 31 37 31 33 39 32 35 30 39 34 36 36 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 286event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=284905841&fst=1713925094662&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:15 UTC	361	IN	Data Raw: 31 36 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 66 7a 73 67 57 56 58 79 4f 4d 71 4f 64 52 76 61 64 42 6c 66 25 32 42 7a 57 43 34 48 25 32 42 4c 38 41 31 79 25 32 46 4f 31 47 36 7a 74 68 4e 68 4c 42 36 66 70 4d 5a 77 6d 6d 62 34 5a 69 74 76 31 75 77 36 6a 70 42 53 75 48 6e 43 4e 6d 34 4c 79 4e 52 39 7a 54 54 58 72 25 32 46 76 39 48 72 58 67 6c 67 34 7a 25 32 46 56 71 4d 58 52 69 56 69 36 56 38 76 4c 4a 62 25 32 42 6f 63 53 53 65 4e 42 64 6f 62 58 6a 31 36 71 32 44 4d 77 5a 6b 57 52 31 43 36 56 7a 54 42 35 72 75 59 74 58 46 43 61 75 61 38 74 52 70 68 4a 5a 78 58 6c 6c 38 63 4a 66 66 Data Ascii: 162event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff
2024-04-24 02:18:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49945	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:14 UTC	2090	OUT	GET /assets/images/spiral.svg HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713925983434&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:14 UTC	744	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 63700 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0 Date: Wed, 24 Apr 2024 02:18:14 GMT ETag: W/"f8d4-18f0b1d3698" Last-Modified: Tue, 23 Apr 2024 13:20:15 GMT Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kj3YZDb8jrtyt6nKIx6i35DWJWHSV76DxXjGXYMC_NR-3KKAnQlVEg==
2024-04-24 02:18:14 UTC	3542	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 30 20 34 36 30 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 64 39 39 33 33 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 66 31 66 31 66 32 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 35 36 39 63 66 38 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 31 61 30 66 31 62 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 53 70 69 72 61 6c 5f 4e 65 77 22 20 76 69 65 77 42 6f 78 3d 22 2d 33 37 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 460 460"> <style> .st0{fill:#bd9933}.st1{fill:#f1f1f2}.st2{fill:#569cf8}.st3{fill:#1a0f1b} </style> <symbol id="Spiral_New" viewBox="-37
2024-04-24 02:18:14 UTC	16384	IN	Data Raw: 36 20 33 32 2e 35 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 31 36 2e 32 2d 33 32 31 2e 32 63 2d 31 38 2e 37 2d 36 2e 38 2d 33 37 2e 39 2d 31 32 2d 35 37 2e 35 2d 31 35 2e 34 6c 35 2e 37 2d 33 32 2e 35 63 32 31 2e 35 20 33 2e 38 20 34 32 2e 36 20 39 2e 34 20 36 33 2e 31 20 31 36 2e 39 6c 2d 31 31 2e 33 20 33 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 31 37 30 2e 32 2d 32 39 36 2e 32 63 2d 31 37 2e 33 2d 39 2e 38 2d 33 35 2e 34 2d 31 38 2e 32 2d 35 34 2e 31 2d 32 35 6c 31 31 2e 32 2d 33 31 63 32 30 2e 35 20 37 2e 35 20 34 30 2e 33 20 31 36 2e 36 20 35 39 2e 33 20 32 37 2e 34 6c 2d 31 36 2e 34 20 32 38 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 Data Ascii: 6 32.5z"/> <path class="st1" d="M116.2-321.2c-18.7-6.8-37.9-12-57.5-15.4l5.7-32.5c21.5 3.8 42.6 9.4 63.1 16.9l-11.3 31z"/> <path class="st2" d="M170.2-296.2c-17.3-9.8-35.4-18.2-54.1-25l11.2-31c20.5 7.5 40.3 16.6 59.3 27.4l-16.4 28.6z"/> <path
2024-04-24 02:18:14 UTC	8192	IN	Data Raw: 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 2d 31 31 37 2e 39 20 32 30 34 2e 39 63 31 31 2e 39 20 36 2e 39 20 32 34 2e 35 20 31 32 2e 37 20 33 37 2e 34 20 31 37 2e 34 6c 2d 37 2e 38 20 32 31 2e 34 63 2d 31 34 2e 32 2d 35 2e 31 2d 32 37 2e 39 2d 31 31 2e 35 2d 34 31 2d 31 39 6c 31 31 2e 34 2d 31 39 2e 38 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 2d 31 35 31 2e 38 20 31 38 31 2e 33 63 32 2e 37 20 32 2e 32 20 35 2e 33 20 34 2e 34 20 38 2e 31 20 36 2e 35 6c 38 2e 33 20 36 2e 31 20 38 2e 36 20 35 2e 37 63 32 2e 39 20 31 2e 38 20 35 2e 39 20 33 2e 35 20 38 2e 38 20 35 2e 33 6c 2d 31 31 2e 34 20 31 39 2e 38 63 2d 33 2e 32 2d 32 2d 36 2e 35 2d 33 2e 38 2d 39 2e 37 2d 35 2e 38 6c 2d 39 2e 34 2d Data Ascii: path class="st0" d="M-117.9 204.9c11.9 6.9 24.5 12.7 37.4 17.4l-7.8 21.4c-14.2-5.1-27.9-11.5-41-19l11.4-19.8z"/> <path class="st1" d="M-151.8 181.3c2.7 2.2 5.3 4.4 8.1 6.5l8.3 6.1 8.6 5.7c2.9 1.8 5.9 3.5 8.8 5.3l-11.4 19.8c-3.2-2-6.5-3.8-9.7-5.8l-9.4-
2024-04-24 02:18:15 UTC	16384	IN	Data Raw: 20 32 31 2e 32 2d 32 31 2e 35 20 33 30 2e 39 6c 2d 31 34 2e 36 2d 31 32 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 32 36 2e 37 20 31 35 30 2e 35 63 38 2e 38 2d 37 2e 34 20 31 36 2e 39 2d 31 35 2e 35 20 32 34 2e 33 2d 32 34 2e 32 6c 31 34 2e 35 20 31 32 2e 32 63 2d 38 2e 31 20 39 2e 36 2d 31 37 20 31 38 2e 35 2d 32 36 2e 36 20 32 36 2e 36 6c 2d 31 32 2e 32 2d 31 34 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 39 38 2e 36 20 31 37 30 2e 32 63 39 2e 39 2d 35 2e 38 20 31 39 2e 33 2d 31 32 2e 34 20 32 38 2e 31 2d 31 39 2e 37 6c 31 32 2e 32 20 31 34 2e 35 63 2d 39 2e 36 20 38 2e 31 2d 31 39 2e 39 20 31 35 2e 33 2d 33 30 2e 38 20 32 31 2e 36 6c 2d 39 Data Ascii: 21.2-21.5 30.9l-14.6-12.3z"/> <path class="st3" d="M126.7 150.5c8.8-7.4 16.9-15.5 24.3-24.2l14.5 12.2c-8.1 9.6-17 18.5-26.6 26.6l-12.2-14.6z"/> <path class="st0" d="M98.6 170.2c9.9-5.8 19.3-12.4 28.1-19.7l12.2 14.5c-9.6 8.1-19.9 15.3-30.8 21.6l-9
2024-04-24 02:18:15 UTC	16384	IN	Data Raw: 2e 34 2d 37 2e 38 63 35 2e 31 20 31 34 2e 32 20 39 2e 31 20 32 38 2e 38 20 31 31 2e 38 20 34 33 2e 36 6c 2d 32 32 2e 34 20 34 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 31 32 2e 32 2d 33 37 2e 38 63 2d 32 2e 32 2d 31 32 2e 34 2d 35 2e 35 2d 32 34 2e 35 2d 39 2e 37 2d 33 36 2e 33 6c 31 39 2e 35 2d 37 2e 31 63 34 2e 37 20 31 32 2e 39 20 38 2e 32 20 32 36 2e 33 20 31 30 2e 37 20 33 39 2e 38 6c 2d 32 30 2e 35 20 33 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 32 31 35 2e 37 2d 2e 33 63 30 2d 31 32 2e 36 2d 31 2e 32 2d 32 35 2e 31 2d 33 2e 34 2d 33 37 2e 34 6c 32 30 2e 35 2d 33 2e 37 63 32 2e 34 20 31 33 2e 35 20 33 2e 37 20 32 37 2e 33 20 33 2e 37 20 34 Data Ascii: .4-7.8c5.1 14.2 9.1 28.8 11.8 43.6l-22.4 4z"/> <path class="st0" d="M212.2-37.8c-2.2-12.4-5.5-24.5-9.7-36.3l19.5-7.1c4.7 12.9 8.2 26.3 10.7 39.8l-20.5 3.6z"/> <path class="st1" d="M215.7-.3c0-12.6-1.2-25.1-3.4-37.4l20.5-3.7c2.4 13.5 3.7 27.3 3.7 4
2024-04-24 02:18:15 UTC	2814	IN	Data Raw: 22 73 74 31 22 20 64 3d 22 4d 35 35 2e 37 2d 31 35 33 2e 39 63 2d 39 2d 33 2e 33 2d 31 38 2e 32 2d 35 2e 37 2d 32 37 2e 35 2d 37 2e 34 6c 32 2e 37 2d 31 35 2e 36 63 31 30 2e 33 20 31 2e 38 20 32 30 2e 34 20 34 2e 35 20 33 30 2e 32 20 38 2e 31 6c 2d 35 2e 34 20 31 34 2e 39 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 38 31 2e 36 2d 31 34 31 2e 39 63 2d 38 2e 33 2d 34 2e 37 2d 31 36 2e 39 2d 38 2e 38 2d 32 35 2e 39 2d 31 32 6c 35 2e 34 2d 31 34 2e 38 63 39 2e 38 20 33 2e 36 20 31 39 2e 33 20 38 20 32 38 2e 34 20 31 33 2e 32 6c 2d 37 2e 39 20 31 33 2e 36 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 30 35 2d 31 32 35 2e 36 63 2d 31 2e 39 2d 31 2e 35 2d 33 2e 37 Data Ascii: "st1" d="M55.7-153.9c-9-3.3-18.2-5.7-27.5-7.4l2.7-15.6c10.3 1.8 20.4 4.5 30.2 8.1l-5.4 14.9z"/> <path class="st2" d="M81.6-141.9c-8.3-4.7-16.9-8.8-25.9-12l5.4-14.8c9.8 3.6 19.3 8 28.4 13.2l-7.9 13.6z"/> <path class="st3" d="M105-125.6c-1.9-1.5-3.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49943	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:14 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:14 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:14 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: W7XBSSP1XC2P26GSHVZQ Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:14 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:14 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49944	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:14 UTC	2277	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2713 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:14 UTC	2713	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 65 64 63 65 38 63 66 63 2d 65 62 39 33 2d 34 62 31 38 2d 38 36 32 34 2d 31 37 65 32 64 62 33 64 34 65 38 32 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"edce8cfc-eb93-4b18-8624-17e2db3d4e82","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:18:15 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:15 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:15 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:15 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49947	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:14 UTC	722	OUT	GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:15 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:14 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49946	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	2968	OUT	GET /i.gif?e=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&s=rMwg06isFyzqRDQ2ahwucWhvDcU HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925087.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.7; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069
2024-04-24 02:18:15 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49949	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	1385	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:15 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"15153712590279181841"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"15153712590279181841","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"15153712590279181841","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"15153712590279181841","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"15153712590279181841","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49952	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	715	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:15 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:15 GMT x-amzn-RequestId: fc251b64-5d31-4e91-81e2-6a1b36caa1d6 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 6ef4ae3252d79e101362ec4ef7f99a1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: Hr7HuFnLfU_c_4tFxe38jxlJ79GmXXYSf560x2-bSwZBV0auT9BNjQ==
2024-04-24 02:18:15 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49950	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	1280	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:15 UTC	1135	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49953	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:15 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:15 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: YEA1S4B6BSYAH5G90MSJ Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:15 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49954	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	2434	OUT	GET /_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:15 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:15 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 ed3ff8ca2911844cdbf6a8f82e3edb7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: NyrbgYj9tAXwQu1sdamCFnEOerv3Fwz4faZKuDRiAiWAP_okXR8GNA==
2024-04-24 02:18:15 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49955	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:15 UTC	3189	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925092439&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=361605886.1713925093&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925092439&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=7&ep.hit_timestamp_local=2024-04-24T04%3A18%3A12.608%2B02%3A00&epn.hit_timestamp_unix=1713925092608&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925092439-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925092439-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=10&tfd=3323&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:16 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:16 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775978; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 8c2b8d0cfd83d2fc43b3bdc3fb334626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: MXOx66mRqlT3FQhv5vv4ALOXUjS1ftZHA3AvhL7XmhtVjPaaKTbVVA==
2024-04-24 02:18:16 UTC	662	IN	Data Raw: 32 38 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 38 34 35 36 31 38 33 36 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 Data Ascii: 28fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1845618367;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.17139250
2024-04-24 02:18:16 UTC	594	IN	Data Raw: 32 34 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 38 34 35 36 31 38 33 36 37 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 75 6e 64 65 66 69 6e 65 64 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: 24bevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1845618367;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F
2024-04-24 02:18:16 UTC	653	IN	Data Raw: 32 38 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 33 32 39 35 36 35 36 34 26 66 73 74 3d 31 37 31 33 39 32 35 30 39 36 32 34 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 286event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=132956564&fst=1713925096245&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:16 UTC	357	IN	Data Raw: 31 35 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 35 6b 49 65 4f 72 56 4f 25 32 46 77 41 44 44 38 58 4c 39 52 4c 6e 64 6d 57 6b 77 31 6a 33 51 45 33 31 44 38 31 73 5a 61 53 6c 33 36 74 76 31 61 4f 4e 6a 4d 55 53 37 6b 62 7a 4d 77 61 72 31 43 33 31 45 6d 73 6c 32 5a 55 6e 32 42 41 5a 4b 50 54 59 5a 66 36 4b 4e 6e 30 4c 4a 56 25 32 42 68 34 65 69 72 73 42 79 74 36 4a 78 32 70 6e 39 4e 52 6d 25 32 46 55 42 78 7a 70 30 5a 45 4f 65 41 33 66 54 6b 4c 54 72 6a 32 66 25 32 42 71 52 37 54 55 50 4f 51 76 78 54 62 4f 71 6d 7a 67 34 6a 6d 6c 25 32 42 37 77 6a 6e 63 4f 68 6e 46 4b 33 36 64 38 52 Data Ascii: 15eevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=5kIeOrVO%2FwADD8XL9RLndmWkw1j3QE31D81sZaSl36tv1aONjMUS7kbzMwar1C31Emsl2ZUn2BAZKPTYZf6KNn0LJV%2Bh4eirsByt6Jx2pn9NRm%2FUBxzp0ZEOeA3fTkLTrj2f%2BqR7TUPOQvxTbOqmzg4jml%2B7wjncOhnFK36d8R
2024-04-24 02:18:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49958	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925092646 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:16 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:16 GMT x-amzn-RequestId: 64909bb3-cd38-4ac8-af0e-c4ea8b4aabfe X-Cache: Miss from cloudfront Via: 1.1 874fee4bffb62e944762b3174675d18e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: vHYxa2ekT-tVFtLCKS0ZTYf52JmCfwuGnljCvNMGhZZxQSRYkys7Ig==
2024-04-24 02:18:16 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49957	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	1073	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=438978254;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fundefined;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fundefined;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fundefined? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:16 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"15153712590279181841"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"15153712590279181841","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"15153712590279181841","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"15153712590279181841","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"15153712590279181841","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49959	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	1320	OUT	GET /pagead/1p-user-list/778938880/?random=284905841&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqA65mBBj_-q1MzSNiND_mvIDorH_OPsGGRkLCGvdlxHzEFZHA&random=3777839157 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:16 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49961	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:16 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:16 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49962	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	488	OUT	GET /api/segment?pdata=sid%3D7%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c&pid=712597&redirect=1 HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:16 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:16 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49963	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	2201	OUT	GET /_set_cookie?val=fzsgWVXyOMqOdRvadBlf%2BzWC4H%2BL8A1y%2FO1G6zthNhLB6fpMZwmmb4Zitv1uw6jpBSuHnCNm4LyNR9zTTXr%2Fv9HrXglg4z%2FVqMXRiVi6V8vLJb%2BocSSeNBdobXj16q2DMwZkWR1C6VzTB5ruYtXFCaua8tRphJZxXll8cJff3IS7%2FEyViBsrvjQIZE2E%2BNPkNcc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:16 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:16 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 8c2b8d0cfd83d2fc43b3bdc3fb334626.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: sUfzMNm9CwBECYRK5F4MgxmOukXkcP08Spxm8dlGXgZbVK0jGvG9FA==
2024-04-24 02:18:16 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49956	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:16 UTC	2006	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:17 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:16 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49964	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:17 UTC	2735	OUT	GET /i.gif?e=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&s=rMwg06isFyzqRDQ2ahwucWhvDcU HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; __td_signed=true; _td=baf3418d-177b-4f78-9bff-5155117ab29b; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925087406\|1\|1\|bat.bing.com/p/insights/c/d; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925093.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.8
2024-04-24 02:18:17 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49965	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:17 UTC	859	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=361605886.1713925093&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:17 UTC	852	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=361605886.1713925093&url=https%3A%2F%2Fwetransfer.com%2Fundefined&dma_cps=sypham&dma=1&npa=0&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	49966	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:17 UTC	767	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:17 UTC	388	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 02:18:17 GMT Content-Length: 281 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:17 UTC	281	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 70 76 3d 31 2e 31 2e 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 38 31 63 33 6a 67 6e 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 25 32 46 75 6e 64 65 66 69 6e 65 64 26 75 70 69 64 3d 72 65 33 36 6b 62 65 26 75 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0">https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	49971	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:18 UTC	909	OUT	GET /rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:19 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:19 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	49967	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:18 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925096588 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:19 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:18:19 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	49976	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	905	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:19 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=164, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	49977	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925098311&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
2024-04-24 02:18:19 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5038469172364467 Date: Wed, 24 Apr 2024 02:18:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:19 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	49979	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925098312&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
2024-04-24 02:18:19 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1920706125657933 Date: Wed, 24 Apr 2024 02:18:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:19 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	49975	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	1015	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:20 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:20 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:20 UTC	1583	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:20 UTC	66	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e Data Ascii: 43PNGIHDRIDATxc-IEN
2024-04-24 02:18:20 UTC	12	IN	Data Raw: 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: DB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49978	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	1600	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925098315 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
2024-04-24 02:18:19 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:19 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7452399384237215 Date: Wed, 24 Apr 2024 02:18:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	49981	15.197.193.217	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	818	OUT	GET /track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fundefined&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b
2024-04-24 02:18:19 UTC	549	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:19 GMT Content-Type: text/html Content-Length: 929 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:18:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:19 UTC	929	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49982	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:19 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925096588 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 927 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:19 UTC	927	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 38 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"8","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:18:20 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:20 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:18:20 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:20 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	49983	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:20 UTC	1631	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925099080&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZabmMzeDIvSTRrb09wOERUVG0vbVphQ2JFd3hrTGZUTkx0TWtMOXRNcTYvZEx4dlhoUVdsc2pNRC9oZ2R1VCtYaVVtTWs3eXBEQjdyYldlSStMMTFUSnpOYk8zRHl0emQ5azNWa0M3dUp4ST0mVGpGeG9pbFhGdVdUR3pCaHRQaHV1Z0RLQlpBPQ=="
2024-04-24 02:18:20 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="; Expires=Thu, 24 Apr 2025 02:18:20 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1818507356712174 Date: Wed, 24 Apr 2024 02:18:20 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	49985	18.154.142.121	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:20 UTC	751	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:20 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 09:45:48 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 709cc417cbe92a7dda62751add484bb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: oIC8bbmlR3Gc3d86y4x_jphb3rXMuqQedWFHa_uDMDwOBCxXmGS6BA== Age: 59553
2024-04-24 02:18:20 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	49988	74.125.137.154	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:21 UTC	1045	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YzE1YTY4ZjItNDM0NC00MTZlLTk5NGQtODk4NGQwNTA4NDFi&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:21 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1 Date: Wed, 24 Apr 2024 02:18:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:21 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	49989	104.18.36.155	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:21 UTC	800	OUT	GET /rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:22 UTC	1231	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 02:18:22 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent=&C=1 CF-Ray: 87929a2f9a7a09fb-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zihr7sAoIXAAAFmlAkDQ0QAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 02:18:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=4139; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:18:22 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=4139; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:18:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JO0pSikEMmvc%2BLOkeQYGhEqK1Hy0bXbEWOIEKTTd3oQnwB6d629JBKjtTlY3FnXfopoIYJiSsioBGq8JJKd%2Bd%2BX01etQ7KH0CEkchkbuW5OIZs6%2BAHnkWO7IYp%2BFsOVDzA%2FfxmRG3xVB0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	49994	104.18.36.155	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	866	OUT	GET /rum?cm_dsp_id=39&external_user_id=c15a68f2-4344-416e-994d-8984d050841b&expiration=1716517099&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zihr7sAoIXAAAFmlAkDQ0QAA; CMPS=4139; CMPRO=4139
2024-04-24 02:18:22 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87929a33fe9969e6-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zihr7sAoIXAAAFmlAkDQ0QAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 02:18:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4139; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 02:18:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgdJeqaO4cdmRFMu92sGNjTfekMG%2BmUuRpeekdrMPEJN4GELarQWHEQiEouZ%2BPFWGkPCIytbAejhRkVhZCk4uWbxxu7hGCnM%2B0720Tayapy7FCvym1DZUboZ8uzzC4o5zOz9r2GkgxsJeg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 02:18:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	49990	15.197.193.217	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	918	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:22 UTC	552	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:22 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUgASgDMgsI_N38o_GD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Thu, 24 Apr 2025 02:18:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:22 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	49992	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	1086	OUT	GET /pagead/1p-user-list/778938880/?random=284905841&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fundefined&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqA65mBBj_-q1MzSNiND_mvIDorH_OPsGGRkLCGvdlxHzEFZHA&random=3777839157 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:22 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	49991	15.197.193.217	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	1038	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=c15a68f2-4344-416e-994d-8984d050841b&google_gid=CAESENpdyclN-fcrPizj1jeyVOo&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsI1KL69tqD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUoAzILCPzd_KPxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:22 UTC	552	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:22 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUgASgDMgsI_N38o_GD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.; expires=Thu, 24 Apr 2025 02:18:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:22 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	49996	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	671	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:22 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	49995	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	675	OUT	GET /rp.gif?ts=1713925096517&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:22 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:22 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	49997	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925098312&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
2024-04-24 02:18:22 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5718060616907008 Date: Wed, 24 Apr 2024 02:18:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:22 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	49999	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925098311&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
2024-04-24 02:18:22 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4135859247778527 Date: Wed, 24 Apr 2024 02:18:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:22 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50000	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	708	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fundefined&rl=&if=false&ts=1713925098271&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925096510&coo=false&eid=1713925092439-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:22 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:22 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:22 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	49998	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	1398	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925098315 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
2024-04-24 02:18:22 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:22 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1964468815807435 Date: Wed, 24 Apr 2024 02:18:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50002	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:22 UTC	1429	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925099080&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fundefined%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ0cDljd3ZaczE3eStFVjVBYmZyZDZFdXcwcU5aemN0cEwwV3dHQUtHRVpuRDNRMHRjMFlCSGRpY1JKL29UczhvTXg3WFp1Z1J1OXIwL1dMejY5eG9mU3VNUHpmQVdiNFJTS1VvS3pqTElRND0mYzdzeXRKekhkZ2VScDZReExocE1QaThGeHdnPQ=="
2024-04-24 02:18:22 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:22 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="; Expires=Thu, 24 Apr 2025 02:18:22 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1582565419679937 Date: Wed, 24 Apr 2024 02:18:22 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50001	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:23 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925096588 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:23 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:23 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:23 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50003	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:23 UTC	2277	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9
2024-04-24 02:18:23 UTC	1132	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 3f 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 54 52 4e 5f 54 44 4c 5f 30 35 26 75 74 6d 5f 73 6f 75 72 63 65 3d 73 65 6e 64 67 72 69 64 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 74 72 6b 3d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=
2024-04-24 02:18:23 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:23 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:23 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:23 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50005	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:24 UTC	2006	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9
2024-04-24 02:18:25 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:25 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50007	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:24 UTC	2375	OUT	GET /legal/ccpa HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _dd_s=rum=0&expire=1713926003096&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:25 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10041 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:18:25 GMT ETag: "2739-Tc5ojKfI97gGQ61A2JcO+9HxZW4" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: soqD9XskA4dsHy28Ui_0Lz1TZGo-gB4SJ2v54wTeeC8l56-9mLV9tg==
2024-04-24 02:18:25 UTC	10041	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50008	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:25 UTC	2196	OUT	GET /_next/static/chunks/pages/legal/ccpa-6fbb6b96eac00e08.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925093.0.0.496837087; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9
2024-04-24 02:18:26 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 516 Connection: close Date: Wed, 24 Apr 2024 02:16:46 GMT Last-Modified: Tue, 23 Apr 2024 23:19:11 GMT ETag: "442c1398c605b69d6cc3349439d63049" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Mw3aO99IuBdIWYoe3uXEmotpoYFJbYXPjfp261YBI3q5-Tp7HfFxNg== Age: 101
2024-04-24 02:18:26 UTC	516	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 36 33 5d 2c 7b 37 39 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 32 39 30 36 36 29 7d 5d 29 7d 2c 32 39 30 36 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4463],{79711:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/legal/ccpa",function(){return u(29066)}])},29066:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return c}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50009	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:25 UTC	711	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:26 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:26 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50010	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:25 UTC	3470	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A24.829%2B02%3A00&epn.hit_timestamp_unix=1713925104829&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925104780-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=5&tfd=1049&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.1.1577694276.1713925069; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087
2024-04-24 02:18:26 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:26 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775968; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 b8b7b4472272aaee21d26edda0e8f828.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: yXMZsBGVm-DOjBSv5XkAMf3-84dT4aX2YvgGBaqlLe_zcDdQSXoTIA==
2024-04-24 02:18:26 UTC	1267	IN	Data Raw: 34 65 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 35 36 30 33 36 34 30 35 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 Data Ascii: 4ecevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.17139
2024-04-24 02:18:26 UTC	656	IN	Data Raw: 32 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 38 33 33 35 34 30 33 39 38 26 66 73 74 3d 31 37 31 33 39 32 35 31 30 36 33 32 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 289event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=833540398&fst=1713925106321&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:26 UTC	353	IN	Data Raw: 31 35 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 34 49 55 58 47 4f 48 71 45 6f 68 45 78 34 6c 54 58 5a 31 56 63 64 4b 56 6c 6c 63 25 32 42 52 75 72 76 4b 52 47 33 79 61 4d 55 25 32 46 6b 62 25 32 42 4e 52 36 44 49 6d 59 47 46 75 69 51 68 4d 6e 44 42 66 50 41 38 59 68 48 32 42 6d 71 71 54 45 6a 72 72 71 35 63 74 30 62 65 6a 25 32 42 65 72 6a 36 57 4e 6e 4b 31 4b 42 50 4d 4d 50 67 63 55 31 59 74 76 6f 58 31 5a 70 49 65 6f 77 7a 4c 6b 69 55 53 50 6d 77 76 6e 68 4b 74 75 6d 70 67 36 31 30 6d 63 32 36 6d 45 55 79 34 50 6c 61 52 52 33 54 32 6a 7a 6c 77 55 65 6f 4a 59 6a 75 55 77 49 33 50 Data Ascii: 15aevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=4IUXGOHqEohEx4lTXZ1VcdKVllc%2BRurvKRG3yaMU%2Fkb%2BNR6DImYGFuiQhMnDBfPA8YhH2BmqqTEjrrq5ct0bej%2Berj6WNnK1KBPMMPgcU1YtvoX1ZpIeowzLkiUSPmwvnhKtumpg610mc26mEUy4PlaRR3T2jzlwUeoJYjuUwI3P
2024-04-24 02:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50012	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:26 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:26 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HAGVC9854XWYJ1RCEDVK Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:26 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:26 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:26 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50014	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	477	OUT	GET /api/segment?pid=712597&pdata=sid%3D9%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:27 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:26 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50016	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	1395	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:27 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16027503704189624188"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16027503704189624188","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16027503704189624188","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16027503704189624188","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16027503704189624188","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50017	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	1290	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:27 UTC	1145	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50006	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	2511	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=9d9f3387-5f7f-4d32-acca-2cc3f173a761..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926005124&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:26 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:18:27 UTC	1504	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:18:27 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:18:27 GMT; secure Set-Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-2528k-206429 X-Permitted-Cross-Domain-Policies: none X-Request-Id: d517925d1264c0728a66e47ed440a5d9 X-Runtime: 0.006164 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: t3aXiLwXoT0nJzNLMbZVPk2tuyfMQAuzt6lNNKxGXT_ckmACQK4R8A==
2024-04-24 02:18:27 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50019	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:26 UTC	720	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:27 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:27 GMT x-amzn-RequestId: 29d73f33-c33c-4474-a057-07e191c7cdc4 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 41bf1cdea51df206da3445c53743512e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: t5ug_nl9QJ1O5Q6d9zbQLH2O_SyISC6ueyoBmup1ETtQ3IAJ3Ico9w==
2024-04-24 02:18:27 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50021	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	2426	OUT	GET /_set_cookie?val=4IUXGOHqEohEx4lTXZ1VcdKVllc%2BRurvKRG3yaMU%2Fkb%2BNR6DImYGFuiQhMnDBfPA8YhH2BmqqTEjrrq5ct0bej%2Berj6WNnK1KBPMMPgcU1YtvoX1ZpIeowzLkiUSPmwvnhKtumpg610mc26mEUy4PlaRR3T2jzlwUeoJYjuUwI3PXlR7yVictO6kK3cxOhp8mIk%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
2024-04-24 02:18:27 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 02:18:27 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5b04a01f48583fc1372237be2a8b3964.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: UnbNdA8CumqMVB8TcWYASJdJwiqECAgPoxzSLGh0xrliStVpmJ-icQ==
2024-04-24 02:18:27 UTC	54	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=
2024-04-24 02:18:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50020	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:27 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:27 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: EVHZFYGM5S4VTH28S0QM Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:27 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:27 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:27 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50022	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	2278	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
2024-04-24 02:18:27 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:21 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ad3c0e63e032c703faf8afd0daa0f23c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z6g2epbDlvS6HZndbKlkkufu0lc_00uJkktb-u8VggaYfOAToMLupA== Age: 154736
2024-04-24 02:18:27 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50025	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	3192	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&sid=1713925068&sct=1&seg=1&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A24.829%2B02%3A00&epn.hit_timestamp_unix=1713925104829&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925104780-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=5&tfd=1049&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
2024-04-24 02:18:27 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:27 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775966; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: fkPBIsVmagDo21NiBNcQiK3PLvlv7HU1_5DTCui2lKBsIWOI8rZgSg==
2024-04-24 02:18:27 UTC	668	IN	Data Raw: 32 39 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 36 32 35 39 31 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 Data Ascii: 295event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.17139250
2024-04-24 02:18:27 UTC	600	IN	Data Raw: 32 35 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 34 36 32 35 39 31 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: 251event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=4625913;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F
2024-04-24 02:18:27 UTC	657	IN	Data Raw: 32 38 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 30 32 31 38 36 33 35 33 34 26 66 73 74 3d 31 37 31 33 39 32 35 31 30 37 36 36 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 28aevent: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=2021863534&fst=1713925107662&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:18:27 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 76 37 25 32 42 30 45 4c 39 48 70 25 32 46 6b 68 73 61 6c 49 25 32 42 63 45 25 32 42 30 65 4b 4b 41 42 51 63 6e 42 4b 43 63 72 67 4e 42 69 47 4b 63 66 69 43 5a 30 6d 55 4f 56 53 74 6a 32 48 70 52 4b 32 43 6e 64 52 59 62 36 65 62 66 52 33 6a 57 78 58 31 4d 36 52 35 41 67 51 51 4f 70 72 6a 78 6d 4f 54 6e 78 5a 70 32 36 44 59 62 61 53 64 75 37 66 42 7a 41 4f 41 37 41 46 42 52 53 36 50 48 57 47 50 49 56 69 52 4b 6b 57 32 77 4b 35 71 4b 76 35 52 45 34 4c 6b 55 54 38 61 4e 4a 5a 72 47 50 64 51 52 45 37 63 72 30 64 66 63 72 39 52 38 72 51 33 Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=v7%2B0EL9Hp%2FkhsalI%2BcE%2B0eKKABQcnBKCcrgNBiGKcfiCZ0mUOVStj2HpRK2CndRYb6ebfR3jWxX1M6R5AgQQOprjxmOTnxZp26DYbaSdu7fBzAOA7AFBRS6PHWGPIViRKkW2wK5qKv5RE4LkUT8aNJZrGPdQRE7cr0dfcr9R8rQ3
2024-04-24 02:18:27 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:18:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50027	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	1083	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1560364055;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:27 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16027503704189624188"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16027503704189624188","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"16027503704189624188","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"16027503704189624188","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"16027503704189624188","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50024	52.30.32.26	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:18:28 UTC	381	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:28 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 40 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50030	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925104845 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:27 GMT x-amzn-RequestId: 3b65a044-842f-4e33-97b1-7662bdb173ed X-Cache: Miss from cloudfront Via: 1.1 c19c4a06d33dedc840090b8f6e8495b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: RMThrv9cVzDHigV4Rdy2uOzZ_7_FlqJXPK83W99YY1wICMyS-9SPOg==
2024-04-24 02:18:28 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50028	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	1323	OUT	GET /pagead/1p-user-list/778938880/?random=833540398&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqkTE9MtZjsw9jzE13pj5Veuxqonq5bq2MT-mlLlDtfG-CJRuu&random=1609040277 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50029	142.250.101.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:27 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:28 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50032	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	2004	OUT	GET /_next/static/media/globe.1603f8a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069
2024-04-24 02:18:28 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 841 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:21 GMT ETag: "e8ffef2e96af9a1e327b5cfc3d3e1c6d" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xoN2MdIpvT00U422zdB6zkvW4ENybM_uatJ4oAkd0DNU3DbfkrKtww== Age: 154737
2024-04-24 02:18:28 UTC	841	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 31 35 20 31 37 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 20 33 2e 35 38 32 2d 38 20 38 20 30 20 34 2e 34 32 20 33 2e 35 38 32 20 38 20 38 20 38 73 38 2d 33 2e 35 38 20 38 2d 38 63 30 2d 34 2e 34 31 38 2d 33 2e 35 38 32 2d 38 2d 38 2d 38 7a 6d 35 2e 33 33 20 35 2e 38 31 32 63 2d 2e 33 33 38 2e 35 30 38 2e 32 39 37 20 31 2e 35 36 36 2d 2e 32 35 33 20 31 2e 31 38 35 2d 2e 35 35 2d 2e 33 38 2d 2e 37 36 32 2d 31 2e 32 32 37 2d 31 2e 32 37 2d 32 2e 31 35 38 2d 2e 35 30 38 2d 2e 39 33 32 2d 31 2e 39 30 33 2d 2e 33 38 2d 31 2e 34 33 38 2d 2e 31 32 37 Data Ascii: <svg viewBox="15 17 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M23 17c-4.418 0-8 3.582-8 8 0 4.42 3.582 8 8 8s8-3.58 8-8c0-4.418-3.582-8-8-8zm5.33 5.812c-.338.508.297 1.566-.253 1.185-.55-.38-.762-1.227-1.27-2.158-.508-.932-1.903-.38-1.438-.127

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50031	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:27 UTC	2122	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uadrv.a.1.b; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926005124&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:28 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:18:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-96nms-207147 X-Request-Id: 0fa93b582822dad595ab87f6db5fab40 X-Runtime: 0.001532 X-Cache: Error from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nVoYnA1e2T7PJMjTiWKI-g4dK7pDC-Iv-faEwyv2vnvznoO0uynvxA==
2024-04-24 02:18:28 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50034	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	1089	OUT	GET /pagead/1p-user-list/778938880/?random=833540398&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqkTE9MtZjsw9jzE13pj5Veuxqonq5bq2MT-mlLlDtfG-CJRuu&random=1609040277 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50036	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	874	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1479733592.1713925105&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	867	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1479733592.1713925105&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50038	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	909	OUT	GET /rp.gif?ts=1713925107375&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:28 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50041	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925107396&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:28 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1706543576819286 Date: Wed, 24 Apr 2024 02:18:28 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:28 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50040	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925107399&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:28 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1085484967765611 Date: Wed, 24 Apr 2024 02:18:28 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:28 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50039	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	1603	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925107402 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:28 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:28 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1099070584988761 Date: Wed, 24 Apr 2024 02:18:28 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:28 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50035	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	989	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFGAUgASgDMgsI_N38o_GD8jwQBUIPIg0IARIJCgV0aWVyMxABWgc4MWMzamduYAE.
2024-04-24 02:18:28 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:28 GMT Content-Type: text/html Content-Length: 818 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCJKzgPvxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:18:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:28 UTC	818	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50044	151.101.194.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	588	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5880 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286bf4-3248362931918e6100f378ca X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 24 Apr 2024 02:18:28 GMT X-Served-By: cache-bur-kbur8200078-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925109.867016,VS0,VE56 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:18:28 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:18:28 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-24 02:18:28 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-24 02:18:28 UTC	1378	IN	Data Raw: 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 73 75 72 66 61 63 65 2d 61 63 74 69 6f 6e 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 Data Ascii: key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"experimentKey":"exp-1"},"value":"new-transfer-details"},"transfer-details-surface-actions":{"key":"on","value":"on"},"tra
2024-04-24 02:18:28 UTC	368	IN	Data Raw: 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 34 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 74 72 61 63 6b 69 6e Data Ascii: bled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspace-settings-iteration-4":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-trackin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50045	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	2566	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 128 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubbr9.a.2.c
2024-04-24 02:18:28 UTC	128	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 32 35 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":2254.399999999994,"tags":{"rating":"needs-improvement","page_group":"/legal","country":"US"}}
2024-04-24 02:18:29 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Date: Wed, 24 Apr 2024 02:18:28 GMT ETag: "37-52aUNyVwWfeV2S3yQWVtc4rifb0" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VJb_yqbqq7NJQCKRnj0xidPL-pjMrNTRAGf8XprMbObA0_1X_7FNuw==
2024-04-24 02:18:29 UTC	55	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 32 32 35 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 7d Data Ascii: {"status":"ok","metric":"FCP","time":2254.399999999994}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50046	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	2566	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925104.0.0.496837087; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubbr9.a.2.c
2024-04-24 02:18:28 UTC	117	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 38 35 38 2e 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":858.5,"tags":{"rating":"needs-improvement","page_group":"/legal","country":"US"}}
2024-04-24 02:18:29 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 44 Connection: close Date: Wed, 24 Apr 2024 02:18:28 GMT ETag: "2c-W4uMStCTAAVxIxaepk2KpYrKiMo" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 49e6ihyb-diiQ8GzGFef9Ll5Wxob40AOKC2NgNjdnhy0aUOhRVx_lA==
2024-04-24 02:18:29 UTC	44	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 38 35 38 2e 35 7d Data Ascii: {"status":"ok","metric":"TTFB","time":858.5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50037	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925107371 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:29 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:18:29 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50042	34.248.204.163	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:18:29 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 02:18:29 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 45 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50043	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:28 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:28 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 63 31 34 62 66 39 64 62 65 35 62 65 34 39 36 35 32 39 39 39 34 30 38 64 37 37 31 62 66 66 66 30 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 30 37 35 36 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 32 Data Ascii: checksum=c14bf9dbe5be49652999408d771bfff0&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925107561%2C%22event_id%22%3A2%2C%22session_id%22%3A1713925074977%2C%22
2024-04-24 02:18:29 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:29 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bf4-4630f1bf2314454f224e726a Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:29 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50047	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	675	OUT	GET /rp.gif?ts=1713925107375&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:29 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:29 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50049	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	1635	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925108147&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:29 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:29 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSY2WXFSelpqS2lpVWZONW1IYmFkNUxUbk13dVgxa21tTEsyZVVYa1IzNEVOaXlMNHF1V1dwdDE5QmR5eWxGa0NqbjNpb1NORzNBR1diR0RTT21xRjFRejZYdGFkNTVWT3A5SDVTV2J6dEpaQT0mTVNHWk8rV2w5UzRhUlVuemo0M3FPYkNFUU9BPQ=="; Expires=Thu, 24 Apr 2025 02:18:29 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1587587412279512 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50050	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925107396&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:29 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 5863591278807850 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:29 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50052	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925107399&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:29 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1092675587387910 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:29 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50051	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	1401	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925107402 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:29 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:29 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9433398270605033 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50053	151.101.2.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:29 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-66286bf5-5fe86e772fcc51971157d946 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:29 GMT X-Served-By: cache-lax-kwhp1940024-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925110.593080,VS0,VE32 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:18:29 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50054	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	967	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108373&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:29 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 3352668227695584 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50057	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	3462	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A28.361%2B02%3A00&epn.hit_timestamp_unix=1713925108361&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925104780-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1167&tfd=4545&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925102.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.9; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcid.g.2.i; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087
2024-04-24 02:18:29 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:29 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775964; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 1a6e1efe30d70fc3718c47f07ff0b6f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 7OXVlgN94QsXZRdTGBd5ZqQBbXMBqczmj8wIDiaNr04wF-M4Dus1pA==
2024-04-24 02:18:29 UTC	1265	IN	Data Raw: 34 65 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 39 32 35 33 32 36 35 30 35 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 Data Ascii: 4eaevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.171392
2024-04-24 02:18:29 UTC	656	IN	Data Raw: 32 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 37 31 34 33 39 34 37 31 34 26 66 73 74 3d 31 37 31 33 39 32 35 31 30 39 38 30 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 289event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=714394714&fst=1713925109808&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:30 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 42 57 36 64 47 50 46 70 56 57 79 5a 67 57 71 62 50 67 66 52 37 4b 4b 73 76 6f 50 33 59 45 4a 43 4a 51 25 32 46 48 54 75 42 51 45 71 49 25 32 42 54 6f 25 32 42 32 73 31 25 32 42 6f 68 64 68 79 64 47 30 35 64 44 4d 6a 30 79 4b 79 32 68 67 65 4f 43 65 63 76 25 32 46 34 47 58 71 74 70 38 76 55 70 52 74 6e 34 72 33 54 6f 72 63 69 76 64 37 76 6f 59 39 48 61 4a 34 57 4f 50 6c 4e 30 61 37 4e 71 45 6a 41 62 70 32 58 72 77 68 32 41 55 72 48 69 77 46 46 68 70 63 4e 6e 72 43 51 6f 44 55 5a 4e 50 62 4e 42 51 70 25 32 46 31 34 50 75 61 34 52 74 64 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=BW6dGPFpVWyZgWqbPgfR7KKsvoP3YEJCJQ%2FHTuBQEqI%2BTo%2B2s1%2BohdhydG05dDMj0yKy2hgeOCecv%2F4GXqtp8vUpRtn4r3Torcivd7voY9HaJ4WOPlN0a7NqEjAbp2Xrwh2AUrHiwFFhpcNnrCQoDUZNPbNBQp%2F14Pua4Rtd
2024-04-24 02:18:30 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50056	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	647	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:30 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:29 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: PP3ZG10TX835SAEDD4XS Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:29 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:29 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:30 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50063	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	1640	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108555&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYwQ25YdndoRVdxSzliN28wb254MWxOOHB3eEtSbGk4Y3ZlZndqekVRR0M5c05mR3RYV1B2bE1rcXhSZyt3T1Z1c2wwVzh2U1EyQlBLSllCcjR2Y1JkekxoNjlIdGpQdzdKSlYxZ1Q4cHVhbz0mcFJVVi9ockRLemthWUgrK1plb2U1aDl5bkhjPQ=="
2024-04-24 02:18:30 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:29 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZQSUE5ZHZybEVrN2dUY1d2U0pHdmUyai9iTG5wa2NTWi9VbTRyUk5zejFSdHhTRm5XZ2NCeFV2dnlNWk1tVk1yUVdzQTZ3UGtkR0ZkQXJKR1AxNHVhb2ovUDBTRHZmWnowT1NiUjhRdjd0bz0mN3VUM1Z6R2FxZkNoUyszT3htL0ZmMUsyMExFPQ=="; Expires=Thu, 24 Apr 2025 02:18:29 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5578361802774226 Date: Wed, 24 Apr 2024 02:18:29 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50058	104.36.113.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	896	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=c15a68f2-4344-416e-994d-8984d050841b&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:29 UTC	798	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 02:18:27 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_377=6810-c15a68f2-4344-416e-994d-8984d050841b&KRTB&22918-c15a68f2-4344-416e-994d-8984d050841b&KRTB&22926-c15a68f2-4344-416e-994d-8984d050841b&KRTB&23031-c15a68f2-4344-416e-994d-8984d050841b; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 23-Jul-2024 02:18:27 GMT; path=/ Set-Cookie: PugT=1713925107; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 24-May-2024 02:18:27 GMT; path=/ Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-24 02:18:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50066	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	2127	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:30 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:29 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ARep_W3A7LbWszqRHUK_JH69meQpI_tAAZRIIj4pmoXme2pYvL3Bjw==
2024-04-24 02:18:30 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50067	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:30 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:29 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bf5-3ae0fb0e4f04c68e164cbfff Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:30 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50055	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925108375 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:30 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50062	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:30 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9FQXRDR81NMQ4GEPYF86 Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50060	35.212.133.238	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	847	OUT	GET /syncd?dsp_id=93&user_group=1&user_id=c15a68f2-4344-416e-994d-8984d050841b&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:30 UTC	898	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 02:18:29 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=93&user_group=1&user_id=c15a68f2-4344-416e-994d-8984d050841b&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch Set-Cookie: tuuid=f82ab20e-bfbe-4d77-b732-c51f9587c950; path=/; expires=Thu, 24-Apr-2025 02:18:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713925109; path=/; expires=Thu, 24-Apr-2025 02:18:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713925109; path=/; expires=Thu, 24-Apr-2025 02:18:29 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713925109; path=/; expires=Thu, 24-Apr-2025 02:18:29 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50059	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	2278	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1977 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcm8.j.2.l; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.10
2024-04-24 02:18:29 UTC	1977	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-24 02:18:30 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:30 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:30 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50065	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:29 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 65 66 38 35 34 63 36 37 38 38 39 38 64 39 61 31 30 64 37 63 64 61 35 38 35 38 32 32 38 33 36 36 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 30 38 32 38 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 Data Ascii: checksum=ef854c678898d9a10d7cda5858228366&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925108281%2C%22event_id%22%3A11%2C%22session_id%22%3A1713925074977%2C%2
2024-04-24 02:18:30 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bf5-736f724947d8a4d90eefbd07 Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:30 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50064	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925107371 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:29 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 39 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"9","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:18:30 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:18:30 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:30 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50068	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:29 UTC	1433	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925108147&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2WXFSelpqS2lpVWZONW1IYmFkNUxUbk13dVgxa21tTEsyZVVYa1IzNEVOaXlMNHF1V1dwdDE5QmR5eWxGa0NqbjNpb1NORzNBR1diR0RTT21xRjFRejZYdGFkNTVWT3A5SDVTV2J6dEpaQT0mTVNHWk8rV2w5UzRhUlVuemo0M3FPYkNFUU9BPQ=="
2024-04-24 02:18:30 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:30 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ0bmN0V29HMHk1SXl4YjhKVGtBU1VTem5jL01obUwxejByNnpEZTdNb1puM3RJSmVyM0V5eDgwd2FtMzczNXUrcm1LS3JhaGdzVVl6djNYT0JIZDJ4QWdUeVBCaVlJRk5MZVdULy9raTJ0Yz0mV2ErWk1mSG9zcGErcHFoVXducU80bWZTZ0ZNPQ=="; Expires=Thu, 24 Apr 2025 02:18:30 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8625848618928010 Date: Wed, 24 Apr 2024 02:18:30 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50069	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	765	OUT	GET /user/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108373&dep=4%2CTAGS_RECEIVED&stc=true HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSY2WXFSelpqS2lpVWZONW1IYmFkNUxUbk13dVgxa21tTEsyZVVYa1IzNEVOaXlMNHF1V1dwdDE5QmR5eWxGa0NqbjNpb1NORzNBR1diR0RTT21xRjFRejZYdGFkNTVWT3A5SDVTV2J6dEpaQT0mTVNHWk8rV2w5UzRhUlVuemo0M3FPYkNFUU9BPQ=="
2024-04-24 02:18:30 UTC	599	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3937603270428872 Date: Wed, 24 Apr 2024 02:18:30 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50072	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	697	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:30 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:30 GMT x-amzn-RequestId: f714dfb9-8074-4c61-940a-af690edd0ab9 Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 53865c39790737455fc759c03702434e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: 42bdvI_7ZKuvJGRUvhOVCcQcAG9R7Tbm252yP99eDsvg2eW8cbTGFg==
2024-04-24 02:18:30 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50074	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	1438	OUT	GET /v3/?event=pagevisit&tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925108555&dep=4%2CTAGS_RECEIVED&stc=true&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZQSUE5ZHZybEVrN2dUY1d2U0pHdmUyai9iTG5wa2NTWi9VbTRyUk5zejFSdHhTRm5XZ2NCeFV2dnlNWk1tVk1yUVdzQTZ3UGtkR0ZkQXJKR1AxNHVhb2ovUDBTRHZmWnowT1NiUjhRdjd0bz0mN3VUM1Z6R2FxZkNoUyszT3htL0ZmMUsyMExFPQ=="
2024-04-24 02:18:30 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:30 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="; Expires=Thu, 24 Apr 2025 02:18:30 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1472552746647006 Date: Wed, 24 Apr 2024 02:18:30 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50076	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	3221	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925104780&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1479733592.1713925105&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925104780&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&dt=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=9&ep.hit_timestamp_local=2024-04-24T04%3A18%3A28.361%2B02%3A00&epn.hit_timestamp_unix=1713925108361&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925104780-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925104780-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1167&tfd=4545&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:30 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:30 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775963; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 3c0a949a14580b1dec6535a2a3049362.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: q5rbAPZSJAFhwiJq4CbwGMMkzRpWPZ49GxD5UGSRfZ1JRLOZq8plEA==
2024-04-24 02:18:30 UTC	1267	IN	Data Raw: 34 65 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 37 39 32 33 36 34 36 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 6c 65 67 61 6c 25 32 46 63 63 70 61 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 Data Ascii: 4ecevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1679236460;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.17139
2024-04-24 02:18:30 UTC	656	IN	Data Raw: 32 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 32 31 32 33 33 34 34 35 39 26 66 73 74 3d 31 37 31 33 39 32 35 31 31 30 37 33 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 289event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=212334459&fst=1713925110731&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:30 UTC	353	IN	Data Raw: 31 35 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 32 44 32 6f 65 71 68 77 6c 56 73 63 30 6d 74 41 55 4b 42 61 38 56 6c 52 75 44 51 35 59 75 32 6a 42 6c 32 57 4c 39 50 58 25 32 42 59 37 7a 75 51 46 52 32 52 4a 47 6b 6f 5a 65 70 44 75 56 51 78 34 50 65 5a 69 50 75 43 78 37 6f 48 72 68 44 54 48 30 57 62 33 31 25 32 42 77 43 75 53 39 71 30 6a 61 48 54 62 58 47 61 6e 39 62 35 6e 36 74 54 37 73 68 52 67 66 42 75 73 71 6e 53 36 30 4d 4e 54 76 6a 78 65 31 48 4c 32 65 30 43 50 50 73 63 51 61 25 32 46 36 53 54 37 4b 56 44 42 36 70 30 35 36 4c 5a 31 42 66 31 59 6b 45 25 32 46 77 39 65 6a 30 47 Data Ascii: 15aevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=2D2oeqhwlVsc0mtAUKBa8VlRuDQ5Yu2jBl2WL9PX%2BY7zuQFR2RJGkoZepDuVQx4PeZiPuCx7oHrhDTH0Wb31%2BwCuS9q0jaHTbXGan9b5n6tT7shRgfBusqnS60MNTvjxe1HL2e0CPPscQa%2F6ST7KVDB6p056LZ1Bf1YkE%2Fw9ej0G
2024-04-24 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50077	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	2127	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _dd_s=rum=0&expire=1713926007543&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:30 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:30 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pb6K5CYvVLOzOtk78CX5uUjfTWAwriE8ivPIkjG_P4uRa8Q9j6l0ag==
2024-04-24 02:18:30 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50071	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:30 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50073	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	474	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:30 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HQ2VVN8DEV56762CPK9E Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:30 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50079	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:31 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MCQRYWNSFRMF9FH36DSV Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50080	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:31 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286bf6-14d58ebd785a9748529c97e9 Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:31 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50078	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:30 UTC	1053	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCJKzgPvxg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:30 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:30 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCOSCiY3yg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:18:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:30 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50085	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	436	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=PageView&ts=1713925108377 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:31 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:31 GMT x-amzn-RequestId: 7ef92d60-90e4-4fa9-ab4a-d6b4fcc7d623 X-Cache: Miss from cloudfront Via: 1.1 d6db3d1c73f3e08aa70e81d7382400fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: f-abLZcMRHRdlHODGRPk06ka7YQAfqaIYAhr7AKPqIWwPaIJj-PyLA==
2024-04-24 02:18:31 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50081	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925108375 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:31 UTC	929	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 39 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 30 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"9","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x10
2024-04-24 02:18:31 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:18:31 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:31 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50088	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	701	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6c07a28ff53ed915f74a27fe90616d61" If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
2024-04-24 02:18:31 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:31 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 bef4627c5294d3bd6467e354e4e691a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 4UlSDvoo54fPtMCzFEhvhbPbVnXGnXX7L2uphnkNPOEM6XeV5Bhubg== Age: 83028

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50083	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	2007	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:31 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:31 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50082	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	2278	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 5289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:31 UTC	5289	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 65 69 64 22 3a 22 35 63 63 33 66 31 66 30 2d 39 30 38 65 2d 34 36 64 37 2d 61 66 65 65 2d 34 38 65 35 61 63 37 36 66 31 34 65 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/legal/ccpa","page":"/","eid":"5cc3f1f0-908e-46d7-afee-48e5ac76f14e","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","
2024-04-24 02:18:31 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:31 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:31 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50089	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:31 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0efa40d5cdf123505 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:18:31 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50084	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:31 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925107371 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:31 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:31 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:31 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50092	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	909	OUT	GET /rp.gif?ts=1713925108360&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:32 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:32 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50091	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:32 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:18:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50095	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	1389	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:32 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13768678874258846940"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13768678874258846940","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13768678874258846940","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13768678874258846940","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13768678874258846940","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50096	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	1289	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:32 UTC	1144	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50093	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925108375 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:33 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:32 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:33 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50100	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	2431	OUT	GET /_set_cookie?val=BW6dGPFpVWyZgWqbPgfR7KKsvoP3YEJCJQ%2FHTuBQEqI%2BTo%2B2s1%2BohdhydG05dDMj0yKy2hgeOCecv%2F4GXqtp8vUpRtn4r3Torcivd7voY9HaJ4WOPlN0a7NqEjAbp2Xrwh2AUrHiwFFhpcNnrCQoDUZNPbNBQp%2F14Pua4RtdVd66goSLK3qSgrjm8H0BD67UayI%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:33 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close Date: Wed, 24 Apr 2024 02:18:33 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 ed3ff8ca2911844cdbf6a8f82e3edb7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: puLpyIAWm6JYJzzF8axqXV33ZYIsoWqkZnVunVXmWWS6oG0crDVQcA==
2024-04-24 02:18:33 UTC	54	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=
2024-04-24 02:18:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50101	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	675	OUT	GET /rp.gif?ts=1713925108360&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:33 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50097	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:32 UTC	2007	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:33 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:33 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50103	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50105	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	1082	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=925326505;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Flegal%2Fccpa;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:33 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13768678874258846940"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13768678874258846940","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13768678874258846940","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13768678874258846940","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13768678874258846940","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50109	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	1000	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:33 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:33 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:33 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50111	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	908	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50110	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	1023	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:33 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:33 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:33 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50107	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:33 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:33 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50112	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	1323	OUT	GET /pagead/1p-user-list/778938880/?random=714394714&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqHbRuGT9s8qBQ7QsxkNeUHaB_wy_-GneFfQtWGmFXa6u97FBi&random=3889505892 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50108	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	2238	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:33 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:18:34 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:33 GMT ETag: W/"3cc0-fElae8eJZuVT3U7c4xkDlXRGas4" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15552 Connection: Close
2024-04-24 02:18:34 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 31 33 32 33 34 31 31 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 36 30 34 35 39 30 38 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 30 30 37 37 36 33 32 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 37 38 30 34 36 36 33 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 33 4f 44 41 30 4e Data Ascii: {"creatives":[{"adId":521323411,"creativeId":346045908,"flightId":510077632,"campaignId":307804663,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA3ODA0N
2024-04-24 02:18:34 UTC	11803	IN	Data Raw: 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 49 6a 6f 78 4d 44 49 79 4d 43 77 69 63 47 4d 69 4f 6a 41 73 49 6d 39 77 49 6a 6f 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 77 49 6a 70 75 64 57 78 73 4c 43 4a 77 63 69 49 36 4d 54 4d 35 4e 6a 67 32 4c 43 4a 79 64 43 49 36 4d 53 77 69 63 6e 4d 69 4f 6a 55 77 4d 43 77 69 63 32 45 69 4f 69 49 31 4e 53 49 73 49 6e 4e 69 49 6a 6f 69 61 53 30 77 5a 6a 68 6b 5a 57 55 32 4d 54 4d 79 4d 32 51 34 4f 57 4d 77 4d 53 49 73 49 6e 4e 77 49 6a 6f 78 4d 6a 45 35 4d 7a 4d 34 4c 43 4a 7a 64 43 49 36 4d 54 41 31 4e 54 6b 79 4d 69 77 69 64 57 73 69 4f 69 4a 7a 63 43 31 6a 4e 44 51 30 4d 7a 41 77 5a 69 30 32 4d 44 41 32 4c 54 52 6c 4f 44 4d 74 4f 57 4d 7a 4f Data Ascii: lwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wZjhkZWU2MTMyM2Q4OWMwMSIsInNwIjoxMjE5MzM4LCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50113	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:33 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50114	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	869	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50116	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	961	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:34 UTC	1581	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:34 UTC	68	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae Data Ascii: 43PNGIHDRIDATxc-IEND
2024-04-24 02:18:34 UTC	10	IN	Data Raw: 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: B`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50117	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	674	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50118	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110171&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:34 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50119	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:33 UTC	711	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110173&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&eid=1713925104780-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:34 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50122	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:34 UTC	1089	OUT	GET /pagead/1p-user-list/778938880/?random=714394714&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&tiba=WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqHbRuGT9s8qBQ7QsxkNeUHaB_wy_-GneFfQtWGmFXa6u97FBi&random=3889505892 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50123	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:34 UTC	635	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:34 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50124	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:34 UTC	672	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Flegal%2Fccpa&rl=&if=false&ts=1713925110179&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925107388&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:35 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50126	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:34 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926005133
2024-04-24 02:18:35 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 00e54b40739bb73204922b8a0fe39bc6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 2o6vJVZyM8ScNzMIWL4Ip37dknxbESbxt_6VaDYrgHzhnlpbja7eUQ== Age: 71283
2024-04-24 02:18:35 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50125	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:35 UTC	1983	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925101121\|2\|1\|bat.bing.com/p/insights/c/d; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m
2024-04-24 02:18:35 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:35 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:18:35 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50127	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:35 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956514754 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926005133
2024-04-24 02:18:35 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:35 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 146a0d0a194c50eaa7457e781da7a174.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: OFaXb2lxAe31hVN0nkIeWjXlkaJhwp4B9bK2JUUHHbIL6ilxTZnWcA== Age: 62312

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50128	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:36 UTC	814	OUT	GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:36 UTC	523	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2771 Connection: close Date: Wed, 24 Apr 2024 02:18:37 GMT Last-Modified: Fri, 22 Mar 2024 13:36:05 GMT ETag: "3c159f837eb7ce6e98732eec5788a7c7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ws-i6XzXS6S5FOKGS60ESKkxA6SUnNTJIRDLXpVW3c55aj6r2QyA0Q==
2024-04-24 02:18:36 UTC	2771	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50131	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:37 UTC	732	OUT	GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/bundle.5014c6212ea5a9061cdb.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:38 UTC	515	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48826 Connection: close Date: Wed, 24 Apr 2024 02:18:38 GMT Last-Modified: Fri, 22 Mar 2024 13:36:03 GMT ETag: "024ef35a6c8ffd7fa2987624414e2122" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: xnT9POkE3uAsHg1TJr6-JpMBldR6bjRjXDKemEax1723FmfFF-AWFA==
2024-04-24 02:18:38 UTC	15990	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 34 33 31 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 63 68 61 6e 67 65 52 6f 74 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 63 6c 69 63 6b 4f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 65 6e 74 65 72 46 75 6c 6c 73 63 72 65 65 6e 3a 66 75 Data Ascii: !function(){var t,e,n={4339:function(t){t.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},4312:function(t,e,n){"use strict";n.r(e),n.d(e,{changeRotation:function(){return E},clickOut:function(){return A},enterFullscreen:fu
2024-04-24 02:18:38 UTC	1929	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 3c 22 2b 70 2b 22 3e 22 2b 74 2b 22 3c 2f 22 2b 70 2b 22 3e 22 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 77 72 69 74 65 28 68 28 22 22 29 29 2c 74 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 65 3d 74 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 2e 4f 62 6a 65 63 74 3b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 2c 65 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 68 74 6d 6c 66 69 6c 65 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 74 2c 65 2c 6e 3b 6d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 26 26 72 3f 67 28 72 29 3a 28 65 3d 61 28 22 69 66 Data Ascii: ction(t){return"<"+p+">"+t+"</"+p+">"},g=function(t){t.write(h("")),t.close();var e=t.parentWindow.Object;return t=null,e},m=function(){try{r=new ActiveXObject("htmlfile")}catch(t){}var t,e,n;m="undefined"!=typeof document?document.domain&&r?g(r):(e=a("if
2024-04-24 02:18:38 UTC	1024	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 39 32 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 33 33 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 39 32 30 29 2c 6f 3d 6e 28 36 34 30 31 29 2c 69 3d 6e 28 36 38 30 35 29 2c 75 3d 6e 28 31 34 30 39 29 2e 69 6e 64 65 78 4f 66 2c 63 3d 6e 28 37 32 38 35 29 2c 73 3d 72 28 5b 5d 2e 70 75 73 68 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 69 28 74 29 2c 61 3d 30 2c 66 3d 5b 5d 3b 66 6f 72 28 6e 20 69 6e 20 72 29 21 6f 28 63 2c 6e 29 26 26 6f 28 72 2c 6e 29 26 Data Ascii: unction(t,e,n){"use strict";var r=n(5920);t.exports=r({}.isPrototypeOf)},3332:function(t,e,n){"use strict";var r=n(5920),o=n(6401),i=n(6805),u=n(1409).indexOf,c=n(7285),s=r([].push);t.exports=function(t,e){var n,r=i(t),a=0,f=[];for(n in r)!o(c,n)&&o(r,n)&
2024-04-24 02:18:38 UTC	16384	IN	Data Raw: 5d 2e 63 6f 6e 63 61 74 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 22 52 65 66 6c 65 63 74 22 2c 22 6f 77 6e 4b 65 79 73 22 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 69 2e 66 28 63 28 74 29 29 2c 6e 3d 75 2e 66 3b 72 65 74 75 72 6e 20 6e 3f 73 28 65 2c 6e 28 74 29 29 3a 65 7d 7d 2c 31 38 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 32 33 37 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 72 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 32 37 34 31 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ].concat);t.exports=r("Reflect","ownKeys")\|\|function(t){var e=i.f(c(t)),n=u.f;return n?s(e,n(t)):e}},1814:function(t,e,n){"use strict";var r=n(3237),o=TypeError;t.exports=function(t){if(r(t))throw new o("Can't call method on "+t);return t}},2741:function(
2024-04-24 02:18:38 UTC	160	IN	Data Raw: 21 3d 3d 6e 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 74 29 7b 68 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 65 64 20 6f 75 74 73 69 64 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 68 7d 29 28 29 2e 24 24 2e Data Ascii: !==n&&t.setAttribute(e,n)}function O(t){h=t}function C(t){(function(){if(!h)throw new Error("Function called outside component initialization");return h})().$$.
2024-04-24 02:18:38 UTC	13339	IN	Data Raw: 6f 6e 5f 6d 6f 75 6e 74 2e 70 75 73 68 28 74 29 7d 6e 65 77 20 4d 61 70 3b 63 6f 6e 73 74 20 54 3d 5b 5d 2c 6a 3d 5b 5d 3b 6c 65 74 20 5f 3d 5b 5d 3b 63 6f 6e 73 74 20 46 3d 5b 5d 2c 50 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 6c 65 74 20 4d 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 5f 2e 70 75 73 68 28 74 29 7d 63 6f 6e 73 74 20 41 3d 6e 65 77 20 53 65 74 3b 6c 65 74 20 49 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 69 66 28 30 21 3d 3d 49 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 68 3b 64 6f 7b 74 72 79 7b 66 6f 72 28 3b 49 3c 54 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 74 3d 54 5b 49 5d 3b 49 2b 2b 2c 4f 28 74 29 2c 7a 28 74 2e 24 24 29 7d 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 20 54 2e 6c 65 6e 67 74 Data Ascii: on_mount.push(t)}new Map;const T=[],j=[];let _=[];const F=[],P=Promise.resolve();let M=!1;function N(t){_.push(t)}const A=new Set;let I=0;function D(){if(0!==I)return;const t=h;do{try{for(;I<T.length;){const t=T[I];I++,O(t),z(t.$$)}}catch(t){throw T.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50130	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:37 UTC	2238	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:18:37 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:18:38 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:37 GMT ETag: W/"43ee-X1z20R2VsA1zEqRtj0g9JWvzbGg" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 17390 Connection: Close
2024-04-24 02:18:38 UTC	8602	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 31 35 36 32 37 31 32 38 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 30 33 33 33 38 34 31 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 30 34 34 34 31 31 36 30 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 34 35 38 38 33 31 35 34 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 38 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 67 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 54 51 31 4f 44 67 7a 4d Data Ascii: {"creatives":[{"adId":515627128,"creativeId":340333841,"flightId":504441160,"campaignId":145883154,"advertiserId":428758,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTgsImF0Ijo5NTksImJ0IjowLCJjbSI6MTQ1ODgzM
2024-04-24 02:18:38 UTC	8788	IN	Data Raw: 54 51 31 4f 44 67 7a 4d 54 55 30 4c 43 4a 6a 61 43 49 36 4d 7a 51 35 4d 44 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d 30 4d 44 4d 7a 4d 7a 67 30 4d 53 77 69 5a 47 6b 69 4f 69 49 34 4f 54 51 32 4f 44 56 6d 5a 57 55 35 59 54 51 30 5a 57 51 35 4f 54 6b 31 4e 7a 51 7a 4d 32 56 68 4d 54 49 79 4f 44 51 34 4d 69 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 63 78 4d 47 49 79 4e 44 4a 68 4e 44 4e 69 4d 44 51 35 4f 54 55 35 4e 32 4d 33 4d 6a 4d 31 4f 54 63 30 4f 47 59 33 59 57 4d 33 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 54 55 32 4d 6a 63 78 4d 6a 67 73 49 6d 5a 73 49 6a 6f 31 4d 44 51 30 4e 44 45 78 4e 6a 41 73 49 6d 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 Data Ascii: TQ1ODgzMTU0LCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0MDMzMzg0MSwiZGkiOiI4OTQ2ODVmZWU5YTQ0ZWQ5OTk1NzQzM2VhMTIyODQ4MiIsImRqIjowLCJpaSI6IjcxMGIyNDJhNDNiMDQ5OTU5N2M3MjM1OTc0OGY3YWM3IiwiZG0iOjMsImZjIjo1MTU2MjcxMjgsImZsIjo1MDQ0NDExNjAsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50132	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:39 UTC	729	OUT	GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/460.8410c9803a20af04dea9.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:39 UTC	514	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4877 Connection: close Date: Wed, 24 Apr 2024 02:18:40 GMT Last-Modified: Fri, 22 Mar 2024 13:36:03 GMT ETag: "386a8f7359235f2656a1440273b12df8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 afdb1da50225c72a4232b3531193b400.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: n4M8xe8Q0g7JnG5BHacemxqKwe7yh4AsicoSNmTsONhg1k0Oq8soMQ==
2024-04-24 02:18:39 UTC	4877	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 77 65 74 72 61 6e 73 66 65 72 5f 77 61 6c 6c 70 61 70 65 72 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 77 65 74 72 61 6e 73 66 65 72 5f 77 61 6c 6c 70 61 70 65 72 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 30 5d 2c 7b 34 36 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 63 6f 6e 73 74 20 69 3d 73 28 33 39 30 39 29 2c 6e 3d 73 28 37 31 30 39 29 2c 61 3d 73 28 39 35 38 32 29 2c 72 3d 73 28 36 34 35 37 29 3b 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 Data Ascii: "use strict";(self.webpackChunk_wetransfer_wallpaper_ui=self.webpackChunk_wetransfer_wallpaper_ui\|\|[]).push([[460],{4645:function(e,t,s){Object.defineProperty(t,"__esModule",{value:!0});const i=s(3909),n=s(7109),a=s(9582),r=s(6457);t.default=class{constru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50133	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:39 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926015046
2024-04-24 02:18:39 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cc5ee9362c1a190f2004ed17d0fdd242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 8AeMKG3X9qFUcJTHOtpQfbO2nxgNCo-kxSMddXMSongn7FWJJAGNPA== Age: 71287
2024-04-24 02:18:39 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50134	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:39 UTC	1983	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925109.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.13; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:18:40 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:39 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:18:40 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50135	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:39 UTC	2278	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925119.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.14
2024-04-24 02:18:39 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 65 64 36 64 37 62 64 34 2d 62 31 32 38 2d 34 39 30 35 2d 62 30 34 34 2d 63 37 32 37 38 33 63 63 30 64 32 33 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"ed6d7bd4-b128-4905-b044-c72783cc0d23","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:18:40 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:40 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:40 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:40 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50136	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:40 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714945186423 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926015046 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-24 02:18:40 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:40 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 1d7ed53a70523e576bff9c3bcb5eea38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: nVN1AmVK_1gJ7gRxa70vsVaiQP297SXZ7eBzYEW__e-KaaTBEMQwqQ== Age: 62317

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50139	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:41 UTC	808	OUT	GET /creator/newfold/2311/intro2/1_D8nrHQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:42 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2878 Connection: close Last-Modified: Fri, 10 Nov 2023 12:41:26 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:18:43 GMT ETag: "8f319aeeca6ab1f7e8c48cb285341202" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: E7rODSvJoUhW0il6lS9C9U1owPESsasAGqmsbvUe8Y-MrAFbz-SyxA==
2024-04-24 02:18:42 UTC	2878	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 57 61 6c 6c 70 61 70 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title>Wallpaper</title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50141	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:41 UTC	790	OUT	GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/img.0b1e2943483763639418.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp6-fs/1_TCcE43/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:42 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 580328 Connection: close Date: Wed, 24 Apr 2024 02:18:43 GMT Last-Modified: Fri, 22 Mar 2024 13:36:04 GMT ETag: "f70dfa1adefdde209493a1b273bab92d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: gFgpq24lps1pOFbZ6CUN1AMDm0dJUQmxMg_fv99YJqvyacv4pK5OPw==
2024-04-24 02:18:42 UTC	7683	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 08 00 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 03 04 00 02 05 01 06 07 08 09 ff da 00 08 01 01 00 00 00 00 f5 1d e5 eb 24 9c 92 77 93 b2 bd bd 2f 2b 6e f3 bc 9d a7 27 6d 49 2f 2b 6a da 49 a5 e9 1f a4 d7 d5 72 f3 b2 73 b3 93 b2 49 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"$w/+n'mI/+jIrsI
2024-04-24 02:18:42 UTC	16384	IN	Data Raw: f6 57 20 aa 8c 42 e4 25 ad d2 71 a2 59 1c d0 a4 bd 07 59 59 25 e5 e9 3b 7e 56 d5 bb 0c 93 80 10 87 2b 2b 69 7e 8a 5d 8d 2d 26 40 b8 88 e3 6c f6 d5 5d 6e be c7 14 cb 49 14 47 24 ac 9c ef 24 9d e4 92 76 49 67 9e 73 51 d2 4e f2 76 49 24 92 49 27 39 5e 72 93 0b 34 44 6d 9b 96 f0 64 34 ad 65 69 db dc a4 84 bd ad d9 d9 2b 5b 57 93 95 b5 64 97 9c ef 49 24 93 99 9e 58 03 91 7c e8 7a ad c9 53 3a db bb 1a 84 2d a8 25 fa 7a 8b 1f c9 e7 ce c9 6a cb 57 9d af 67 3b 24 e7 67 3b c9 24 ad bc 3f cb 17 47 5f 3a c3 d5 c2 86 af d1 d5 f1 fb 1b 9b d6 28 33 9f fa bb 81 74 9e 0b e4 d4 d9 d2 32 48 6f ec fb 8f 4e 2c db ef eb 5c 60 30 33 1e 25 6d 02 88 d5 25 f8 6b 76 1c c7 b9 7c be 5f 06 1e 49 27 65 a4 92 49 25 a5 ad 08 3e 72 56 73 b0 ed 8d 4e be e1 f5 78 bd 28 26 34 1b b1 24 92 4e Data Ascii: W B%qYYY%;~V++i~]-&@l]nIG$$vIgsQNvI$I'9^r4Dmd4ei+[WdI$X\|zS:-%zjWg;$g;$?G_:(3t2HoN,\`03%m%kv\|_I'eI%>rVsNx(&4$N
2024-04-24 02:18:42 UTC	1024	IN	Data Raw: f2 72 50 64 ef 7b 5f 35 e8 32 fc fe 27 8d f1 8c ab e6 5f d4 f4 e3 5f e7 fe c3 e8 db 1a 1c 42 11 76 d9 cf f7 c0 dd 48 ec d6 a7 cb d4 ef 29 97 96 fd 4f 7f 31 b7 8b 79 da 92 2b 52 df a3 ed e9 5a da d2 d6 ad 64 e7 3b de 76 fc ad a9 41 da d7 bc 92 b7 e8 ec 4a cb 4a ce 12 4e 5a b4 ec 83 e7 65 e5 2d 25 ad 5e d7 9d 9c 92 b7 bd 79 c9 5e 0f b7 ed a5 09 4e 72 4b 5a 83 d9 a4 e0 a9 6c f4 6c ec 9a 2c 72 73 96 08 af d0 9b b9 d1 e0 df 8b b3 7a 12 16 5e 2d 2f 69 39 5b 57 bc a9 3a b5 8b 51 ac db 40 10 90 f3 8b d8 a3 59 ad 3f 5e 05 12 3e 69 f4 10 08 fd 72 f9 bb 14 f3 1a 8d 7a 04 1f ae 27 b2 c3 d8 e7 c5 b1 34 33 d1 0a 3b 7a 09 2f a5 af 77 9f 85 b0 70 92 9e ba 31 df 47 af dc f4 7a b6 88 b6 ac 9f 89 f7 f3 be 38 1e df 9f 9f fe 71 f5 0f 69 e7 f4 3c 07 9a cb f6 1e e0 89 e6 64 fb Data Ascii: rPd{_52'__BvH)O1y+RZd;vAJJNZe-%^y^NrKZll,rsz^-/i9[W:Q@Y?^>irz'43;z/wp1Gz8qi<d
2024-04-24 02:18:42 UTC	16384	IN	Data Raw: 0a d7 79 4e ca d4 62 a2 6d 35 c1 f6 d2 c3 b5 a4 93 9d b0 e5 b9 ce df b2 92 d2 6d 81 7b 4b ca dd 99 5a 05 83 0f 8b 59 8b 71 11 8b 3d b6 9d 26 78 b3 8a 5d 02 9a c2 5c 24 e9 69 cb 4e 58 6d 55 24 c7 2d a1 56 3a b0 e5 83 de f0 f5 af 48 70 62 11 ec dc 62 2f e6 bc 05 fc 86 0a be 58 5d fe 89 7a 20 5f 59 17 2d 98 fe 57 e3 2d ed 0f 76 74 ec 42 6a 30 c0 d7 f4 d6 0b 15 bf 74 c8 4c 6d 2f 4d c9 84 bf a5 c6 e6 9e 66 80 1d b6 7f 9c f6 77 ce f1 9e df 13 6f f3 d7 ce c3 b3 f5 8f 04 d5 74 7c 5f 7d a7 c5 fd df b4 3e 0a 5e 57 57 ea 3a 19 e7 77 43 be 8f 2f d6 68 45 5d 95 08 5b 95 f1 7e cc ca b9 50 2f e4 06 9b ce 21 4d 3e ac bd 06 f1 92 cf 2e b3 e5 58 03 c5 33 19 1d d6 29 2e aa 5a 6c ae 35 cf 02 bd d8 5d bb 70 4a 47 38 0e b8 d7 9f 36 d0 ed 78 da 75 61 54 5e 2a ea 3c e0 38 b8 13 Data Ascii: yNbm5m{KZYq=&x]\$iNXmU$-V:Hpbb/X]z _Y-W-vtBj0tLm/Mfwot\|_}>^WW:wC/hE][~P/!M>.X3).Zl5]pJG86xuaT^*<8
2024-04-24 02:18:42 UTC	1514	IN	Data Raw: 50 dc 67 9e 68 da 95 47 5c 94 b2 2a b5 38 b6 e1 85 16 d2 61 22 00 57 2b 1a fd 5c 74 b6 6b cc 40 76 58 a0 ba f1 6e f7 90 6c 8e 19 7d 0b 0c 5b de 56 11 9b 79 d7 dd ab 24 58 b4 3a dd 8d 95 b4 6d 33 33 cf d4 81 a0 b9 d9 49 cd 0b 63 ae e1 82 df 44 52 2f 7e a2 d5 40 c1 5e 63 3f 35 b8 91 34 37 93 d7 17 9c d7 b3 65 3a 44 c3 06 e3 39 ea ed 10 ad a4 23 0b 8d 5a 9c ad 89 45 97 51 6f c6 f9 3f 4e fd 31 a1 09 81 a7 b5 04 23 07 c7 fa 67 2f 47 02 b7 6a 90 a1 56 4f 45 d2 9c 87 f2 91 b2 9c e3 ad c0 2b 19 83 ab 9a 3d 1b fc c7 c7 be 05 b4 00 40 af bc b3 b8 4c 6a f3 a4 22 45 c9 f4 2b be 66 e0 db a9 d2 a2 e5 a9 97 35 17 29 e5 0c f2 e1 01 c0 e0 1f 2d c6 bf 8b 77 48 36 f5 01 b2 bc 64 4a 26 d5 70 a5 34 33 40 b5 2f d4 cf ba 45 1b ef 8f d7 df 0a 3b 96 4d 52 0e d5 1a ba 8d 15 96 87 Data Ascii: PghG\*8a"W+\tk@vXnl}[Vy$X:m33IcDR/~@^c?547e:D9#ZEQo?N1#g/GjVOE+=@Lj"E+f5)-wH6dJ&p43@/E;MR
2024-04-24 02:18:42 UTC	16384	IN	Data Raw: 73 39 de b4 05 34 bb 9e 27 19 51 ac d7 c4 44 c9 db 8d 5d 75 2b bd 58 d0 ef c2 b7 87 ba ce 79 d9 4c c4 aa 5a 2b 9f b5 1d 6c 42 79 dd a3 73 3f 1d d4 f0 b5 2f a2 3e 2a be bd f5 ae 23 12 dd ec e6 37 9f dc d9 18 c9 8d b7 cb f2 d3 aa f4 f0 1e 7f 9a 05 35 b8 b3 d1 69 53 cd 49 99 a1 84 df cb d6 5f ce 91 3d 2d ea ef 59 76 86 8d 1f f2 fd 53 60 45 3e 84 04 21 38 7c 41 4a eb bb 92 16 8a 77 2b c5 e8 ae 3b ac 3f dd 32 a6 b8 34 cb 02 61 73 41 53 01 6c 94 a8 d0 5f 6f 0d 1e 02 fc f3 1e 86 34 ed 2c f3 ec 90 99 f9 4b bf 8a db 85 55 c3 35 67 02 4a 0d b8 50 59 1a b8 a5 d0 41 66 f4 4e 06 3b 5b 5c 77 c7 d2 ad b0 f5 2c c4 a8 de 47 83 a0 58 f5 78 3e 5f 47 4b b4 cf db 18 bb a1 c2 41 85 f0 05 5b f5 c5 fc bf a0 59 c5 0d a2 2a d4 6c 66 68 1e 97 cc d0 77 2a 31 75 cd 93 a8 a3 89 90 ac Data Ascii: s94'QD]u+XyLZ+lBys?/>#75iSI_=-YvS`E>!8\|AJw+;?24asASl_o4,KU5gJPYAfN;[\w,GXx>_GKA[Ylfhw*1u
2024-04-24 02:18:42 UTC	534	IN	Data Raw: 00 00 4a f3 7c e4 00 00 00 31 00 03 be 8d 9f 06 9d af 83 00 00 00 1a 00 7f 56 02 00 00 08 b0 08 11 cd c7 cc 48 44 01 45 31 f4 6a 13 6a 31 90 64 ca 5a eb 6f a3 ae b2 c7 93 9f 24 5e 84 10 a5 3d bb 7d 0b 00 00 09 0a 91 79 9c 12 00 00 03 a9 00 06 e6 aa b6 e7 41 98 00 00 00 00 1f 58 02 00 02 0b 80 00 05 8f 1f 24 a6 92 00 bb d0 d3 a3 69 a6 e7 2c dc 98 60 9c eb d3 6a 2f ba b1 e6 e3 c6 4a 9d 7a 63 25 31 2f 6e cb df a0 00 00 90 02 78 f8 22 65 03 a6 d8 c1 03 d1 ce 79 26 53 bc e0 00 00 00 00 03 ea c4 c2 2c 08 00 00 4d 06 5c bc b2 a6 dc a6 ab 7d 6b 42 f4 13 42 6f 1c 32 c2 03 b3 aa 67 1d 0f 3f 12 ea 59 9a d3 6d 63 31 ed d3 b5 bb 00 02 40 04 19 70 65 12 b3 ad b6 e8 d0 97 13 26 b7 27 37 26 69 a7 d7 ae 38 28 00 00 00 00 0f a9 8e 48 db a8 00 00 4c 04 01 33 84 63 99 45 ec Data Ascii: J\|1VHDE1jj1dZo$^=}yAX$i,`j/Jzc%1/nx"ey&S,M\}kBBo2g?Ymc1@pe&'7&i8(HL3cE
2024-04-24 02:18:42 UTC	16384	IN	Data Raw: 24 f5 e2 0e 10 4d 48 80 2f 6d b7 e8 c6 22 9f 66 80 00 00 01 52 00 00 14 49 44 78 a9 a7 4c 68 06 3e 3e cf 62 40 0a 90 00 42 1a 25 73 f9 79 80 30 10 0f 42 fb fa 88 e7 cf 6b e1 ce 66 ae ab a7 5c 86 64 f9 73 b9 46 b7 59 e3 95 26 04 80 08 00 1d 53 08 83 6f 4b b1 80 00 00 00 00 26 50 01 2b c5 28 18 5c ab 4c 73 7e 98 00 00 09 88 40 4c 73 63 c7 00 ea e9 28 02 96 b5 bf 6d 65 cb 87 5e dc 1c f2 53 3a 35 e8 d2 6a 65 65 cd 92 db 6d 2d 70 73 a6 80 68 69 80 20 01 85 4a 0e 8f 57 76 98 26 98 00 00 9a 60 05 04 79 08 60 d8 0c 2b 1c bb 3d 20 00 04 00 06 70 ee 39 f0 39 b2 43 bd 77 30 76 a5 43 e9 ea de 63 07 d0 b9 b9 a6 22 74 df a7 6b a0 53 cf c1 07 4f 4e d1 c3 ca 1a 42 00 00 00 00 00 18 82 fb 3d 3a 18 80 06 02 18 81 80 00 2f 20 22 c7 53 45 4a cf 17 d5 ea 80 00 29 ce 75 a6 b3 Data Ascii: $MH/m"fRIDxLh>>b@B%sy0Bkf\dsFY&SoK&P+(\Ls~@Lsc(me^S:5jeem-pshi JWv&`y`+= p99Cw0vCc"tkSONB=:/ "SEJ)u
2024-04-24 02:18:42 UTC	16384	IN	Data Raw: b8 5a b4 e0 42 a2 91 28 63 4d 12 03 67 07 25 04 ba 15 54 3a 4d 53 e8 e4 a9 8d 05 22 d2 06 32 af 7c 80 95 cc 4f a8 9a a5 45 2a 06 50 dc a6 a5 69 01 56 de 6b 2c 7b 6f 39 4b 40 20 33 6e ca 48 a2 f3 2d 8c 09 a9 24 4a ac 51 72 30 26 e4 4d 52 b8 91 0c 2b cd c0 18 c4 58 8a cf 52 2a a4 55 2a 58 5c a0 bc ec d9 97 12 61 11 dd 76 0e a8 cf 58 bb 05 a4 a0 21 d2 ca 96 ba 12 66 69 29 c4 5d b4 49 14 3a 40 33 58 b8 a6 89 13 48 a9 4d 94 92 18 80 04 d3 1a 9a 42 0a f3 31 63 04 35 71 a0 39 1b 4d 4b 64 05 38 16 91 53 d1 68 52 65 91 7d ee 69 d0 e6 e2 ac 9b 69 45 4c 32 d0 8b 79 e9 28 b0 84 f5 52 c9 00 a0 10 f5 13 54 89 09 10 26 c6 08 4c 55 20 26 9a 6a 58 38 6b 83 16 d0 03 2d 52 33 b1 b1 39 a1 42 d2 5c ab 70 1a dd c9 44 65 8d 7a 56 a4 d1 34 d0 e8 d3 30 94 c4 26 d3 00 11 6c 52 5d Data Ascii: ZB(cMg%T:MS"2\|OEPiVk,{o9K@ 3nH-$JQr0&MR+XRU*X\avX!fi)]I:@3XHMB1c5q9MKd8ShRe}iiEL2y(RT&LU &jX8k-R39B\pDezV40&lR]
2024-04-24 02:18:43 UTC	16384	IN	Data Raw: 07 ca 2c 56 c6 b3 2d 0d 38 94 5d 93 e7 bc cf 83 f1 cd 60 8d 46 5e 3e 00 b2 a4 94 8f c8 2f a2 cf 1d 60 02 69 8d 64 f2 06 ed 15 d2 d5 f1 d7 7d 96 32 86 ef 04 a6 6e 6f 7b df ce ff 00 88 fa de f7 37 fe c2 09 68 62 15 80 7d 9f 8d 69 a6 c1 0d df 83 2c 27 f8 6c 1e db e7 b7 6d fc 9f a0 78 48 b0 7f 22 34 d3 af 4e ba 80 82 1d 9c 31 85 3d 7e b3 57 a0 e3 7e b0 a4 a3 57 eb 22 2a e8 aa cc 84 0a 92 a8 02 28 3b 13 65 ab 7d 84 eb 3a f5 d4 10 c0 0c 7e 35 37 bd fd 0e 34 78 23 a9 1c 18 1a 6c b7 7e e1 fb 6f 7b 9a 82 11 34 4e 8c 07 7c 93 b2 56 11 d4 09 b8 4d 6c 57 a7 54 68 78 eb d5 09 63 94 03 a3 4f 34 b4 d8 57 79 35 64 91 0c ad b2 b0 06 40 f3 58 9e 7b ff 00 a3 c8 fc 8f ff 00 a1 cc f2 bf f9 b4 a5 96 54 8b 1c 34 7b 0c 76 ce be ba bf 1c c7 50 5c 18 66 e6 b4 e6 88 06 f8 d1 5e b7 Data Ascii: ,V-8]`F^>/`id}2no{7hb}i,'lmxH"4N1=~W~W"*(;e}:~574x#l~o{4N\|VMlWThxcO4Wy5d@X{T4{vP\f^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50140	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:41 UTC	2952	OUT	GET /i.gif?e=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&s=7p1d0XZxMnCE0HLZrh_tuseJNCc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925119.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.14
2024-04-24 02:18:42 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50144	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:41 UTC	2567	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926020830&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:41 UTC	102	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 34 37 33 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 70 6f 6f 72 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"LCP","type":"view","time":4732,"tags":{"rating":"poor","page_group":"/legal","country":"US"}}
2024-04-24 02:18:42 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 42 Connection: close Date: Wed, 24 Apr 2024 02:18:42 GMT ETag: "2a-pzP/LwMRGhK0/MAkTsb6WbPaKJ0" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hlCTntGIwhi1isb0RVV8JbOPHJHCMP8xwI7dsKkrJEZHqZOlczQaGg==
2024-04-24 02:18:42 UTC	42	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 4c 43 50 22 2c 22 74 69 6d 65 22 3a 34 37 33 32 7d Data Ascii: {"status":"ok","metric":"LCP","time":4732}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50145	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:42 UTC	2567	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926020947&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:42 UTC	118	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 6c 65 67 61 6c 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.005007831527222084,"tags":{"rating":"good","page_group":"/legal","country":"US"}}
2024-04-24 02:18:42 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 58 Connection: close Date: Wed, 24 Apr 2024 02:18:42 GMT ETag: "3a-9i3g5MVb/jBD5MKj57At+4Cn9MA" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1YSu9cZEskGalO_d8A2HmGoUacKdXhDzJXSMJ5GQZgiGcmeuI4TlSg==
2024-04-24 02:18:42 UTC	58	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 35 30 30 37 38 33 31 35 32 37 32 32 32 30 38 34 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.005007831527222084}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50138	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:42 UTC	2278	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2586 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:42 UTC	2586	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 35 38 39 30 64 35 33 65 2d 34 65 62 35 2d 34 38 37 62 2d 39 30 30 61 2d 34 39 30 61 36 64 66 66 31 30 30 34 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"5890d53e-4eb5-487b-900a-490a6dff1004","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:18:42 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:42 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:42 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:42 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50143	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:42 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:42 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:18:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50142	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:42 UTC	2007	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:43 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:42 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50146	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	720	OUT	GET /creator/newfold/2311/intro2/1_D8nrHQ/bundle.389254d85d861455dbb1.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/newfold/2311/intro2/1_D8nrHQ/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:43 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 139237 Connection: close Last-Modified: Fri, 10 Nov 2023 12:41:24 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:18:44 GMT ETag: "dd28bc4c18d898c1324ba23968d79179" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 0nUGCdW1VOLzo-TyfvOqBr4sq2wpMeC_ClSLV2l--FflYnmcIi7kIg==
2024-04-24 02:18:43 UTC	15862	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 33 38 39 32 35 34 64 38 35 64 38 36 31 34 35 35 64 62 62 31 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 72 3d 7b 34 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 7d 7d 2c 32 32 37 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 63 6c 69 Data Ascii: /! For license information please see bundle.389254d85d861455dbb1.js.LICENSE.txt /!function(){var t,e,r={418:function(t){t.exports={platform:"desktop",deployPathOverride:!1,variants:[],tags:[]}},2274:function(t,e,r){"use strict";let n;r.r(e),r.d(e,{cli
2024-04-24 02:18:43 UTC	16384	IN	Data Raw: 65 45 72 72 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 66 3d 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 68 3d 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 2c 70 3d 22 77 72 69 74 61 62 6c 65 22 3b 65 2e 66 3d 6e 3f 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 73 28 74 29 2c 65 3d 61 28 65 29 2c 73 28 72 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 70 72 6f 74 6f 74 79 70 65 22 3d 3d 3d 65 26 26 22 76 61 6c 75 65 22 69 6e 20 72 26 26 70 20 69 6e 20 72 26 26 21 72 5b 70 5d 29 7b 76 61 72 20 6e 3d 6c 28 74 2c 65 29 3b 6e 26 26 6e 5b 70 5d 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 Data Ascii: eError,c=Object.defineProperty,l=Object.getOwnPropertyDescriptor,f="enumerable",h="configurable",p="writable";e.f=n?o?function(t,e,r){if(s(t),e=a(e),s(r),"function"==typeof t&&"prototype"===e&&"value"in r&&p in r&&!r[p]){var n=l(t,e);n&&n[p]&&(t[e]=r.valu
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 62 73 63 72 69 62 65 28 29 3a 6f 7d 28 74 2c 28 74 3d 3e 65 3d 74 29 29 28 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 74 29 7b 63 6f 6e 73 74 20 69 3d 64 28 74 2c 65 2c 72 2c 6e 29 3b 72 65 74 75 72 6e 20 74 5b 30 5d 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 31 5d 26 26 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 72 20 69 6e 20 65 29 74 5b 72 5d 3d 65 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 28 72 2e 63 74 78 2e 73 6c 69 63 65 28 29 2c 74 5b 31 5d 28 6e 28 65 29 29 29 3a 72 2e 63 74 78 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 74 5b 32 5d 26 26 6e 29 7b 63 6f 6e 73 74 20 69 3d 74 5b 32 5d 28 6e 28 Data Ascii: bscribe():o}(t,(t=>e=t))(),e}function p(t,e,r,n){if(t){const i=d(t,e,r,n);return t[0](i)}}function d(t,e,r,n){return t[1]&&n?function(t,e){for(const r in e)t[r]=e[r];return t}(r.ctx.slice(),t[1](n(e))):r.ctx}function g(t,e,r,n){if(t[2]&&n){const i=t[2](n(
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 74 69 6d 65 7c 7c 21 65 2e 5f 64 75 72 26 26 65 2e 5f 69 6e 69 74 74 65 64 7c 7c 65 2e 5f 73 74 61 72 74 3c 74 2e 5f 74 69 6d 65 26 26 28 65 2e 5f 64 75 72 7c 7c 21 65 2e 61 64 64 29 29 26 26 28 72 3d 46 74 28 74 2e 72 61 77 54 69 6d 65 28 29 2c 65 29 2c 28 21 65 2e 5f 64 75 72 7c 7c 6f 65 28 30 2c 65 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2c 72 29 2d 65 2e 5f 74 54 69 6d 65 3e 41 29 26 26 65 2e 72 65 6e 64 65 72 28 72 2c 21 30 29 29 2c 59 74 28 74 2c 65 29 2e 5f 64 70 26 26 74 2e 5f 69 6e 69 74 74 65 64 26 26 74 2e 5f 74 69 6d 65 3e 3d 74 2e 5f 64 75 72 26 26 74 2e 5f 74 73 29 7b 69 66 28 74 2e 5f 64 75 72 3c 74 2e 64 75 72 61 74 69 6f 6e 28 29 29 66 6f 72 28 72 3d 74 3b 72 2e 5f 64 70 3b 29 72 2e 72 61 77 54 69 6d 65 28 29 3e 3d 30 26 26 72 2e Data Ascii: time\|\|!e._dur&&e._initted\|\|e._start<t._time&&(e._dur\|\|!e.add))&&(r=Ft(t.rawTime(),e),(!e._dur\|\|oe(0,e.totalDuration(),r)-e._tTime>A)&&e.render(r,!0)),Yt(t,e)._dp&&t._initted&&t._time>=t._dur&&t._ts){if(t._dur<t.duration())for(r=t;r._dp;)r.rawTime()>=0&&r.
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 72 65 28 74 68 69 73 2c 74 29 2c 42 28 65 29 29 7d 2c 65 2e 72 65 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6c 61 79 28 29 2e 74 6f 74 61 6c 54 69 6d 65 28 74 3f 2d 74 68 69 73 2e 5f 64 65 6c 61 79 3a 30 2c 42 28 65 29 29 7d 2c 65 2e 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 68 69 73 2e 73 65 65 6b 28 74 2c 65 29 2c 74 68 69 73 2e 72 65 76 65 72 73 65 64 28 21 31 29 2e 70 61 75 73 65 64 28 21 31 29 7d 2c 65 2e 72 65 76 65 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 68 69 73 2e 73 65 65 6b 28 74 7c 7c 74 68 69 73 Data Ascii: eturn this.totalTime(re(this,t),B(e))},e.restart=function(t,e){return this.play().totalTime(t?-this._delay:0,B(e))},e.play=function(t,e){return null!=t&&this.seek(t,e),this.reversed(!1).paused(!1)},e.reverse=function(t,e){return null!=t&&this.seek(t\|\|this
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 70 65 61 74 26 26 6f 21 3d 3d 61 26 26 74 68 69 73 2e 76 61 72 73 2e 6f 6e 52 65 70 65 61 74 26 26 21 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 26 26 4e 65 28 74 68 69 73 2c 22 6f 6e 52 65 70 65 61 74 22 29 2c 79 21 3d 3d 74 68 69 73 2e 5f 74 44 75 72 26 26 79 7c 7c 74 68 69 73 2e 5f 74 54 69 6d 65 21 3d 3d 79 7c 7c 28 4d 26 26 21 74 68 69 73 2e 5f 6f 6e 55 70 64 61 74 65 26 26 50 74 28 74 68 69 73 2c 74 2c 30 2c 21 30 29 2c 28 74 7c 7c 21 67 29 26 26 28 79 3d 3d 3d 74 68 69 73 2e 5f 74 44 75 72 26 26 74 68 69 73 2e 5f 74 73 3e 30 7c 7c 21 79 26 26 74 68 69 73 2e 5f 74 73 3c 30 29 26 26 55 74 28 74 68 69 73 2c 31 29 2c 65 7c 7c 4d 26 26 21 68 7c 7c 21 28 79 7c 7c 68 7c 7c 75 29 7c 7c 28 4e 65 28 74 68 69 73 2c 79 3d 3d 3d 70 3f 22 6f 6e 43 6f 6d 70 6c 65 Data Ascii: peat&&o!==a&&this.vars.onRepeat&&!e&&this.parent&&Ne(this,"onRepeat"),y!==this._tDur&&y\|\|this._tTime!==y\|\|(M&&!this._onUpdate&&Pt(this,t,0,!0),(t\|\|!g)&&(y===this._tDur&&this._ts>0\|\|!y&&this._ts<0)&&Ut(this,1),e\|\|M&&!h\|\|!(y\|\|h\|\|u)\|\|(Ne(this,y===p?"onComple
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 74 3b 69 66 28 43 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 65 29 74 72 79 7b 72 3d 74 68 69 73 2e 67 65 74 42 42 6f 78 28 29 2c 74 68 69 73 2e 5f 67 73 61 70 42 42 6f 78 3d 74 68 69 73 2e 67 65 74 42 42 6f 78 2c 74 68 69 73 2e 67 65 74 42 42 6f 78 3d 74 7d 63 61 74 63 68 28 74 29 7b 7d 65 6c 73 65 20 74 68 69 73 2e 5f 67 73 61 70 42 42 6f 78 26 26 28 72 3d 74 68 69 73 2e 5f 67 73 61 70 42 42 6f 78 28 29 29 3b 72 65 74 75 72 6e 20 69 26 26 28 6f 3f 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2c 6f 29 3a 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 29 29 2c 43 72 2e 72 65 6d 6f 76 65 43 Data Ascii: t;if(Cr.appendChild(n),n.appendChild(this),this.style.display="block",e)try{r=this.getBBox(),this._gsapBBox=this.getBBox,this.getBBox=t}catch(t){}else this._gsapBBox&&(r=this._gsapBBox());return i&&(o?i.insertBefore(this,o):i.appendChild(this)),Cr.removeC
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 30 2c 74 2e 4c 6a 74 29 28 72 2c 22 68 65 69 67 68 74 22 2c 22 31 36 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 72 2c 22 76 69 65 77 42 6f 78 22 2c 22 30 20 30 20 31 35 20 31 36 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 72 2c 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 72 2c 22 78 6d 6c 6e 73 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 29 2c 28 30 2c 74 2e 4c 6a 74 29 28 72 2c 22 63 6c 61 73 73 22 2c 22 73 76 65 6c 74 65 2d 36 79 62 62 72 61 22 29 7d 2c 6d 28 65 2c 6f 29 7b 28 30 2c 74 2e 24 54 72 29 28 65 2c 72 2c 6f 29 2c 28 30 2c 74 2e 52 33 49 29 28 72 2c 6e 29 2c 28 30 2c 74 2e 52 33 49 29 28 72 2c 69 29 7d 2c 70 28 65 2c 72 29 7b 38 26 72 26 26 28 30 2c 74 2e 4c 6a 74 29 28 6e 2c Data Ascii: 0,t.Ljt)(r,"height","16"),(0,t.Ljt)(r,"viewBox","0 0 15 16"),(0,t.Ljt)(r,"fill","none"),(0,t.Ljt)(r,"xmlns","http://www.w3.org/2000/svg"),(0,t.Ljt)(r,"class","svelte-6ybbra")},m(e,o){(0,t.$Tr)(e,r,o),(0,t.R3I)(r,n),(0,t.R3I)(r,i)},p(e,r){8&r&&(0,t.Ljt)(n,
2024-04-24 02:18:44 UTC	8687	IN	Data Raw: 54 67 35 56 6a 4d 78 4c 6a 41 7a 4d 44 56 49 4d 7a 51 75 4e 6a 4d 35 4f 56 59 78 4e 79 34 30 4f 54 67 35 53 44 51 34 4c 6a 41 32 4f 44 52 61 54 54 45 7a 4c 6a 51 79 4d 6a 51 67 4e 44 67 75 4e 54 49 35 4e 46 59 7a 4e 43 34 35 4f 54 63 34 53 44 42 57 4e 44 67 75 4e 54 49 35 4e 45 67 78 4d 79 34 30 4d 6a 49 30 57 6b 30 7a 4d 43 34 33 4e 44 55 30 49 44 4d 30 4c 6a 6b 35 4e 7a 68 57 4e 44 67 75 4e 54 49 35 4e 45 67 78 4e 79 34 7a 4d 54 59 35 56 6a 4d 30 4c 6a 6b 35 4e 7a 68 49 4d 7a 41 75 4e 7a 51 31 4e 46 70 4e 4e 44 67 75 4d 44 59 34 4e 43 41 7a 4e 43 34 35 4f 54 63 34 56 6a 51 34 4c 6a 55 79 4f 54 52 49 4d 7a 51 75 4e 6a 4d 35 4f 56 59 7a 4e 43 34 35 4f 54 63 34 53 44 51 34 4c 6a 41 32 4f 44 52 61 54 54 4d 77 4c 6a 63 30 4e 54 51 67 4d 7a 45 75 4d 44 4d 77 Data Ascii: Tg5VjMxLjAzMDVIMzQuNjM5OVYxNy40OTg5SDQ4LjA2ODRaTTEzLjQyMjQgNDguNTI5NFYzNC45OTc4SDBWNDguNTI5NEgxMy40MjI0Wk0zMC43NDU0IDM0Ljk5NzhWNDguNTI5NEgxNy4zMTY5VjM0Ljk5NzhIMzAuNzQ1NFpNNDguMDY4NCAzNC45OTc4VjQ4LjUyOTRIMzQuNjM5OVYzNC45OTc4SDQ4LjA2ODRaTTMwLjc0NTQgMzEuMDMw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50148	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	2127	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:43 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:43 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LJXld-U_eNIzJ6_tiDOTne7e5idZYS2PB8VjPjnMC3DX5mr9OOvr2w==
2024-04-24 02:18:43 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50149	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	2719	OUT	GET /i.gif?e=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&s=7p1d0XZxMnCE0HLZrh_tuseJNCc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:44 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50150	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	2238	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:43 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 32 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":2,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:18:44 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:43 GMT ETag: W/"4684-iRqoMQ6+2zUnBBFW+Bowt2xsBZ8" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 18052 Connection: Close
2024-04-24 02:18:44 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 35 33 32 35 30 34 38 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 35 30 30 34 39 38 36 39 2c 22 66 6c 69 67 68 74 49 64 22 3a 34 37 35 35 37 37 30 36 30 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 37 33 34 39 31 36 31 37 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 32 34 32 37 37 38 36 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 34 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 49 33 4e 7a 67 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 33 4d 7a 51 35 Data Ascii: {"creatives":[{"adId":525325048,"creativeId":350049869,"flightId":475577060,"campaignId":273491617,"advertiserId":2427786,"priorityId":149686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2IjoyNDI3Nzg2LCJhdCI6OTU5LCJidCI6MCwiY20iOjI3MzQ5
2024-04-24 02:18:44 UTC	14303	IN	Data Raw: 44 31 74 4a 76 47 78 4d 22 2c 22 37 33 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 65 2e 67 69 66 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 79 4e 44 49 33 4e 7a 67 32 4c 43 4a 68 64 43 49 36 4f 54 55 35 4c 43 4a 69 64 43 49 36 4d 43 77 69 59 32 30 69 4f 6a 49 33 4d 7a 51 35 4d 54 59 78 4e 79 77 69 59 33 51 69 4f 69 49 69 4c 43 4a 6a 61 43 49 36 4d 7a 51 35 4d 44 49 73 49 6d 4e 72 49 6a 70 37 66 53 77 69 59 33 49 69 4f 6a 4d 31 4d 44 41 30 4f 54 67 32 4f 53 77 69 5a 47 6b 69 4f 69 4a 6b 4e 32 52 6d 4e 6a 4d 77 59 57 56 68 4e 6a 59 30 4d 54 51 35 59 6a 45 34 4d 6a 4d 35 5a 44 6c 6a 4f 54 68 6a 5a 44 42 6c 5a 43 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6d Data Ascii: D1tJvGxM","73":"https://donny.wetransfer.com/e.gif?e=eyJ2IjoiMS4xMSIsImF2IjoyNDI3Nzg2LCJhdCI6OTU5LCJidCI6MCwiY20iOjI3MzQ5MTYxNywiY3QiOiIiLCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM1MDA0OTg2OSwiZGkiOiJkN2RmNjMwYWVhNjY0MTQ5YjE4MjM5ZDljOThjZDBlZCIsImRqIjowLCJpaSI6Im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50151	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	2007	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:44 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:44 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50152	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:43 UTC	421	OUT	GET /creator/wepresent/2403-p11/wp6-fs/1_TCcE43/img.0b1e2943483763639418.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:44 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 580328 Connection: close Date: Wed, 24 Apr 2024 02:18:43 GMT Last-Modified: Fri, 22 Mar 2024 13:36:04 GMT ETag: "f70dfa1adefdde209493a1b273bab92d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: GF4-_LLzOoKpMgYG-kYvEuFCc6J8a6RAfhO9wZPbGWZ-amCpgWYaLw== Age: 2
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 08 00 0a 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 03 04 00 02 05 01 06 07 08 09 ff da 00 08 01 01 00 00 00 00 f5 1d e5 eb 24 9c 92 77 93 b2 bd bd 2f 2b 6e f3 bc 9d a7 27 6d 49 2f 2b 6a da 49 a5 e9 1f a4 d7 d5 72 f3 b2 73 b3 93 b2 49 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"$w/+n'mI/+jIrsI
2024-04-24 02:18:44 UTC	15596	IN	Data Raw: 4a d6 72 96 93 b7 84 27 6f de da 5b 92 72 4a da 49 3b 3b 24 92 4e 76 49 16 59 04 8d ac cb 1d 92 49 41 5e 72 a1 05 d8 2f 2a 3c ac a1 f7 92 49 d2 14 35 b4 ef 47 c9 3b 2d 5b 4e f0 96 8d 6a 39 7b 4e 4a f3 b5 00 95 f1 5c ad 6b 66 19 10 6c ba f6 18 a8 97 6b 9a aa f5 3f 55 36 57 8f dd df d0 6f 53 a7 32 cc 3b 66 a7 21 28 41 df ab 89 9b 53 96 8d 53 a3 34 25 07 7a 50 4b 40 42 74 75 ed ca 32 74 77 84 80 24 0d 61 cf 2b c0 2e 72 8c 9c e5 a1 18 4d ce 3a 16 58 a3 55 cf d4 4f 3b e6 5e 1f 75 8c f1 e4 5b 47 cf 63 30 5f a6 f9 2e e7 f9 8f ab 63 97 41 77 3b 8b ad f9 c1 4f d4 7f 5b 39 fb d3 8e 96 1f 94 dd 62 bd bd 44 28 c9 c8 52 b0 72 dc b2 5a b6 a7 2b ce f2 49 3b 6e f6 fd 92 dd ed a7 67 3b db 76 49 24 9d 92 49 c9 de 76 4e 28 b2 fc d4 67 b2 49 2a 1a d8 96 a8 51 e5 c8 63 d3 37 Data Ascii: Jr'o[rJI;;$NvIYIA^r/<I5G;-[Nj9{NJ\kflk?U6WoS2;f!(ASS4%zPK@Btu2tw$a+.rM:XUO;^u[Gc0_.cAw;O[9bD(RrZ+I;ng;vI$IvN(gIQc7
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 9c 4e 32 f0 e9 43 52 75 75 f3 f3 f4 93 71 de af 6d 1e 8d a0 8e 4b 74 a3 10 dc bf 69 ce 9c 69 8d 48 66 1a 3b f5 86 e5 ef 04 1b b0 28 30 9f a6 44 24 a1 20 16 03 70 e4 28 ba da b7 bd 83 06 58 cf 05 2c 44 4a c7 57 e7 28 75 46 d5 96 4d 9a d1 9b 4b 34 bf 63 ee e5 91 d4 b5 f3 e1 8e 9a 6d fc 43 cc 3d ab f3 4f 97 fd 83 c9 e4 fd 03 f4 67 a9 bf c0 3f 29 fe ba db fa 3f a1 0b 55 51 3d 09 48 61 e2 6e 42 2c 6b de 11 3e e8 4e 61 95 45 cd a8 f1 2a 1b 58 44 9c 57 c3 fb c1 25 f3 df a0 0d 56 3c be 82 8d ab e8 b3 4f e0 3d a2 bb 59 75 36 80 a3 37 ef 2f 59 70 71 8f 35 ab a7 5a d6 c3 35 50 ee b8 08 24 b0 47 76 01 6a da 10 85 a1 a8 be 7e 1a fa ab e3 eb eb e7 b2 75 c8 c0 6a c5 38 33 72 81 a3 60 13 ac 17 9d 84 b5 57 b5 aa 83 21 cd 33 27 ad f9 6e 72 aa af 8e 1d 34 dd d2 26 39 b6 88 Data Ascii: N2CRuuqmKtiiHf;(0D$ p(X,DJW(uFMK4cmC=Og?)?UQ=HanB,k>NaE*XDW%V<O=Yu67/Ypq5Z5P$Gvj~uj83r`W!3'nr4&9
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 01 71 31 98 86 93 be a3 0b 34 f4 d0 d0 47 13 b7 db 45 fe f1 22 97 37 61 36 17 4c 3a 19 3a d9 7a de 77 d3 63 f7 ba 79 ca ed 90 8b ed e4 68 e7 01 b0 44 5a 3e 3d e9 a7 5b 6a ee 2f cc 9d 47 1a cc 65 fb d6 c1 58 87 c5 47 d6 0f cc 6c ea 4b 8f 29 53 7e 52 f2 4d 51 8b 67 29 b1 61 74 aa 35 d1 ad a8 b2 5a 16 02 da 55 4c bf b1 fd 25 2f c7 82 4e f9 c1 7a 4b e4 ea 2d e7 f6 b3 82 83 ea 5c 9a 01 81 d6 da 43 e2 0d 7b 2f a0 54 35 f3 bb fe 5d dd a8 aa fb e1 f8 61 a3 d6 31 72 ef 83 a5 f3 d1 21 e2 7e 85 ea 11 55 af 59 81 a7 b4 df 90 23 c4 47 17 c4 fb bf 0d ed 1c f4 1a 4f 96 ae 26 6b 2a e0 89 7e 8a a4 b8 2e b2 8b 67 bd 8b a3 8d a5 74 35 b2 3d 2e 71 74 d7 64 e3 2c 4e c6 60 30 02 f4 01 22 c5 32 21 1c 0d c6 a0 b8 07 cc 68 a1 2f 81 72 67 db df 8b 45 71 2b a7 75 c7 13 53 b2 a4 51 Data Ascii: q14GE"7a6L::zwcyhDZ>=[j/GeXGlK)S~RMQg)at5ZUL%/NzK-\C{/T5]a1r!~UY#GO&k*~.gt5=.qtd,N`0"2!h/rgEq+uSQ
2024-04-24 02:18:44 UTC	788	IN	Data Raw: d3 4d 24 2a 9d 13 55 a4 34 05 84 d6 1a da 15 66 21 89 25 1c fa 6f a4 57 9b a6 c5 84 f3 73 8f 37 52 54 95 96 ba 62 29 1a a4 52 ce a9 0a a4 5a 56 80 4a c6 ca 26 5b 2a 0b a5 02 70 5c c2 60 17 16 4a 34 26 6e 90 84 4d 1d 9d e9 84 84 3a a2 86 14 96 99 b6 aa 72 de 0b 92 43 4c c7 11 71 cb a7 48 cf 26 36 a7 71 12 94 d1 32 1a 04 dd 65 52 95 48 d1 52 c1 d5 46 71 6e ad d4 18 ea 4d 12 99 7c f5 7a ce 54 9c 0e b2 a1 c1 64 68 43 9b a9 18 9a 8b 52 5d 7a 76 da 49 16 58 c6 ad 34 95 26 4c 6a 46 92 87 25 66 98 f2 e7 ae aa 47 90 f4 84 e2 9c 99 e8 48 e5 d4 96 20 24 09 29 ca 6e 81 c6 90 ad a1 13 64 53 52 15 99 54 f2 1b 48 a9 2a 41 a8 d2 64 b5 64 80 04 54 3b 7b fa 15 28 85 5a 0c aa 40 d3 57 16 a5 2b 72 d3 49 a9 88 da 9e 5c f1 db 42 f1 76 b9 8b ca d4 49 42 55 34 4d 5a 01 c0 09 d1 Data Ascii: M$U4f!%oWs7RTb)RZVJ&[p\`J4&nM:rCLqH&6q2eRHRFqnM\|zTdhCR]zvIX4&LjF%fGH $)ndSRTH*AddT;{(Z@W+rI\BvIBU4MZ
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 0c b8 1a 2a 19 79 dd 40 02 b4 e5 5d ac 95 4e 2b 4b b6 9d 70 72 5c e6 8b 89 01 b2 2e 71 da 4a 1d a7 45 48 29 42 54 49 44 d4 cd 16 5c 84 cb a4 95 99 b9 8a 93 46 f3 6b 46 35 20 51 08 01 17 34 d8 9b 82 0f 6f a4 c4 1a db 2b cc b8 6b 59 07 2e 55 8a 42 82 62 f9 e8 ad 2e 2c e2 e1 da 21 68 62 27 3a 31 13 35 34 c6 d5 8a a4 04 89 0a 90 9a a8 74 02 a4 d4 d8 a5 5b c9 5c d6 4e a9 c5 4b b9 a9 08 ba 59 94 87 23 57 43 53 50 f3 3e 82 b4 cb 2b 1a 2e b2 69 b5 35 79 ba 1e 74 cc 69 ed 17 85 72 a7 4f a4 1f 27 05 c2 8d 5e 28 4a a8 48 9a 15 e7 42 d5 32 58 9a 25 cb 26 93 0a 60 a6 e8 96 a2 a6 74 26 48 b9 6e af 2a 98 d5 31 12 e8 88 db 3a 09 a4 ea 80 32 71 d7 ec c5 68 b1 a7 8e f0 d2 65 ac f5 c2 aa a6 86 aa 20 7a ac e3 0d 05 ae b5 27 3f 97 48 1d e7 04 5c 5b 4a 56 80 4e 92 b6 96 66 ed Data Ascii: y@]N+Kpr\.qJEH)BTID\FkF5 Q4o+kY.UBb.,!hb':154t[\NKY#WCSP>+.i5ytirO'^(JHB2X%&`t&Hn1:2qhe z'?H\[JVNf
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: 8c 49 9d 99 89 e4 44 a9 6a 44 0b ad 75 03 f8 3c bd c9 e4 72 a1 60 6e e5 f7 d8 3f 7e fd 8b 16 27 b6 d4 24 dc 31 e6 e6 c3 8b 45 9e c2 fe cf 67 7e dd bb 6c 99 d8 30 60 dd 87 f1 de f8 de fe 36 08 60 dd 83 03 bf 8d 75 eb d5 d5 a9 f4 fa 7d 46 af 4d 74 ad 5d 0d 7e be bd 7d 7e a1 5b 53 66 3d b8 ec bf ec df fc e3 c6 fe 0f f0 ce bf 27 24 c2 56 76 ef 34 b0 2f 7d d5 48 0a e2 ac 2c cb ff 00 2e b7 31 ce 89 13 b2 c6 24 f6 0c 8c b6 56 e1 a9 07 fa eb fc a3 91 f7 d7 5c 6a 01 5a 25 7e af 5a d5 ea f4 9a da bf 5f 46 10 2f 42 a1 6b a5 6b d0 1c eb f8 dc f7 37 c0 82 08 b3 7d bb f6 ec 1b 7b de fb 76 de d6 28 5e 49 68 41 9b ec 18 58 2c ee 5f da 1c 37 6d 83 08 22 03 b0 47 c6 f6 4f f5 da c0 34 b0 41 37 bf 8d 69 87 5e 81 3a 7a fa 2a 81 c6 a6 be 08 7a af c7 35 f4 3f 43 e3 5f e0 3f e7 Data Ascii: IDjDu<r`n?~'$1Eg~l0`6`u}FMt]~}~[Sf='$Vv4/}H,.1$V\jZ%~Z_F/Bkk7}{v(^IhAX,_7m"GO4A7i^:z*z5?C_?
2024-04-24 02:18:44 UTC	16384	IN	Data Raw: b3 26 61 64 f0 92 8c 98 bc 8e 2b a6 25 f0 ad 8b 76 3e 82 b0 05 65 8a 42 93 04 d4 6a eb a8 ab 15 06 23 69 83 30 be b7 db 40 1a 6f b1 78 62 a9 8a 76 66 95 75 ae 0c d3 f0 c4 16 88 0c 00 46 1b ec 66 94 32 84 9d c1 d0 e0 72 3e 01 e0 9e d0 41 01 06 1e 77 be 36 b0 f1 be fb 81 c5 9e cf 68 b3 d9 ec f6 0b 03 4e dd bb 77 ee 2c f6 7b 7d bc 9e 4f c8 8a 35 d4 d6 54 4d 1f e7 b2 54 0a 85 46 b3 51 5e 77 c1 e0 cd 01 fc 75 ad 6b 5a d1 04 00 57 af 52 85 7a 75 ea 53 d6 2a e9 d0 d6 55 41 5e ba 2a a8 03 0e 83 8b 25 70 4d 4c 5a 34 98 b5 a5 de 4f 7e cb 95 00 84 f0 e8 eb 5c ed 91 e6 ae c9 f5 fa 7d 95 f9 2a 7c e5 79 44 5a a2 65 e7 62 e5 cb e9 c2 c9 a5 88 65 a4 c3 32 14 a9 56 50 7a f5 69 5b e1 af 26 19 6e 75 64 f0 63 b5 7f 04 db e5 17 c8 bd 94 a9 e0 13 19 78 f3 78 98 a4 70 62 53 18 Data Ascii: &ad+%v>eBj#i0@oxbvfuFf2r>Aw6hNw,{}O5TMTFQ^wukZWRzuSUA^%pMLZ4O~\}*\|yDZebe2VPzi[&nudcxxpbS
2024-04-24 02:18:44 UTC	2016	IN	Data Raw: bf 12 46 ab a2 7b 2c 4c bc 75 88 60 48 20 84 40 c5 ca 81 09 05 e1 9b 30 c6 3d 90 99 be c0 4d 6b 73 a9 8b 17 8b 07 af d4 90 13 07 1a d4 31 78 30 42 bd 02 96 24 36 e7 66 2b 35 a2 18 97 4b 3b 88 20 84 b1 ae 00 01 52 a4 1e 19 96 03 b2 7b 31 32 b3 db b9 6e fc 69 a6 ec 64 2b c9 07 8d 75 d3 03 16 1e 14 fb 11 e3 cd a4 04 3f 6e 12 18 60 26 06 20 41 1a 2c eb 07 d1 0e ab c1 0d 00 55 31 45 90 ca e6 8c de 8c 55 50 03 03 0c 49 61 de da 02 90 47 8b 36 b0 9a cc d1 8a 78 58 78 5e 36 26 89 84 ed 4c d4 31 61 9d 8c d3 31 60 7b 6d 2d be 8a ab 36 66 f9 65 5c 3f 1a 84 bf eb 57 57 57 a7 b6 6f 94 ca c8 f0 9f 8e 0b 3f 2c f0 35 25 99 58 7f 93 d1 78 b8 31 c7 97 db 8d 9d 01 c8 ac 81 09 c8 ab 13 17 eb 2c 53 c5 8b 5a 34 35 d8 20 ac 28 8e 98 f8 9a 13 ca d9 82 43 6f 7b dd f9 8d 60 76 b3 Data Ascii: F{,Lu`H @0=Mks1x0B$6f+5K; R{12nid+u?n`& A,U1EUPIaG6xXx^6&L1a1`{m-6fe\?WWWo?,5%Xx1,SZ45 (Co{`v
2024-04-24 02:18:44 UTC	14368	IN	Data Raw: be f5 d1 eb 65 6e 10 a7 3d 80 da 97 f8 3c 2c 0c 49 e1 a0 8c 57 9d 70 c5 60 9b 10 c4 0c 23 11 3a 91 ad 69 40 56 9b ee 6c 6b 3b 87 13 66 3c 3c 54 f6 30 1d 44 ac db 2b 0c 08 d8 0e 12 0e 1a 38 80 01 d4 85 3b 23 86 89 18 75 d6 c3 08 57 ae 82 75 de c0 db b9 2c d4 82 ec 44 51 69 ae b7 0d 30 5b 1f 33 8b 28 38 aa 25 14 ef 6e 59 d0 94 d4 65 d5 f5 e3 be 4d 55 71 be 4c b2 30 c6 b5 16 2c 60 ef 8f 98 4a 82 e8 bc 37 19 2d 45 92 cb 5b c8 d6 ff 00 1a ca a6 b5 d3 45 e1 e2 c1 0c b5 b2 06 1b 6b 2b 1f 11 1a e7 ac 8a 8e ad 88 ed 77 4c ca cc 1c 30 dd 67 63 87 59 a2 34 f4 fe 99 a5 10 4d 83 b1 1e 34 11 07 3b d4 27 b4 6e 18 ed 8d 70 9d cd b1 0e 8d 37 b0 20 84 a9 62 a6 6c b6 f8 56 dc 23 5b 0c d0 41 36 38 24 13 c2 f1 a9 db 82 ac 11 58 35 48 8d 5a d7 eb d1 58 26 88 66 b6 da e2 29 45 Data Ascii: en=<,IWp`#:i@Vlk;f<<T0D+8;#uWu,DQi0[3(8%nYeMUqL0,`J7-E[Ek+wL0gcY4M4;'np7 blV#[A68$X5HZX&f)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50153	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:44 UTC	2127	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:44 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:44 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ldAqgxXV_ld-zUmrzNDSMptu5aCnuWldmeK2qCBpW4UbUg5lDOgVWw==
2024-04-24 02:18:44 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50159	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:44 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926021904
2024-04-24 02:18:45 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f75e35fb43ff0f12d193fc9d62977d34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: OcY6H2P5WZLfEi35c980JmO6sIdlIW32UFlw5W0xyEHS6JkcfyhAyw== Age: 71293
2024-04-24 02:18:45 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50158	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:45 UTC	1983	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:45 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:45 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:18:45 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50161	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:45 UTC	2389	OUT	GET /pricing?trk=NAV_pricing HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _dd_s=rum=0&expire=1713926021909&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:45 UTC	739	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 10162 Connection: close Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Date: Wed, 24 Apr 2024 02:18:45 GMT ETag: "27b2-kIwMylXOlIm6waA2iZ4BVGeHEpg" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P9jZTZv-gSzfbsu0nf_uNngrExmxMGGAva1H63Ai1loQXAwgHeSOKw==
2024-04-24 02:18:45 UTC	10162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 70 69 6e 74 65 72 65 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 70 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, minimum-scale=1, initial-scale=1"/><meta name="pinterest" content="nopin"/><meta name="ref

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50163	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:45 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714926025778 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926021904
2024-04-24 02:18:45 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:45 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 7ddb0e73b2276cedf2c3f96628eefdea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: guPfHweH6lQTaWXQFieYmu52JJSW000h7f3R-I7Dbxv4PfJONIYUYw== Age: 62322

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50162	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:45 UTC	2194	OUT	GET /_next/static/chunks/pages/pricing-43f9c565fe91f700.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925108.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15
2024-04-24 02:18:45 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 530 Connection: close Date: Sun, 14 Apr 2024 10:37:47 GMT Last-Modified: Fri, 12 Apr 2024 16:56:57 GMT ETag: "efc7d0ddd2fa9d9fc1c6637354e0e698" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pnEOx8NVDEtzB4H0jMwSPt142gQDb7HJBLl0rfODT4tmQa1cKMrNdA== Age: 834058
2024-04-24 02:18:45 UTC	530	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 33 39 5d 2c 7b 31 39 31 36 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 70 72 69 63 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 31 34 36 33 38 29 7d 5d 29 7d 2c 31 34 36 33 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 2e 72 28 74 29 2c 75 2e 64 28 74 2c 7b 5f 5f 4e 5f 53 53 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9939],{19164:function(n,t,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/pricing",function(){return u(14638)}])},14638:function(n,t,u){"use strict";u.r(t),u.d(t,{__N_SSP:function(){return _}});var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50157	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:45 UTC	814	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:46 UTC	532	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2875 Connection: close Last-Modified: Mon, 11 Mar 2024 18:54:04 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:08:56 GMT ETag: "b6ccac9b551b7b9844a81399ff998226" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: k3HV00bglYePtfGiRN5DBUZaqvK6e3ROb8HcGA3ahSmH9_K00kldLg== Age: 591
2024-04-24 02:18:46 UTC	2875	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50156	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	732	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/us/bundle.ed3fd0b1c92c6af2e45d.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:46 UTC	521	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 55228 Connection: close Last-Modified: Mon, 11 Mar 2024 18:54:04 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:18:47 GMT ETag: "0b78d6907a453fd3129a453f4358d908" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ad3c0e63e032c703faf8afd0daa0f23c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: om-inueSuW63ZPd2q5COY6PGyupCibq1tvm3pl5TflhXqwA_m7TP1w==
2024-04-24 02:18:46 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 22 65 75 22 2c 22 75 6b 22 2c 22 75 73 22 2c 22 63 61 22 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 35 35 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 38 33 38 39 29 2c 69 3d 72 28 34 39 38 33 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f Data Ascii: !function(){var t,e,r={4339:function(t){t.exports={title:"",platform:"desktop",variants:["eu","uk","us","ca"],tags:[],deployPathOverride:!1}},5514:function(t,e,r){"use strict";var n=r(8389),i=r(4983),o=TypeError;t.exports=function(t){if(n(t))return t;thro
2024-04-24 02:18:46 UTC	1514	IN	Data Raw: 7b 76 61 72 20 65 3d 6e 28 74 68 69 73 29 2c 72 3d 63 28 74 29 2c 69 3d 6f 28 65 29 3b 72 65 74 75 72 6e 20 75 28 65 29 3c 3d 72 2e 73 69 7a 65 3f 73 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 69 6e 63 6c 75 64 65 73 28 74 29 26 26 6c 28 69 2c 74 29 7d 29 29 3a 61 28 72 2e 67 65 74 49 74 65 72 61 74 6f 72 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 65 2c 74 29 26 26 6c 28 69 2c 74 29 7d 29 29 2c 69 7d 7d 2c 38 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 39 32 30 29 2c 69 3d 53 65 74 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 53 65 74 3a 53 65 74 2c 61 64 64 3a 6e 28 69 2e 61 64 64 29 2c 68 61 73 3a 6e 28 69 2e 68 61 73 29 2c 72 65 Data Ascii: {var e=n(this),r=c(t),i=o(e);return u(e)<=r.size?s(e,(function(t){r.includes(t)&&l(i,t)})):a(r.getIterator(),(function(t){f(e,t)&&l(i,t)})),i}},8706:function(t,e,r){"use strict";var n=r(5920),i=Set.prototype;t.exports={Set:Set,add:n(i.add),has:n(i.has),re
2024-04-24 02:18:46 UTC	16384	IN	Data Raw: 72 3a 61 28 74 29 2c 6e 65 78 74 3a 66 7d 2c 65 29 3a 73 28 74 2c 65 29 7d 7d 2c 35 30 39 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 31 31 35 34 29 2c 69 3d 72 28 38 37 30 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 69 2e 70 72 6f 74 6f 2c 22 73 69 7a 65 22 2c 22 67 65 74 22 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 69 7a 65 7d 7d 2c 39 30 39 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 31 32 29 2c 69 3d 72 28 38 37 30 36 29 2c 6f 3d 72 28 36 38 33 38 29 2c 75 3d 72 28 33 37 32 35 29 2c 63 3d 72 28 32 37 37 39 29 2c 73 3d 69 2e 61 64 64 2c 61 3d 69 2e 68 61 73 2c 66 3d 69 2e Data Ascii: r:a(t),next:f},e):s(t,e)}},5090:function(t,e,r){"use strict";var n=r(1154),i=r(8706);t.exports=n(i.proto,"size","get")\|\|function(t){return t.size}},9090:function(t,e,r){"use strict";var n=r(312),i=r(8706),o=r(6838),u=r(3725),c=r(2779),s=i.add,a=i.has,f=i.
2024-04-24 02:18:47 UTC	16384	IN	Data Raw: 3d 3d 74 2e 24 24 2e 64 69 72 74 79 5b 30 5d 26 26 28 62 2e 70 75 73 68 28 74 29 2c 41 7c 7c 28 41 3d 21 30 2c 7a 2e 74 68 65 6e 28 50 29 29 2c 74 2e 24 24 2e 64 69 72 74 79 2e 66 69 6c 6c 28 30 29 29 2c 74 2e 24 24 2e 64 69 72 74 79 5b 65 2f 33 31 7c 30 5d 7c 3d 31 3c 3c 65 25 33 31 7d 28 74 2c 65 29 29 2c 72 7d 29 29 3a 5b 5d 2c 67 2e 75 70 64 61 74 65 28 29 2c 70 3d 21 30 2c 75 28 67 2e 62 65 66 6f 72 65 5f 75 70 64 61 74 65 29 2c 67 2e 66 72 61 67 6d 65 6e 74 3d 21 21 69 26 26 69 28 67 2e 63 74 78 29 2c 65 2e 74 61 72 67 65 74 29 7b 69 66 28 65 2e 68 79 64 72 61 74 65 29 7b 4c 3d 21 30 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 28 65 2e Data Ascii: ==t.$$.dirty[0]&&(b.push(t),A\|\|(A=!0,z.then(P)),t.$$.dirty.fill(0)),t.$$.dirty[e/31\|0]\|=1<<e%31}(t,e)),r})):[],g.update(),p=!0,u(g.before_update),g.fragment=!!i&&i(g.ctx),e.target){if(e.hydrate){L=!0;const t=function(t){return Array.from(t.childNodes)}(e.
2024-04-24 02:18:47 UTC	4562	IN	Data Raw: 4d 69 34 30 4e 43 30 32 4c 6a 41 35 4c 54 55 75 4f 54 55 74 4e 69 34 77 4f 58 4d 74 4e 53 34 33 4d 69 77 79 4c 6a 4d 74 4e 69 34 79 4f 43 77 32 4c 6a 41 35 61 44 45 79 4c 6a 49 7a 57 69 49 76 50 67 6f 67 49 43 41 67 50 48 42 68 64 47 67 67 59 32 78 68 63 33 4d 39 49 6d 4e 73 63 79 30 79 49 69 42 6b 50 53 4a 4e 4d 54 51 32 4c 6a 51 31 4c 44 63 32 4c 6a 67 79 59 7a 41 74 4e 53 34 33 4d 69 77 31 4c 6a 55 7a 4c 54 63 75 4e 7a 67 73 4d 54 49 75 4e 54 59 74 4e 79 34 33 4f 47 67 7a 4c 6a 41 31 64 69 30 78 4c 6a 49 33 59 7a 41 74 4d 79 34 79 4f 43 30 78 4c 6a 45 79 4c 54 51 75 4f 54 49 74 4e 43 34 30 4e 53 30 30 4c 6a 6b 79 4c 54 49 75 4f 54 55 73 4d 43 30 30 4c 6a 51 78 4c 44 45 75 4e 44 45 74 4e 43 34 32 4f 53 77 7a 4c 6a 67 30 61 43 30 31 4c 6a 51 34 59 79 34 Data Ascii: Mi40NC02LjA5LTUuOTUtNi4wOXMtNS43MiwyLjMtNi4yOCw2LjA5aDEyLjIzWiIvPgogICAgPHBhdGggY2xhc3M9ImNscy0yIiBkPSJNMTQ2LjQ1LDc2LjgyYzAtNS43Miw1LjUzLTcuNzgsMTIuNTYtNy43OGgzLjA1di0xLjI3YzAtMy4yOC0xLjEyLTQuOTItNC40NS00LjkyLTIuOTUsMC00LjQxLDEuNDEtNC42OSwzLjg0aC01LjQ4Yy4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50164	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	712	OUT	GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:46 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:46 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50167	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	3498	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A45.077%2B02%3A00&epn.hit_timestamp_unix=1713925125077&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925125026-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=2&tfd=1303&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; wt_trk=TRN_TDL_05; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925125.0.0.496837087; _ga=GA1.1.1577694276.1713925069
2024-04-24 02:18:46 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:46 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775947; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 fe624e5ec67fb7582d7a2f57fd2d7078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: zQwxVLwypnZ1RoBZflqHnTeIwKz2g0-l-Y_J-r5cVTwGAWtI-Srs0g==
2024-04-24 02:18:46 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 35 37 33 33 35 35 32 37 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.17139250
2024-04-24 02:18:46 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 35 37 33 33 35 35 32 37 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F
2024-04-24 02:18:46 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 37 32 30 37 38 34 30 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069
2024-04-24 02:18:46 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 37 32 30 37 38 34 30 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2
2024-04-24 02:18:46 UTC	1347	IN	Data Raw: 35 33 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 35 30 37 36 33 32 34 33 36 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 36 35 39 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 53cevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=507632436&fst=1713925126592&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:18:46 UTC	688	IN	Data Raw: 32 61 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 31 35 34 33 31 31 38 39 32 34 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 36 36 32 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 Data Ascii: 2a9event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=1543118924&fst=1713925126622&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&u
2024-04-24 02:18:46 UTC	361	IN	Data Raw: 31 36 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 53 57 54 52 51 36 53 57 25 32 46 51 30 43 64 55 54 78 6a 73 72 25 32 46 71 69 68 44 39 39 61 52 51 53 6b 78 51 77 64 62 75 33 57 38 51 72 75 56 32 70 54 52 72 61 6e 45 74 61 47 39 33 7a 4b 31 67 53 34 75 49 64 57 59 7a 75 4d 74 6c 75 35 64 4b 25 32 42 6c 47 33 75 6c 70 6a 68 44 31 53 79 39 4d 39 39 54 79 71 25 32 46 70 66 35 49 63 71 7a 75 51 4d 62 66 49 63 25 32 46 4f 34 30 39 6a 36 56 6f 6a 69 33 55 6a 51 64 58 56 61 4c 42 55 66 77 58 25 32 42 6d 76 36 30 75 50 41 56 6b 5a 34 75 69 73 25 32 46 25 32 46 6c 69 51 44 46 30 33 30 34 69 Data Ascii: 162event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304i
2024-04-24 02:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50166	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:46 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:46 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 734PKS9388347SJNDCCT Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:46 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:46 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50169	34.49.212.111	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	478	OUT	GET /api/segment?pid=712597&pdata=sid%3D15%2Cuid%3Dc444300f-6006-4e83-9c38-3f418b9b111c HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+S1Y7IgQRTLjCNt/mDDdscCjsqbL8tqeQEqRP2GorgA=
2024-04-24 02:18:47 UTC	385	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Content-Type: image/gif Date: Wed, 24 Apr 2024 02:18:47 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50160	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:46 UTC	2499	OUT	POST /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-amplitude-language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/graphql+json, application/json x-amplitude-country: US x-app-origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926026167&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925126.0.0.496837087
2024-04-24 02:18:46 UTC	448	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 5c 6e 20 20 6d 65 74 61 64 61 74 61 20 7b 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 5c 6e 20 20 20 20 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 5c 6e 20 20 20 20 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 5c 6e 20 20 20 20 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 5c 6e 20 20 20 20 74 72 61 6e 73 66 65 72 45 78 70 69 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 5c 6e 20 20 20 20 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 5c 6e 20 20 20 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 5c 6e 20 20 20 20 72 65 67 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 63 6f 75 6e 74 72 79 5c 6e 20 20 20 20 20 20 63 75 72 72 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 6f 6e 74 69 6e 65 Data Ascii: {"query":"{\n metadata {\n amplitudeApiKey\n amplitudeDeploymentId\n friendbuyMerchantId\n googleMapsApiKey\n transferExpirationOptions\n cookieDomain\n compatibilityVersion\n region {\n country\n currency\n contine
2024-04-24 02:18:47 UTC	1505	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 636 Connection: close access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-origin: https://wetransfer.com access-control-expose-headers: access-control-max-age: 0 Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:18:47 GMT ETag: W/"51925d8a859642b39323b07ac6393022" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; domain=.wetransfer.com; path=/; expires=Fri, 24 Apr 2026 02:18:47 GMT; secure Set-Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept, Accept-Encoding, Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-vlpxw-206334 X-Permitted-Cross-Domain-Policies: none X-Request-Id: 3e2bbc0999c0836e57b31d9d95e892c4 X-Runtime: 0.005449 X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0RbG8b7v0aFcp4P_5o-h_INBvWfG7gpMVs0sGuo0_RYgFFEZT0yxQA==
2024-04-24 02:18:47 UTC	636	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 61 6d 70 6c 69 74 75 64 65 41 70 69 4b 65 79 22 3a 22 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 22 2c 22 61 6d 70 6c 69 74 75 64 65 44 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 63 6c 69 65 6e 74 2d 65 4f 57 6d 30 77 79 47 37 55 51 43 38 75 33 53 58 71 6b 67 31 31 51 6e 68 34 76 55 70 41 52 41 22 2c 22 66 72 69 65 6e 64 62 75 79 4d 65 72 63 68 61 6e 74 49 64 22 3a 22 65 61 38 66 64 65 63 63 2d 32 61 66 33 2d 34 30 62 35 2d 38 63 33 63 2d 35 63 39 33 39 63 62 34 36 30 62 30 22 2c 22 67 6f 6f 67 6c 65 4d 61 70 73 41 70 69 4b 65 79 22 3a 22 41 49 7a 61 53 79 44 55 6e 74 37 41 47 41 5a 54 49 4e 6b 56 77 42 79 4e 68 65 69 4a 64 33 48 30 48 75 Data Ascii: {"data":{"metadata":{"amplitudeApiKey":"874b771639defe31a77b1585b1ba981f","amplitudeDeploymentId":"client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA","friendbuyMerchantId":"ea8fdecc-2af3-40b5-8c3c-5c939cb460b0","googleMapsApiKey":"AIzaSyDUnt7AGAZTINkVwByNheiJd3H0Hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50170	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	869	OUT	POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1095932681.1713925125&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:47 UTC	862	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=1095932681.1713925125&url=https%3A%2F%2Fwetransfer.com%2Fpricing&dma_cps=sypham&dma=1&npa=0&tcfd=10001&gtm=45Fe44m0n81NS54WBWv890364660za200&auid=497330811.1713925074 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50172	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	691	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:47 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:47 GMT x-amzn-RequestId: 91ee260e-3f23-4894-8a33-5e7fc4e04bbb Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 bc3ff5e585cc9986c297a858b9173236.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: Ox1R0kMXP_k-Hojy89OWJibeM3Nw2n-gdUyIuUI2j8Wt_S-a91hrmg==
2024-04-24 02:18:47 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50155	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	789	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/copy1.a62a38e342bf4dadb1f9.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:47 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 50270 Connection: close Date: Wed, 24 Apr 2024 02:18:48 GMT Last-Modified: Mon, 11 Mar 2024 18:53:39 GMT ETag: "c7e58e7fae0d14b374938f7c3052bebc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 27f8684163b0b232d220b4ced517da20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: lEqYgzXdUmxdfi-jxndDdaIbh2bhknHEocXOIyjEoPoZWE-4ZMY7Cw==
2024-04-24 02:18:47 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 3c 00 00 01 3f 08 06 00 00 00 aa c6 d3 ea 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 c4 10 49 44 41 54 78 9c ec 9d 67 b8 24 45 d5 80 5f 72 58 58 76 81 22 16 a9 c8 08 12 25 08 48 94 28 51 50 32 08 12 24 98 15 fc 44 05 44 45 45 25 29 82 08 28 41 10 24 89 44 c9 39 83 91 58 20 14 b1 80 5d 16 76 c9 cb f7 e3 f4 85 bb 77 27 54 a7 99 b9 73 cf fb 3c f7 81 9d ae ae 3a d3 d3 95 4e 9d 30 0d 8a a2 28 8a a2 e4 c6 59 33 17 30 1a 98 1e 78 d5 87 f8 4a 97 45 52 94 a6 38 6b 3e 06 ac 0b cc 03 bc 02 dc 0f dc e5 43 9c dc 55 c1 14 45 51 14 a5 46 a6 e9 b6 00 8a a2 28 8a 32 1c 70 d6 2c 09 7c 0e d8 0c f8 38 a2 ec 18 cc 04 e0 0e e0 22 e0 6c 1f e2 a4 ce 4a a8 28 53 e3 ac 59 1c 38 0d 58 bf c1 e5 87 81 Data Ascii: PNGIHDR<?pHYsIDATxg$E_rXXv"%H(QP2$DDEE%)(A$D9X ]vw'Ts<:N0(Y30xJER8k>CUEQF(2p,\|8"lJ(SY8X
2024-04-24 02:18:47 UTC	6929	IN	Data Raw: 32 4f 89 cf 31 d4 6d a9 6a 16 48 28 b3 5c c5 6d f6 ea e2 bb 5f df b3 ba d0 e7 35 35 dd 0e fc 58 d7 d8 fc 47 e0 d9 c4 b2 33 01 97 3b 6b 52 82 32 57 82 b3 66 1d 24 80 f7 2a d9 47 d3 00 bb 25 de fe 4b 20 35 55 e8 77 9c 35 7b e6 14 af 30 ce 9a 23 10 85 cc c0 ef 5a e8 99 fa 10 df a2 fd b8 3b 23 a2 d4 51 a6 e4 2a e0 b9 36 65 56 47 9e ef bd c0 ec 43 ae dd e2 43 4c 09 8e 5b 86 7e ee 9f 8a a2 28 23 86 3c 66 a4 fb 90 9e 6e 6e 30 33 20 31 3d 7e db 6b a7 1c d9 64 71 17 8d 4f bd 27 03 7b fb 10 df ee a0 48 43 27 f4 ba e9 d7 c9 3c 65 11 b4 a4 b3 a6 4e 2b 8f 95 12 ca ac 55 a5 29 77 0f 2f be fb f5 3d ab 0b 7d 5e 53 93 12 97 67 d8 b5 9f 99 e3 1f 93 e3 96 b9 81 9b 9c 35 9b d4 21 cf 60 32 05 c4 75 c0 d0 4c 2a 93 52 ee cf ac 43 53 ad 3c 40 5c 5b 0e cc 51 3e 37 ce 9a 19 9d 35 Data Ascii: 2O1mjH(\m_55XG3;kR2Wf$G%K 5Uw5{0#Z;#Q6eVGCCL[~(#<fnn03 1=~kdqO'{HC'<eN+U)w/=}^Sg5!`2uL*RCS<@\[Q>75
2024-04-24 02:18:47 UTC	16384	IN	Data Raw: fa c5 09 3e c4 f7 4a 28 3b 00 fe cf 87 f8 93 66 17 6b 1e 1b 57 05 2e 42 5c 39 eb e2 4a e0 f3 3e c4 d7 eb 6a 20 3b a0 f9 11 f0 75 7a 27 54 46 9a c2 c3 59 b3 22 62 e2 b6 7d b3 32 83 98 bf 99 16 d7 59 b3 04 70 2e d5 2d 72 de 47 34 56 3f 4c d5 a4 66 1b e2 43 81 23 11 f7 8e 2a 78 90 02 27 0b 65 c8 7c f4 7e 86 6c 36 eb 4c a1 f9 0e b2 e9 38 a2 2e 3f f1 0a df af 59 91 93 84 ed 0a 88 11 80 65 f3 9c 28 77 48 e1 b1 0b 70 4e 99 3a 32 de 03 66 ab c2 85 24 db 80 7d 0f d9 d0 d6 f1 ee 3d 8d 9c 06 15 52 d0 64 93 dd dd 88 79 5b 2f f0 80 0f b1 dd 66 15 00 67 cd 1c c8 c9 dd 41 88 2b 5a 3b be ea 43 3c be 8c 70 15 f6 bf 69 81 6f 20 63 f2 cc 8d ca 14 e4 19 e0 0b 3e c4 eb 2a ac 33 99 2c 5e c6 77 81 03 a9 f6 7b 0d f0 14 b2 80 3a 6f e8 3c e6 ac d9 14 38 8f 34 5f f3 77 7d 88 55 cd Data Ascii: >J(;fkW.B\9J>j ;uz'TFY"b}2Yp.-rG4V?LfC#x'e\|~l6L8.?Ye(wHpN:2f$}=Rdy[/fgA+Z;C<pio c>3,^w{:o<84_w}U
2024-04-24 02:18:48 UTC	16384	IN	Data Raw: 58 c2 87 78 a6 6f 91 76 7d 80 a9 16 bf ce 9a 6d 11 9f ea a5 28 17 c9 fe 75 64 21 79 bc 0f 31 f9 94 d9 59 f3 2d a4 63 2d 54 b2 7d 90 97 ea 15 e0 36 e0 5b 03 fe 77 09 32 2c 81 74 ec 4f 20 91 9b 8b 9a 13 8d 47 5e 90 ab 81 43 cb 04 d9 cc 5c 13 f6 40 52 b3 96 f5 2d 7b 08 f9 7e e7 b7 7b 49 b2 d4 6c 3f a6 75 40 c1 17 90 6c 1a 6d fd 70 2b 7c bf 3e 40 9e ef c3 c0 d1 09 8b bb 5c 54 20 e7 5b c8 20 72 15 f0 0d 9f 33 9b 44 1b d9 36 45 52 3d a5 64 6e 79 0a 09 8a 54 4a 61 96 9d 9e 7f 1e 89 ab 93 1a 4b a4 15 6f 20 0a b2 5f fb 10 bb 16 05 dc 59 b3 30 32 e9 6c 5f e0 f6 f1 c8 a9 d9 af 8a 28 6a ba f1 8e 55 d8 ff c6 23 9b 82 9f f8 62 d9 a8 0e 44 14 69 8b 50 dc ac fb 3d 64 23 73 3f 12 a4 aa d5 46 a6 99 1c 73 03 df a0 fa 00 78 13 11 b7 c2 27 81 e7 91 df e9 15 44 e6 09 88 55 ca Data Ascii: Xxov}m(ud!y1Y-c-T}6[w2,tO G^C\@R-{~{Il?u@lmp+\|>@\T [ r3D6ER=dnyTJaKo _Y02l_(jU#bDiP=d#s?Fsx'DU
2024-04-24 02:18:48 UTC	1624	IN	Data Raw: 14 f1 2a f0 12 ee 5a bf 09 8c 07 16 a3 fe c9 20 c0 61 da d8 43 e3 4d eb 2f 94 14 5f 07 fe 6f 49 b3 33 b5 b1 bb 26 9c 73 5e dc 1a 2e 8b cc fb 40 2f 36 24 91 9b fb d9 c0 21 c0 4f ea 86 ed 17 d8 b3 05 2e b2 a2 09 01 d0 33 80 dd 3b d9 aa a4 d8 11 e7 cc 4f 21 1a fc 16 70 a8 36 f6 87 55 3b fa e8 c9 03 48 73 e8 f4 3a 2e 5a ab 6b e9 52 4a 8a a5 80 47 88 d7 1b 3b 5b 1b bb 73 02 93 82 51 52 ec 09 9c 9c 78 d8 d9 c0 5a da d8 3b 3a cc bb 29 2e 0a af 72 c4 6d 00 2f 02 eb 6a 63 ef 6f 60 ec 4c a6 16 43 6f f2 3f a0 f9 07 f6 85 71 27 f9 ed e8 86 0d e0 42 c6 3a 3e 88 28 57 2d e1 64 ba 93 d7 3d 3f dd 0d 01 ef 8b eb ec f3 68 bb e1 ec 00 27 0a d9 49 7d fa 18 ba e3 ec 00 f8 89 2a ae 8a 90 d7 e0 10 46 ca 1a d4 c6 3e 88 53 2a ef 46 4a c4 df 70 27 68 45 d1 4a f7 45 8e 7d 32 f0 e1 Data Ascii: Z aCM/_oI3&s^.@/6$!O.3;O!p6U;Hs:.ZkRJG;[sQRxZ;:).rm/jco`LCo?q'B:>(W-d=?h'I}F>S*FJp'hEJE}2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50173	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	1422	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:47 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5042585499093947323"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5042585499093947323","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5042585499093947323","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5042585499093947323","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5042585499093947323","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50176	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:47 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:47 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HY55F29E8C22VW5YKNMB Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:47 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50178	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	3226	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=1&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A45.077%2B02%3A00&epn.hit_timestamp_unix=1713925125077&ep.tag_name=GA4%20-%20page_view&ep.event_id=1713925125026-1-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=2&tfd=1303&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925125.0.0.496837087; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3
2024-04-24 02:18:47 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:47 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775946; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 40da406c5110ccf04e1cf549a71698dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: SV56SRYZ0wSwhpQvgGYMyWwOpAh-zdbRkkfTN7vJ-V4KaLIGNzpVNA==
2024-04-24 02:18:47 UTC	697	IN	Data Raw: 32 62 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 36 35 30 38 30 32 37 32 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 Data Ascii: 2b2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=650802726;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.171392506
2024-04-24 02:18:47 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 36 35 30 38 30 32 37 32 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=650802726;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%
2024-04-24 02:18:47 UTC	695	IN	Data Raw: 32 62 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 37 39 36 36 36 34 35 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b Data Ascii: 2b0event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=796664551;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;
2024-04-24 02:18:47 UTC	627	IN	Data Raw: 32 36 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 37 39 36 36 36 34 35 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: 26cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=796664551;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2F
2024-04-24 02:18:47 UTC	686	IN	Data Raw: 32 61 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 34 39 37 30 32 34 32 32 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 37 36 36 34 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 6c Data Ascii: 2a7event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=49702422&fst=1713925127664&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url
2024-04-24 02:18:47 UTC	1347	IN	Data Raw: 35 33 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 33 39 33 36 32 34 39 34 39 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 37 36 37 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 53cevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=393624949&fst=1713925127670&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:18:48 UTC	365	IN	Data Raw: 31 36 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 7a 53 65 35 70 4d 25 32 46 6d 76 67 70 56 4c 37 6f 63 4b 31 70 4f 39 66 74 77 37 46 55 75 25 32 42 6f 64 6c 67 67 76 68 6f 4a 76 36 64 64 50 37 79 76 31 4e 78 76 63 25 32 42 38 64 4e 34 38 25 32 42 34 58 65 64 31 48 57 54 25 32 42 66 34 77 6f 4f 55 43 52 34 4c 32 47 77 48 63 61 57 52 30 30 4e 59 36 25 32 42 54 57 73 52 7a 68 45 52 33 47 4e 64 46 30 4e 41 65 6b 35 71 44 25 32 42 59 37 61 77 66 6d 52 68 50 65 72 43 4a 6a 42 73 50 34 56 54 45 76 7a 77 4f 39 32 79 63 6a 38 48 46 4c 43 6f 4c 41 25 32 42 31 6d 36 6a 63 76 42 46 68 25 32 42 Data Ascii: 166event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=zSe5pM%2FmvgpVL7ocK1pO9ftw7FUu%2BodlggvhoJv6ddP7yv1Nxvc%2B8dN48%2B4Xed1HWT%2Bf4woOUCR4L2GwHcaWR00NY6%2BTWsRzhER3GNdF0NAek5qD%2BY7awfmRhPerCJjBsP4VTEvzwO92ycj8HFLCoLA%2B1m6jcvBFh%2B
2024-04-24 02:18:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50171	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	1068	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCOSCiY3yg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:47 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:47 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCLa5-6vzg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:18:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:47 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50177	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	646	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:47 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:47 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 45FE1D9MW658TZNCXP54 Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:47 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50182	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	789	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/copy2.9454484e8930cd5427e6.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 13772 Connection: close Date: Wed, 24 Apr 2024 02:18:49 GMT Last-Modified: Mon, 11 Mar 2024 18:53:40 GMT ETag: "8f5fc5c065f508cf95e46de371a93d7f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 65XsewASb48Z3Rwsw6A48SnzO_sjydTqJuhHvW4GUUTkg_T3Ja8Sew==
2024-04-24 02:18:48 UTC	13772	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 ad 08 06 00 00 00 33 9b 4c 53 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 35 7e 49 44 41 54 78 9c ed bd 3d 6e f4 38 13 ef fb 9f f7 be c9 c5 01 0e d0 03 28 53 44 2f c1 5e 82 1d de d0 5e 82 bd 04 7b 09 76 78 42 f7 12 dc 4b 70 a7 27 73 2f e1 51 d4 59 03 d3 c0 09 4e 3a 37 60 d1 cd a6 8a 5f 12 a5 96 d4 f5 03 8c 79 c6 d6 07 45 16 8b c5 62 b1 f8 17 66 80 aa 2b 05 e0 11 c0 3d 80 5b 00 2b 00 4f cd fe b0 b9 68 c1 04 41 10 84 49 42 e3 c6 33 f4 98 71 4f bf 96 71 a3 27 ff bd 74 01 42 a8 ba 5a 01 78 87 6e 78 97 67 00 d2 f8 82 20 08 c2 2f 64 2c bc 42 c6 8d 41 98 ac d1 40 0d ff 03 ed 55 60 2f 19 b1 38 c2 4c 51 75 75 0b e0 1b 5a 8e 8e 00 1e 9a fd 61 77 d9 52 09 82 30 04 32 6e 0c Data Ascii: PNGIHDR3LSpHYs5~IDATx=n8(SD/^^{vxBKp's/QYN:7`_yEbf+=[+OhAIB3qOq'tBZxnxg /d,BA@U`/8LQuuZawR02n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50181	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	3532	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925126.0.0.496837087
2024-04-24 02:18:47 UTC	791	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:47 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775946; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 162e0a5e43b734e69d940498f98a7bb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: xwhjKJXwYeU8KQxo-PVEMNGSlbHDhDAzgUUYXFqD6zIZogSVQyXViQ==
2024-04-24 02:18:47 UTC	698	IN	Data Raw: 32 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 36 35 30 33 33 31 38 33 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 Data Ascii: 2b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.17139250
2024-04-24 02:18:47 UTC	630	IN	Data Raw: 32 36 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 31 36 35 30 33 33 31 38 33 30 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: 26fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F
2024-04-24 02:18:47 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 39 31 35 33 36 37 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069
2024-04-24 02:18:47 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 36 39 31 35 33 36 37 35 31 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2
2024-04-24 02:18:48 UTC	1361	IN	Data Raw: 35 34 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 38 32 39 35 34 39 39 37 32 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 37 38 35 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 Data Ascii: 54aevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=829549972&fst=1713925127858&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z98901
2024-04-24 02:18:48 UTC	687	IN	Data Raw: 32 61 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 33 30 32 38 31 30 37 36 37 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 37 38 39 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 2a8event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=302810767&fst=1713925127895&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:48 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 34 48 4f 6d 34 44 30 4c 49 6f 41 51 44 34 44 64 6e 74 43 31 61 4d 4b 48 41 51 6b 70 35 4d 66 38 6d 54 36 4d 67 48 45 50 47 34 33 37 6f 63 6b 6d 4e 4b 4f 4c 46 59 56 30 76 71 59 25 32 42 4f 66 6e 51 44 57 52 61 32 54 31 76 34 50 59 50 43 78 79 54 64 43 46 66 31 25 32 46 34 62 4d 48 48 46 59 72 46 46 76 47 4d 61 58 6e 36 4c 67 6b 61 48 72 65 43 48 34 52 65 69 48 77 62 69 69 54 6e 79 4f 4d 5a 4b 25 32 46 5a 4a 44 53 70 6a 65 31 65 44 31 31 4c 73 30 6c 57 6c 33 65 4e 66 31 77 65 25 32 46 73 6a 6f 53 76 6b 70 69 78 46 32 59 72 47 25 32 46 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=4HOm4D0LIoAQD4DdntC1aMKHAQkp5Mf8mT6MgHEPG437ockmNKOLFYV0vqY%2BOfnQDWRa2T1v4PYPCxyTdCFf1%2F4bMHHFYrFFvGMaXn6LgkaHreCH4ReiHwbiiTnyOMZK%2FZJDSpje1eD11Ls0lWl3eNf1we%2FsjoSvkpixF2YrG%2F
2024-04-24 02:18:48 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:18:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50179	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126369 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:18:48 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50180	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	625	OUT	OPTIONS /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126374 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-td-fetch-api,x-td-write-key Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	420	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 02:18:48 GMT Content-Length: 0 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Max-Age: 7200 Access-Control-Allow-Origin: https://wetransfer.com Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50183	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	2124	OUT	GET /api/graphql HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; _dd_s=rum=0&expire=1713926026167&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925126.0.0.496837087; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b
2024-04-24 02:18:48 UTC	583	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 874 Connection: close Date: Wed, 24 Apr 2024 02:18:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Origin X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-vlpxw-205618 X-Request-Id: 145c1fcab5fb341ae8646be332ce9d47 X-Runtime: 0.001199 X-Cache: Error from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qcYB6gDFg5DDGcY6JCCEFSRBqpZY2vbKgiS9Lgqhcxdegc7InzdRgQ==
2024-04-24 02:18:48 UTC	874	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 65 72 72 6f 72 2d 70 61 67 65 2e 63 73 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8" /> <title>The page you were looking for doesn't exist (404)</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <link rel="stylesheet" media="all" href="/css/error-page.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50185	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925125099 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:48 GMT x-amzn-RequestId: 36408cb8-7293-4380-a4dd-7f2168574722 X-Cache: Miss from cloudfront Via: 1.1 8fe62b5c336640e23f746f6e7b2b7fc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: rLONTaRmosxx5C0Hztx6UfIUlUlx7gwrBC86lXJ1eqOBORbcRN-Vhw==
2024-04-24 02:18:48 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50186	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:47 UTC	1110	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:48 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5042585499093947323"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5042585499093947323","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5042585499093947323","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5042585499093947323","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5042585499093947323","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50187	142.250.101.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50188	54.230.21.79	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	691	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	577	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:48 GMT x-amzn-RequestId: d40d17b9-3351-4029-8152-4929731f7f6f Access-Control-Allow-Origin: https://wetransfer.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 bc3ff5e585cc9986c297a858b9173236.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: ByHaOmxSY28Vi30nK8uz0fwSIPE4B-2eWGJDOe9DxPmVL18lob20tQ==
2024-04-24 02:18:48 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50189	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	473	OUT	GET /iu3?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:48 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:48 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: EVDY2D7C9PSN7D2JD6M1 Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:48 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50192	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	420	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/copy1.a62a38e342bf4dadb1f9.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:48 UTC	493	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 50270 Connection: close Date: Wed, 24 Apr 2024 02:18:48 GMT Last-Modified: Mon, 11 Mar 2024 18:53:39 GMT ETag: "c7e58e7fae0d14b374938f7c3052bebc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: aRXHltEo7UwV4KDT3NJ8thuQilsN_u4G3siAackUhVUTQO7cNEdixQ== Age: 1
2024-04-24 02:18:48 UTC	15891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 3c 00 00 01 3f 08 06 00 00 00 aa c6 d3 ea 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 c4 10 49 44 41 54 78 9c ec 9d 67 b8 24 45 d5 80 5f 72 58 58 76 81 22 16 a9 c8 08 12 25 08 48 94 28 51 50 32 08 12 24 98 15 fc 44 05 44 45 45 25 29 82 08 28 41 10 24 89 44 c9 39 83 91 58 20 14 b1 80 5d 16 76 c9 cb f7 e3 f4 85 bb 77 27 54 a7 99 b9 73 cf fb 3c f7 81 9d ae ae 3a d3 d3 95 4e 9d 30 0d 8a a2 28 8a a2 e4 c6 59 33 17 30 1a 98 1e 78 d5 87 f8 4a 97 45 52 94 a6 38 6b 3e 06 ac 0b cc 03 bc 02 dc 0f dc e5 43 9c dc 55 c1 14 45 51 14 a5 46 a6 e9 b6 00 8a a2 28 8a 32 1c 70 d6 2c 09 7c 0e d8 0c f8 38 a2 ec 18 cc 04 e0 0e e0 22 e0 6c 1f e2 a4 ce 4a a8 28 53 e3 ac 59 1c 38 0d 58 bf c1 e5 87 81 Data Ascii: PNGIHDR<?pHYsIDATxg$E_rXXv"%H(QP2$DDEE%)(A$D9X ]vw'Ts<:N0(Y30xJER8k>CUEQF(2p,\|8"lJ(SY8X
2024-04-24 02:18:48 UTC	16384	IN	Data Raw: f8 93 66 17 6b 1e 1b 57 05 2e 42 5c 39 eb e2 4a e0 f3 3e c4 d7 eb 6a 20 3b a0 f9 11 f0 75 7a 27 54 46 9a c2 c3 59 b3 22 62 e2 b6 7d b3 32 83 98 bf 99 16 d7 59 b3 04 70 2e d5 2d 72 de 47 34 56 3f 4c d5 a4 66 1b e2 43 81 23 11 f7 8e 2a 78 90 02 27 0b 65 c8 7c f4 7e 86 6c 36 eb 4c a1 f9 0e b2 e9 38 a2 2e 3f f1 0a df af 59 91 93 84 ed 0a 88 11 80 65 f3 9c 28 77 48 e1 b1 0b 70 4e 99 3a 32 de 03 66 ab c2 85 24 db 80 7d 0f d9 d0 d6 f1 ee 3d 8d 9c 06 15 52 d0 64 93 dd dd 88 79 5b 2f f0 80 0f b1 dd 66 15 00 67 cd 1c c8 c9 dd 41 88 2b 5a 3b be ea 43 3c be 8c 70 15 f6 bf 69 81 6f 20 63 f2 cc 8d ca 14 e4 19 e0 0b 3e c4 eb 2a ac 33 99 2c 5e c6 77 81 03 a9 f6 7b 0d f0 14 b2 80 3a 6f e8 3c e6 ac d9 14 38 8f 34 5f f3 77 7d 88 55 cd 69 b5 e0 ac d9 06 39 f1 a9 f2 34 3d 85 Data Ascii: fkW.B\9J>j ;uz'TFY"b}2Yp.-rG4V?LfC#x'e\|~l6L8.?Ye(wHpN:2f$}=Rdy[/fgA+Z;C<pio c>3,^w{:o<84_w}Ui94=
2024-04-24 02:18:48 UTC	15695	IN	Data Raw: ce 9a 6d 11 9f ea a5 28 17 c9 fe 75 64 21 79 bc 0f 31 f9 94 d9 59 f3 2d a4 63 2d 54 b2 7d 90 97 ea 15 e0 36 e0 5b 03 fe 77 09 32 2c 81 74 ec 4f 20 91 9b 8b 9a 13 8d 47 5e 90 ab 81 43 cb 04 d9 cc 5c 13 f6 40 52 b3 96 f5 2d 7b 08 f9 7e e7 b7 7b 49 b2 d4 6c 3f a6 75 40 c1 17 90 6c 1a 6d fd 70 2b 7c bf 3e 40 9e ef c3 c0 d1 09 8b bb 5c 54 20 e7 5b c8 20 72 15 f0 0d 9f 33 9b 44 1b d9 36 45 52 3d a5 64 6e 79 0a 09 8a 54 4a 61 96 9d 9e 7f 1e 89 ab 93 1a 4b a4 15 6f 20 0a b2 5f fb 10 bb 16 05 dc 59 b3 30 32 e9 6c 5f e0 f6 f1 c8 a9 d9 af 8a 28 6a ba f1 8e 55 d8 ff c6 23 9b 82 9f f8 62 d9 a8 0e 44 14 69 8b 50 dc ac fb 3d 64 23 73 3f 12 a4 aa d5 46 a6 99 1c 73 03 df a0 fa 00 78 13 11 b7 c2 27 81 e7 91 df e9 15 44 e6 09 88 55 ca 68 e4 fb af 81 28 16 53 94 51 0f fa 10 Data Ascii: m(ud!y1Y-c-T}6[w2,tO G^C\@R-{~{Il?u@lmp+\|>@\T [ r3D6ER=dnyTJaKo _Y02l_(jU#bDiP=d#s?Fsx'DUh(SQ
2024-04-24 02:18:48 UTC	2300	IN	Data Raw: e8 92 b8 0d e8 5d 4a 8a 9d 63 52 be fc 86 e9 8f 54 8b ec da 63 34 38 3b 3c 55 2a 9f d4 12 2b 6d 45 1b 6b 09 17 2f 7e 01 97 6e d5 13 fc e6 fe a0 c0 e6 6b 2b 29 3e 9d 72 7e 6d ec dd b8 f2 d4 55 f8 18 4e f7 e7 04 9c 38 f2 d9 38 2d 9d ed e9 9c 1e f1 cd 00 67 c7 3b 71 29 8b a1 ce 0e 70 eb f5 2f aa 9a 20 6a 29 4a 8a 6d 70 55 92 aa 94 93 57 c0 1f 7a 9d da a2 a4 58 4c 49 71 1e 61 ce 0e 70 8e aa eb 95 14 dd 12 81 6d 8b 92 62 3b 5c 9a 6c 1d 67 07 c0 de c0 0d 55 a3 56 7c 74 d2 77 70 a9 a8 75 9c 1d e0 9e 13 ef 50 52 ec 95 22 d2 24 93 69 82 b9 be 98 ca 89 bf fd 2f cd 94 4d 9d 09 6c a3 8d ed 58 6e ae 61 1b c0 29 74 7f 3e f4 54 d7 7b 5c 4f a7 da 0f 51 15 66 01 9f d6 c6 5e d9 d0 f8 85 f4 d3 75 56 52 7c 1b f8 31 e9 1c 0c ad 9c 04 ec 5b e6 c5 f7 11 0d d3 80 4d 1b b2 63 36 Data Ascii: ]JcRTc48;<U*+mEk/~nk+)>r~mUN88-g;q)p/ j)JmpUWzXLIqapmb;\lgUV\|twpuPR"$i/MlXna)t>T{\OQf^uVR\|1[Mc6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50191	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	791	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/product.553fcf2aa5ab6d9771ed.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:49 UTC	487	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 403929 Connection: close Date: Wed, 24 Apr 2024 02:18:50 GMT Last-Modified: Mon, 11 Mar 2024 18:53:53 GMT ETag: "b87143fe59071125a9693041a69391c9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: R3_gZpDWoRU_8glOWzphoG4G8_oGCh0SVABzgZVZBgAgSSva7kAlGQ==
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 3d 00 00 03 24 08 06 00 00 00 92 b1 4e 26 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR=$N&pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf
2024-04-24 02:18:49 UTC	627	IN	Data Raw: e5 05 bb b3 9f 3c 38 38 38 d3 69 98 95 06 07 07 f1 95 af 7c 85 e7 f3 79 da b6 6d 1b 0f 87 c3 c4 39 87 2c cb 50 14 05 2e 97 ab 1e fc 9c 71 92 06 96 1b 06 4b ac 07 57 8e 3e a5 21 37 6d a8 61 37 e0 57 01 f3 24 d7 b9 22 00 36 07 4c 0e e8 26 ec 92 01 c3 e2 27 16 b2 90 0c f0 02 a4 b1 87 60 fa 7b 00 a6 00 b6 79 72 e9 11 04 41 10 04 41 98 85 9c ca f1 5c 2e 07 c3 30 a0 69 1a 2a 95 0a d7 75 9d 87 c3 61 bc e1 0d 6f 80 2c cb c8 64 32 08 06 83 33 9c da d9 4d 8e c7 e3 33 9d 86 59 69 ef de bd 68 6e 6e a6 b9 73 e7 f2 58 2c c6 cb e5 32 33 0c 03 b9 5c 0e 96 65 c1 34 cd fa 82 53 67 1c 03 28 fe 0c 60 64 ab d3 53 1f 85 e4 57 b1 69 f3 38 76 ee 4f c1 eb 3e b9 de 8d 36 e7 d0 5c 12 82 3e 15 6d 51 2f 7a ba 42 50 3d 0a a0 9b 30 f2 06 6c 9b e3 d8 87 5d 9d ca 9a b2 7b 40 c9 ad e0 cd Data Ascii: <888i\|ym9,P.qKW>!7ma7W$"6L&'`{yrAA\.0i*uao,d23M3YihnnsX,23\e4Sg(`dSWi8vO>6\>mQ/zBP=0l]{@
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: ff da e5 50 3d 2e e8 05 1d 60 47 0b 7c aa b3 b9 51 e1 00 28 bf 1f 3c b0 e0 8c 06 3d 00 4e 28 28 e1 9c 83 18 c1 a5 b8 ea 01 9c 61 18 d0 75 fd b0 01 dd 89 6e db 19 b0 78 3c db ae 7e ad 27 18 50 01 e0 b6 0d 4d d3 50 2e 97 61 59 d6 71 b5 3c ba dd 6e d8 b6 0d c3 f8 7b e0 7a a2 f9 58 d3 34 1c 3a e0 d2 59 83 a0 5c 2e d7 6b b3 ce 04 49 92 0e 5a 1c b8 50 28 1c f1 fb 3a e8 b8 4e f0 52 55 55 b5 da a2 3b ed 83 b6 6d c3 a5 aa a8 9c e1 63 14 04 41 10 9e 1f 9c a1 11 b5 67 35 55 2a 15 0e 80 17 0a 05 de d0 d0 80 05 0b 16 20 16 8b c1 ed 76 cf 74 52 67 3d 11 f4 9c a4 48 24 82 ae ae 2e 3e 35 35 45 c5 62 d1 4e a7 d3 92 cb e5 22 d3 34 c1 18 83 65 59 64 db 36 31 c6 ce 5c 22 98 0c 32 0a 60 b9 01 70 c9 8d e7 72 7a 6a 46 04 97 4c 70 c9 0c 7e 8f 02 00 98 4a 97 f0 c1 6f af 46 df 81 Data Ascii: P=.`G\|Q(<=N((aunx<~'PMP.aYq<n{zX4:Y\.kIZP(:NRUU;mcAg5U* vtRg=H$.>55EbN"4eYd61\"2`przjFLp~JoF
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: 7e bf fc e9 97 5f e8 d1 a3 87 30 1a 8d b2 71 e3 c6 62 d9 b2 65 47 cc 5c d6 38 6f de bc fa b6 e1 b0 64 d1 a2 45 74 ea d4 89 97 5e 7a 49 3e ff fc f3 ca b6 6d db a4 94 92 56 ad 5a b1 72 e5 4a ca ca ca e0 a0 df 26 3a 3a 3a 3a 3a 3a 3a 3a 3a 7b c2 76 99 6a 00 a9 45 23 1f 6c ef c7 b3 c3 36 ff 25 f7 dd 71 0b 33 67 ce 64 dc 57 df d0 ac 59 8b 83 32 86 90 02 4d 51 f1 6b 01 6c 11 95 80 08 e1 b0 58 c8 2b 28 10 56 21 84 bb aa 8a b2 aa 2a a9 3a 1c 14 14 14 f0 fe fb ef 33 62 c4 08 79 c6 19 67 30 67 ce 9c 83 62 53 7d 60 9c 34 69 52 7d db 70 d8 12 17 17 87 a6 69 2c 59 b2 04 29 25 e1 70 98 9c 9c 1c 61 34 1a 09 04 02 f5 6d 9e 8e 8e 8e 8e 8e 8e 8e 8e 4e 35 35 52 db 84 88 ad 4c ef 28 55 bd fd ff db c5 0c 0e 16 7e bf 8f 3b 6e be 81 8f 3e 1c 4b 04 b8 e0 8c be 7c f2 c5 b7 74 ec Data Ascii: ~_0qbeG\8odEt^zI>mVZrJ&:::::::::{vjE#l6%q3gdWY2MQklX+(V!*:3byg0gbS}`4iR}pi,Y)%pa4mN55RL(U~;n>K\|t
2024-04-24 02:18:49 UTC	2048	IN	Data Raw: ee 68 c8 53 cf bd c2 b3 cf bd 06 44 bf 0b 66 b3 09 29 25 81 40 80 40 20 88 c9 6c 22 3e 3e 8e c4 c4 04 42 a1 10 0b 16 2c e6 b2 59 73 f8 f3 af e5 3c f7 f4 c3 07 ec fa 49 29 89 f3 78 58 b3 66 3d 4f 3d f7 2a df 7d f3 3d 69 59 19 d8 d2 d3 6a 44 f0 9c 38 48 4a 4c c0 eb f5 31 fa ad 77 59 bd 66 2d 9f 7c f8 16 59 99 19 bb 3c f6 aa 55 6b b9 fe e6 bb 98 35 7b 1e 4e a7 83 86 8d 1b 62 30 18 08 87 c3 f8 7c fe ea 56 0f db af 61 32 5e af 8f 4f c7 8e 67 c1 c2 3f 79 6b e4 cb 9c d2 a7 77 8d e3 25 27 25 62 71 66 90 96 96 02 50 e3 1e 8e 44 22 d8 ed 36 1a 55 47 35 2b 2b ab c8 ca ca c0 60 88 7e 2f 93 93 93 30 3b d2 48 4f 4f 8b 9d f7 76 54 55 c5 6e b3 d1 a8 71 c3 d8 be 69 69 29 bb 4c 4f 7b f1 95 d7 79 e2 a9 17 89 a8 2a c9 49 49 58 ab af 55 ec b3 ab 4e 03 8d 7e 76 61 16 2e 5c cc Data Ascii: hSDf)%@@ l">>B,Ys<I)xXf=O=}=iYjD8HJL1wYf-\|Y<Uk5{Nb0\|Va2^Og?ykw%'%bqfPD"6UG5++`~/0;HOOvTUnqii)LO{yIIXUN~va.\
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: cf ed 43 af 8f 39 42 39 39 79 4c f8 61 32 af 8f 1c 83 d7 eb c5 6e b7 93 91 9e c6 a6 4d 5b b8 eb 9e 47 f8 ee eb b1 b1 63 5e 70 ce 99 34 c8 cc 40 d5 54 be 9d 30 19 9f cf 17 13 7a 28 2f af a0 7d fb 36 9c d9 ef 54 42 a1 10 fe 40 90 38 8f 07 9b 2d 5a f7 73 e1 05 e7 d0 b4 49 23 84 50 f8 7a c2 44 bc 5e 6f 2c 32 5d 55 55 45 eb 56 2d e8 77 fa 29 20 a3 8b 3d 2e b7 93 84 f8 f8 1a e7 f4 fd c4 29 3c f7 c2 30 52 32 d2 63 42 21 05 85 45 64 a4 a7 f1 d2 f3 4f 70 d2 89 bd 48 4d 4d a6 bc bc 82 55 ab d6 f0 ca b0 51 fc fe c7 5c 92 92 12 b0 5a 2d a4 35 c8 e4 d9 17 5e e3 c4 de c7 73 e2 09 c7 d7 f9 b9 28 8a 82 c9 64 62 d4 e8 0f 88 44 54 dc 6e 17 55 55 55 94 57 54 12 aa 2a a3 ca eb db e3 05 19 9d 3d e7 60 08 19 d4 c6 2d 77 dc c5 ff ce 5a 7b 40 04 56 aa aa bc 34 6e da 64 ef 76 12 Data Ascii: C9B99yLa2nM[Gc^p4@T0z(/}6TB@8-ZsI#PzD^o,2]UUEV-w) =.)<0R2cB!EdOpHMMUQ\Z-5^s(dbDTnUUUWT*=`-wZ{@V4ndv
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: 00 ca 2d 31 53 5e 03 30 5a 76 03 99 0c c8 e5 33 d7 f0 d9 47 c8 20 30 d5 00 14 02 09 22 60 18 cc e2 74 32 5f 24 82 58 6b 2b 52 5e 2f 73 5b 2c 48 a4 52 c8 64 32 6c e9 d2 a5 70 bb dd 54 54 54 34 28 c2 db 9c ce 2f 43 fb f6 75 6c fd b5 31 7a 3a d8 bd 7b 37 a6 4d 9b 86 3f fe f1 8f f8 c7 3f fe 01 bf df bf 67 71 d3 03 09 63 0c 6f bc f1 86 f1 d7 bf fe 95 4e 38 e1 04 61 dd ba 75 20 22 e8 ba 0e 9b cd 86 dc dc dc 3d 86 18 87 c3 e1 70 38 1c 0e e7 f0 d3 65 71 d2 83 5d 97 af 18 e4 54 4c 4f 8f a6 02 92 0c f2 17 83 9c e6 5c 1d 16 0f 77 31 64 8c 96 5a 40 05 04 5f c1 9e 6d ac a5 0e 2c c5 40 2e 9f 69 a0 ed ab 2c 82 00 5d d7 59 06 80 c5 66 a3 64 22 01 39 16 83 4b 10 a8 40 d7 69 97 20 b0 a2 a2 22 48 b2 8c 57 5f 7d 95 4e 3c f1 44 76 db 6d b7 ed 4f f3 f7 8b e5 cb 97 63 e9 d2 a5 Data Ascii: -1S^0Zv3G 0"`t2_$Xk+R^/s[,HRd2lpTTT4(/Cul1z:{7M??gqcoN8au "=p8eq]TLO\w1dZ@_m,@.i,]Yfd"9K@i "HW_}N<DvmOc
2024-04-24 02:18:49 UTC	2048	IN	Data Raw: d2 69 da b1 73 27 fb e2 8b 2f a8 a2 a2 02 af bc f2 0a bc 5e 2f fb c5 2f 7e 41 d7 5f 7f 3d 7b e7 9d 77 b0 73 e7 4e 44 a3 51 00 dd c2 db ec 76 3b 3d f0 c0 03 b0 db ed b8 f6 da 6b 49 55 55 9a f7 e1 87 f4 fe ea d5 94 b0 da 28 58 b9 1d 5a a2 0e 92 24 20 cc 00 8b 28 92 37 27 87 62 b1 18 65 32 19 d8 95 34 b3 e4 4d 2d 97 1c 4a 3e d3 81 54 06 28 f1 03 a3 0a 0f 4b 3f 72 38 1c 0e 87 c3 e1 70 38 9c 41 4a 9e 1b 18 9e 0f 24 52 00 18 20 5a 00 cd 35 65 74 a8 35 00 00 70 b9 9c 64 b5 d9 a8 a1 4e 63 76 66 43 5e 1e a1 54 03 8d 98 39 93 86 32 86 ca aa 2a 7a e5 95 57 b0 76 ed 5a 4c 9e 3c 19 67 9f 7d 36 16 2e 5c c8 f2 f3 f3 b1 75 eb 56 3a ed b4 d3 f0 ab 5f fd 0a bf fa d5 af 20 3d fc f0 c3 00 80 f7 de 7b 0f 97 5c 72 09 9e 7d f6 59 b4 b4 b4 e0 b7 bf fd 2d 5b b2 64 09 ca 46 8e a4 Data Ascii: is'/^//~A_={wsNDQv;=kIUU(XZ$ (7'be24M-J>T(K?r8p8AJ$R Z5et5pdNcvfC^T92*zWvZL<g}6.\uV:_ ={\r}Y-[dF
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: 6c de bc 99 bd f5 d6 5b 94 9f 9f 8f ea ea 6a 9c 79 e6 99 08 05 02 ec 78 9f 8f 12 75 75 14 88 c5 60 75 38 10 0c 06 21 08 02 cb c9 c9 81 a6 69 94 48 26 11 d4 75 26 03 82 28 02 19 5d 3f 22 ac 9e b2 3c c0 6e e9 ba 4d 96 80 a6 36 20 91 06 3c d2 61 11 8b c3 e1 70 38 1c 0e 87 c3 f9 6a 42 00 4b 32 46 ba 00 9b cf 49 86 d5 ca f4 4c 06 9a a6 31 9b cd 86 4c 26 03 59 92 e0 1f 32 84 82 b1 18 73 86 42 b0 bf ff 3e 62 53 a7 62 fe b2 65 70 5a ad 98 34 69 12 ec 76 3b 6d dd ba 95 8d 1e 3d 1a cd cd cd b8 fd f6 db 49 1a 3f 7e 3c 6d d8 b0 01 3b 77 ee a4 a3 8e 3a 0a 92 24 b1 d7 5f 7f 5d 78 e9 e5 97 51 50 5c 0c 9f 20 50 5d 53 13 94 9c 1c 62 6d 6d 20 22 10 11 34 4d 23 4d d3 60 18 06 9c 4e 27 e2 81 00 3c 04 58 ac 36 96 62 80 70 b8 3b ed 20 e3 75 02 16 c9 0c 6d eb 40 14 80 70 02 88 Data Ascii: l[jyxuu`u8!iH&u&(]?"<nM6 <ap8jBK2FIL1L&Y2sB>bSbepZ4iv;m=I?~<m;w:$_]xQP\ P]Sbmm "4M#M`N'<X6bp; um@p
2024-04-24 02:18:49 UTC	16384	IN	Data Raw: ef 3e db 0a f2 95 fd c4 12 79 78 7e f5 0c ec ee 02 37 aa 9d 33 72 ef f0 fe 01 7b 8c 13 95 04 79 62 3d 14 ec d4 74 28 06 1c 6f b8 de 4c 7f bf 0d 3f 1b 0b 63 46 f7 ca 54 38 d8 73 31 52 f1 29 94 ad c0 af d4 b0 c2 76 cf 4a 18 33 aa d1 40 22 61 bd 1d b9 02 f8 83 d6 f0 3d 1a a1 b1 7b 92 92 47 31 e5 ef ed b5 19 de 96 6d b4 db 13 ba 7b 81 91 22 83 86 ba 46 bb cf a7 70 1c a6 b1 5c 71 38 53 b1 e7 da 7d 51 77 3c 6b ef 33 16 c9 84 f5 36 f9 01 e4 fb 8e ac 1c ff a1 11 c0 a7 2c 06 48 b9 09 f1 c1 04 41 40 51 6b 92 ae 4b a9 54 12 d1 9a fd 5a 1b af ae ce 94 da db 29 28 c5 b8 d6 56 b9 fb ae bb a8 af ad 35 e7 9f 7f 3e 8b 16 2d 62 c1 82 05 66 f9 f2 e5 f2 c5 2f 7e d1 bc f9 cd 6f b6 4a cf 3f fc c3 3f f0 8d 6f 7c 83 5b 6e b9 85 53 4e 39 45 17 0a 05 55 df d4 44 5b 73 b3 d4 95 4a Data Ascii: >yx~73r{yb=t(oL?cFT8s1R)vJ3@"a={G1m{"Fp\q8S}Qw<k36,HA@QkKTZ)(V5>-bf/~oJ??o\|[nSN9EUD[sJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50190	35.71.131.137	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	1068	OUT	GET /track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&upid=re36kbe&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCLa5-6vzg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB
2024-04-24 02:18:48 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:48 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=c15a68f2-4344-416e-994d-8984d050841b; expires=Thu, 24 Apr 2025 02:18:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCM7_-fbag_I8EAUSFQoGZ29vZ2xlEgsIkI3VkduD8jwQBRIVCgZjYXNhbGUSCwjUwvr22oPyPBAFEhcKCHB1Ym1hdGljEgsIqOH9zduD8jwQBRIYCgliaWRzd2l0Y2gSCwjugf7N24PyPBAFGAUoAzILCOiV6rfzg_I8EAVCDyINCAESCQoFdGllcjMQAVoHODFjM2pnbmAB; expires=Thu, 24 Apr 2025 02:18:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 02:18:48 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50193	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	3254	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=2&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&sid=1713925068&sct=1&seg=1&en=page_view&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A46.241%2B02%3A00&epn.hit_timestamp_unix=1713925126241&ep.tag_name=GA4%20-%20page_view%20(virtual)&ep.event_id=1713925125026-62-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1108&tfd=2416&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925126.0.0.496837087; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b
2024-04-24 02:18:49 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:48 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.1.497330811.1713925074; Max-Age=7775945; Domain=wetransfer.com; Path=/; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 ff86682523b6a05dafb1edbd86b80e50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: ZGJPccSlgepTI6Qb5CJ3R2XrWj9251EYGFlXEUxuqKPvgv9CUMs6ng==
2024-04-24 02:18:49 UTC	697	IN	Data Raw: 32 62 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 35 32 33 31 33 30 36 32 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 Data Ascii: 2b2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=523130626;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.171392506
2024-04-24 02:18:49 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 30 30 3b 6f 72 64 3d 35 32 33 31 33 30 36 32 36 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra000;ord=523130626;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%
2024-04-24 02:18:49 UTC	696	IN	Data Raw: 32 62 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 39 31 37 37 31 32 37 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 Data Ascii: 2b1event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1491771273;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069
2024-04-24 02:18:49 UTC	628	IN	Data Raw: 32 36 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 31 32 33 37 30 37 38 38 3b 74 79 70 65 3d 70 61 67 65 76 30 3b 63 61 74 3d 77 65 74 72 61 30 3b 6f 72 64 3d 31 34 39 31 37 37 31 32 37 33 3b 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 31 3d 25 32 46 70 72 69 63 69 6e 67 3b 75 34 3d 31 35 37 37 36 39 34 32 37 36 2e 31 37 31 33 39 32 35 30 36 39 3b 75 38 3d 65 6e 2d 55 53 3b 75 31 31 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 26devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=12370788;type=pagev0;cat=wetra0;ord=1491771273;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2
2024-04-24 02:18:49 UTC	1360	IN	Data Raw: 35 34 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 36 31 34 34 30 39 39 38 34 2f 3f 72 61 6e 64 6f 6d 3d 35 30 33 38 31 36 31 31 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 38 39 31 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 39 38 56 77 43 49 47 76 79 4d 51 44 45 49 44 4f 5f 4b 51 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 Data Ascii: 549event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/614409984/?random=50381611&fst=1713925128911&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z989015
2024-04-24 02:18:49 UTC	687	IN	Data Raw: 32 61 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 37 37 38 39 33 38 38 38 30 2f 3f 72 61 6e 64 6f 6d 3d 39 36 36 33 37 32 32 39 32 26 66 73 74 3d 31 37 31 33 39 32 35 31 32 38 39 32 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 68 39 31 65 34 34 6d 30 76 38 39 33 35 35 30 34 39 35 7a 38 38 39 30 33 36 34 36 36 30 7a 39 38 39 30 31 35 33 32 34 33 7a 61 32 30 30 26 75 72 Data Ascii: 2a8event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/778938880/?random=966372292&fst=1713925128928&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&ur
2024-04-24 02:18:49 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 55 47 49 73 37 73 6b 31 33 6b 42 58 71 32 74 4d 31 44 38 68 42 30 75 48 78 34 6c 4a 5a 39 72 42 71 41 31 61 7a 31 77 54 51 35 49 71 6f 70 31 57 44 46 78 7a 57 49 42 31 79 42 52 37 7a 53 7a 77 31 74 37 46 62 6b 58 44 69 69 42 70 70 36 66 31 39 55 4f 79 68 31 39 50 44 69 52 45 6f 31 76 4a 53 25 32 42 65 77 73 61 55 41 72 7a 4c 5a 55 59 25 32 42 5a 32 58 31 42 63 6f 38 25 32 42 70 30 64 37 75 57 37 51 57 55 4f 4e 67 63 4a 78 4e 6c 32 33 70 35 25 32 46 66 65 32 42 5a 25 32 46 6b 79 4c 57 38 50 54 72 66 6c 59 33 5a 33 6a 66 69 33 50 61 68 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=UGIs7sk13kBXq2tM1D8hB0uHx4lJZ9rBqA1az1wTQ5Iqop1WDFxzWIB1yBR7zSzw1t7FbkXDiiBpp6f19UOyh19PDiREo1vJS%2BewsaUArzLZUY%2BZ2X1Bco8%2Bp0d7uW7QWUONgcJxNl23p5%2Ffe2BZ%2FkyLW8PTrflY3Z3jfi3Pah
2024-04-24 02:18:49 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50197	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	1317	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:49 UTC	1172	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1573355276;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50195	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	1397	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:49 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1639128250684211770"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1639128250684211770","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"1639128250684211770","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"1639128250684211770","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"1639128250684211770","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50198	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	788	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/mailchimp/2402/static2/1_9hifw9/us/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:49 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8501 Connection: close Date: Wed, 24 Apr 2024 02:18:50 GMT Last-Modified: Mon, 11 Mar 2024 18:53:47 GMT ETag: "88427786dd0ee3f573e163d406446c1a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 62sejolSlkl125qDBNdeMPM7-0zSs-tVbcEx1WmranY-KHJ4n1wqIw==
2024-04-24 02:18:49 UTC	8501	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 35 35 2e 35 32 20 31 34 38 2e 31 34 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 34 31 63 31 35 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 555.52 148.14"> <defs> <style> .cls-1 { fill: #241c15; stroke-width: 0px; } </style> </def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50199	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	420	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/copy2.9454484e8930cd5427e6.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:49 UTC	485	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 13772 Connection: close Date: Wed, 24 Apr 2024 02:18:49 GMT Last-Modified: Mon, 11 Mar 2024 18:53:40 GMT ETag: "8f5fc5c065f508cf95e46de371a93d7f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: WXcIkVIUCbXMWmQ0Zh6cCtW3fpcalNpsiYYyLUTdYM5l1Zsr55M2NQ==
2024-04-24 02:18:49 UTC	13772	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0d 00 00 00 ad 08 06 00 00 00 33 9b 4c 53 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 35 7e 49 44 41 54 78 9c ed bd 3d 6e f4 38 13 ef fb 9f f7 be c9 c5 01 0e d0 03 28 53 44 2f c1 5e 82 1d de d0 5e 82 bd 04 7b 09 76 78 42 f7 12 dc 4b 70 a7 27 73 2f e1 51 d4 59 03 d3 c0 09 4e 3a 37 60 d1 cd a6 8a 5f 12 a5 96 d4 f5 03 8c 79 c6 d6 07 45 16 8b c5 62 b1 f8 17 66 80 aa 2b 05 e0 11 c0 3d 80 5b 00 2b 00 4f cd fe b0 b9 68 c1 04 41 10 84 49 42 e3 c6 33 f4 98 71 4f bf 96 71 a3 27 ff bd 74 01 42 a8 ba 5a 01 78 87 6e 78 97 67 00 d2 f8 82 20 08 c2 2f 64 2c bc 42 c6 8d 41 98 ac d1 40 0d ff 03 ed 55 60 2f 19 b1 38 c2 4c 51 75 75 0b e0 1b 5a 8e 8e 00 1e 9a fd 61 77 d9 52 09 82 30 04 32 6e 0c Data Ascii: PNGIHDR3LSpHYs5~IDATx=n8(SD/^^{vxBKp's/QYN:7`_yEbf+=[+OhAIB3qOq'tBZxnxg /d,BA@U`/8LQuuZawR02n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50194	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126369 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:48 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 35 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"15","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-24 02:18:49 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:49 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:18:49 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:49 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50196	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	833	OUT	POST /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126374 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive Content-Length: 950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-TD-Write-Key: 189/2b790840dbca0ea76ae669d1b94510ed00b16db2 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-TD-Fetch-Api: true sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:48 UTC	950	OUT	Data Raw: 7b 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 3a 22 74 64 5f 67 6c 6f 62 61 6c 5f 69 64 22 2c 22 64 6f 6d 61 69 6e 5f 75 73 65 72 5f 69 64 22 3a 22 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 73 69 64 22 3a 22 31 35 22 2c 22 74 64 5f 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 64 5f 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 61 66 33 34 31 38 64 2d 31 37 37 62 2d 34 66 37 38 2d 39 62 66 66 2d 35 31 35 35 31 31 37 61 62 32 39 62 22 2c 22 74 64 5f 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 2c 22 74 64 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 74 64 5f 63 6f 6c 6f 72 22 3a 22 32 34 2d 62 69 74 22 2c 22 74 64 5f 73 63 72 65 65 6e 22 3a 22 31 32 38 30 78 31 Data Ascii: {"td_global_id":"td_global_id","domain_user_id":"c444300f-6006-4e83-9c38-3f418b9b111c","sid":"15","td_version":"3.0.0","td_client_id":"baf3418d-177b-4f78-9bff-5155117ab29b","td_charset":"utf-8","td_language":"en-us","td_color":"24-bit","td_screen":"1280x1
2024-04-24 02:18:49 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:49 GMT Content-Type: application/json Content-Length: 16 Connection: close Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Authorization, X-Requested-With, X-TD-Write-Key, X-TD-Fetch-Api, Content-Type Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Set-Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170; Path=/; Expires=Fri, 24 Apr 2026 02:18:49 GMT; Domain=in.treasuredata.com; SameSite=none; Secure P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p" Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:49 UTC	16	IN	Data Raw: 7b 22 63 72 65 61 74 65 64 22 3a 74 72 75 65 7d Data Ascii: {"created":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50200	54.230.21.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:48 UTC	435	OUT	GET /aat?pid=9b73dfcd-001f-400a-b379-8258969df4a1&event=Pricing&ts=1713925126247 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:49 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:49 GMT x-amzn-RequestId: b325e7e6-b26b-4de4-80eb-af060a67953f X-Cache: Miss from cloudfront Via: 1.1 194136ce6dbff9fe3c1425c28598561c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C4 X-Amz-Cf-Id: prWAAFrX8PVA8Xi_v79FPUpga5ypdGtCCA-1iw9fvpl6h5uW1yOA5A==
2024-04-24 02:18:49 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50201	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	1315	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:49 UTC	1170	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50202	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	1108	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1672078400;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:49 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"1639128250684211770"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"1639128250684211770","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"1639128250684211770","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"1639128250684211770","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"1639128250684211770","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:49 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50204	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:49 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:49 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50205	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	3511	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A48.104%2B02%3A00&epn.hit_timestamp_unix=1713925128104&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925125026-87-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-87-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1855&tfd=4793&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087
2024-04-24 02:18:50 UTC	810	IN	HTTP/1.1 200 OK Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:50 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 9ce4b19720775ec7f670dd549ad5ffa6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 4RyTwoZWN2ijMYvYB9Q5Q3vWNvOKJ7BXHHX4PNLCRew2EyF_L9_LUA==
2024-04-24 02:18:50 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-04-24 02:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50208	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	909	OUT	GET /rp.gif?ts=1713925126090&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:50 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50210	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:49 UTC	419	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/logo.1d51f421cbe56e028cf7.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 8501 Connection: close Date: Wed, 24 Apr 2024 02:18:50 GMT Last-Modified: Mon, 11 Mar 2024 18:53:47 GMT ETag: "88427786dd0ee3f573e163d406446c1a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: -H3leZSY8y1mW0cIAh_G4Q3ffaEaBh97Lrszbz6mvaJ1MS9KbpSvFw== Age: 1
2024-04-24 02:18:50 UTC	8501	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 35 35 2e 35 32 20 31 34 38 2e 31 34 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 34 31 63 31 35 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 555.52 148.14"> <defs> <style> .cls-1 { fill: #241c15; stroke-width: 0px; } </style> </def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50215	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	422	OUT	GET /creator/mailchimp/2402/static2/1_9hifw9/product.553fcf2aa5ab6d9771ed.png HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 403929 Connection: close Date: Wed, 24 Apr 2024 02:18:50 GMT Last-Modified: Mon, 11 Mar 2024 18:53:53 GMT ETag: "b87143fe59071125a9693041a69391c9" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 28d9734ff3f988ae9afd788fe4df27c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: xuiQU74zE2fGcRU52bYPGK56Qnz7ahu1a7vjwDIPzrEV08hmaFCQ2g== Age: 1
2024-04-24 02:18:50 UTC	15890	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 3d 00 00 03 24 08 06 00 00 00 92 b1 4e 26 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR=$N&pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf
2024-04-24 02:18:50 UTC	100	IN	Data Raw: 7e 64 32 19 cc 9b 37 0f c9 64 12 2d 2d 2d d8 bb 77 2f bd f8 c5 2f a6 97 be f4 a5 a2 9b cc 29 90 6f ba e9 a6 99 4e c3 ac 44 44 bc b3 b3 93 7a 7b 7b d1 d9 d9 49 ad ad ad b0 6d bb 3e df ba f3 fb 73 9b 28 09 90 15 48 23 7f 05 c5 9e 3c 4b 02 1e 07 07 98 1b b0 8b 90 0e dc 05 d3 dd 08 f8 bb 01 43 04 3e 82 Data Ascii: ~d27d---w//)oNDDz{{Im>s(H#<KC>
2024-04-24 02:18:50 UTC	16384	IN	Data Raw: 20 08 82 20 bc 70 99 a6 09 59 96 49 d3 34 4c 4d 4d c1 b6 6d 1e 8f c7 31 31 31 41 c1 60 10 2f 79 c9 4b f8 2b 5e f1 8a 99 4e e6 ac 27 bf ef 7d ef 9b e9 34 cc 56 04 80 2f 5d ba 14 f7 dd 77 1f 54 55 a5 7c 3e 0f 55 55 b9 65 59 28 97 cb d5 37 3d 67 63 7a 38 a0 68 a0 c4 0e b0 e1 3f 55 17 14 3d 6b 02 1e 07 07 64 0f a0 a7 21 ef bb 03 e6 e2 8f 02 2e 1f 60 96 20 66 74 13 04 41 10 04 e1 85 48 92 24 18 86 81 62 b1 08 9f cf 07 59 96 29 9d 4e f3 f6 f6 76 9e 4a a5 90 4e a7 f1 d3 9f fe 14 fb f6 ed 9b e9 a4 ce 6a 62 71 d2 93 64 59 16 7e f8 c3 1f b2 45 8b 16 f1 68 34 8a 89 89 09 6e 18 06 79 3c 1e 52 14 05 8c 31 10 11 7f 6e 5a 7b 78 35 c8 29 a5 20 0d ff 11 00 03 24 b5 3a 83 db 59 87 03 ae 20 50 18 06 1b 7d 10 56 cf db 41 24 8b f1 3d 82 20 08 82 20 bc 20 11 11 14 45 e1 8c 31 Data Ascii: pYI4LMMm111A`/yK+^N'}4V/]wTU\|>UUeY(7=gcz8h?U=kd!.` ftAH$bY)NvJNjbqdY~Eh4ny<R1nZ{x5) $:Y P}VA$= E1
2024-04-24 02:18:50 UTC	394	IN	Data Raw: ea 4e 85 fc ae 77 bd 6b a6 d3 30 2b 2d 5b b6 8c 4f 4c 4c e0 bf fe eb bf a8 a9 a9 09 17 5c 70 01 9a 9a 9a b0 73 e7 4e 98 a6 89 64 32 09 cb b2 b8 18 d7 23 08 82 20 08 82 70 f6 70 26 2e b0 6d 1b 87 ce d1 cc 39 af be 4e 54 1d df c3 f9 ec 1e a3 5d 3b 56 0b 3c 58 29 97 21 cb 32 1b db 9f b6 a9 a5 89 37 77 30 0c 1f 38 00 93 08 20 fa ff d9 3b cf 28 29 aa 26 0c 3f b7 27 e7 cd 99 9c 93 04 41 10 44 45 51 3e b3 a2 18 51 10 b3 98 73 ce 39 01 a2 28 98 15 51 31 a1 02 92 0c a8 e4 a4 20 39 b3 b0 39 ef 4e 9e ee fb fd 98 65 64 65 59 b2 4b e8 e7 1c 0e 30 d3 dd b7 ba 67 ba e7 d6 ad aa b7 30 9b cd e2 a6 9b 6e 92 05 05 05 22 2e 2e ee 88 2b d1 30 76 ea d4 a9 be 6d 38 2c 89 44 22 a8 aa 2a ce 3d f7 5c be f8 e2 0b e2 e2 e2 28 2a 2a c2 60 30 20 a5 24 39 39 19 a1 87 7a 74 74 74 74 74 Data Ascii: Nwk0+-[OLL\psNd2# pp&.m9NT];V<X)!27w08 ;()&?'ADEQ>Qs9(Q1 99NedeYK0g0n"..+0vm8,D"=\(*`0 $99zttttt
2024-04-24 02:18:50 UTC	16384	IN	Data Raw: 03 8c 1a 38 4c 26 2a aa aa 84 db e9 24 3f 2f 47 06 12 12 84 0d 34 b1 75 ab 48 ea dc 99 e6 cd 9b 8b ab af be 5a 5e 70 c1 05 72 c5 8a 15 9c 70 c2 09 f5 6d fa 01 c5 d8 aa 55 ab fa b6 e1 b0 24 12 89 88 27 9f 7c 92 48 24 22 5d 2e 97 c8 cb cb 23 3f 3f 1f bb dd 8e c5 62 c1 60 30 10 0e 87 f5 3e 3d 3a 3a 3a 3a 3a 3a 3a 3a 87 20 b1 86 a4 bb 78 5d 68 47 86 db 23 24 20 14 a4 10 58 8c 46 25 1c 89 a8 4e 87 43 58 2c 16 8a 43 21 a1 29 0a db 7e fb 4d e6 6e d9 22 ae bb ee 3a 39 76 ec 58 61 b1 58 58 b2 64 c9 91 71 01 aa 31 de 7c f3 cd f5 6d c3 61 c9 df 7f ff 2d 9b 36 6d 2a 6c 36 1b 93 27 4f 26 3e 3e 9e 84 84 04 a1 69 1a 85 85 85 a4 a5 a5 89 c3 b9 f0 4d 47 47 47 47 47 47 47 e7 48 e2 df 51 9e 1d 1b 92 ee a8 e4 26 b6 ff 5f 1c 21 73 7e 21 d0 a4 14 c2 eb 25 68 30 20 4c 26 e1 71 Data Ascii: 8L&$?/G4uHZ^prpmU$'\|H$"].#??b`0>=:::::::: x]hG#$ XF%NCX,C!)~Mn":9vXaXXdq1\|ma-6ml6'O&>>iMGGGGGGGHQ&_!s~!%h0 L&q
2024-04-24 02:18:50 UTC	2804	IN	Data Raw: fd a7 5f 19 f9 e6 bb 4c 9b f1 0b 41 9f 1f 57 9c 07 b3 c9 54 1d 45 d2 58 b3 66 3d 13 27 4e c5 f8 a6 91 ee dd bb 72 cb 4d d7 70 e9 c5 17 ec f2 3a 4d 9d f6 13 cf 3e fd 08 18 13 a3 b3 6e 35 02 5a 39 c7 f7 e8 4a cb 96 cd f9 e0 a3 71 3c f7 e2 30 d6 ad 59 0f aa 4a 5a c3 06 04 f5 86 b2 07 8c ed 11 9e ff ea 29 a6 54 87 e8 c2 e1 f0 7e 1d 67 5f 9f bb 12 89 51 18 b1 9b 9c 22 e0 f7 63 b0 5a 71 38 9d d8 9d 4e 99 57 58 48 24 23 43 b6 cc c8 90 ca c2 85 a2 4d 9b 36 7c f9 e5 97 32 18 0c f2 e1 87 1f 52 50 50 b0 5f 36 1f 4a 18 47 8d 1a 55 df 36 1c b6 cc 9a 35 8b be 7d fb 0a b7 db 4d 69 69 29 d9 d9 d9 a4 a7 a7 93 9d 9d 4d 7c 7c bc de 88 51 67 bf 18 f1 c6 18 1e 7c e4 69 22 e1 08 09 89 f1 24 26 c4 d7 fa c0 8b 8b f3 20 a5 a4 aa ca cb 3b ef 7d cc ef 7f cc e1 ad 37 5e e1 e4 93 7a Data Ascii: _LAWTEXf='NrMp:M>n5Z9Jq<0YJZ)T~g_Q"cZq8NWXH$#CM6\|2RPP_6JGU65}Mii)M\|\|Qg\|i"$& ;}7^z
2024-04-24 02:18:50 UTC	13580	IN	Data Raw: 3c f7 c2 30 52 32 d2 63 42 21 05 85 45 64 a4 a7 f1 d2 f3 4f 70 d2 89 bd 48 4d 4d a6 bc bc 82 55 ab d6 f0 ca b0 51 fc fe c7 5c 92 92 12 b0 5a 2d a4 35 c8 e4 d9 17 5e e3 c4 de c7 73 e2 09 c7 d7 f9 b9 28 8a 82 c9 64 62 d4 e8 0f 88 44 54 dc 6e 17 55 55 55 94 57 54 12 aa 2a a3 ca eb db e3 05 19 9d 3d e7 60 08 19 d4 c6 2d 77 dc c5 ff ce 5a 7b 40 04 56 aa aa bc 34 6e da 64 ef 76 12 60 14 06 19 ac 0a ca 4a bb 11 c5 ec 14 7e bf 5f 33 1b 0c 52 ba dd ac 28 2e a6 a1 a6 89 84 94 14 d9 ad 5b 37 d9 a0 41 03 39 62 c4 08 fa f4 e9 23 92 93 93 8f 98 c9 ec 3e 2d d1 9a 4c 26 cc 66 33 36 9b ed a8 55 28 cb ca ca 12 57 5f 7d b5 00 e4 23 8f 3c c2 f2 e5 cb 85 d1 68 a4 a4 a4 44 00 94 94 94 e8 7d 7a 74 f6 9a b2 f2 72 1e 7e ec 59 6c 4e 27 0e 87 03 4d d3 50 55 8d a2 a2 62 6e bb f5 06 Data Ascii: <0R2cB!EdOpHMMUQ\Z-5^s(dbDTnUUUWT*=`-wZ{@V4ndv`J~_3R(.[7A9b#>-L&f36U(W_}#<hD}ztr~YlN'MPUbn
2024-04-24 02:18:50 UTC	16384	IN	Data Raw: 93 65 99 44 51 a4 44 22 c1 3a d6 f2 39 12 dc a5 1c ce 60 41 51 14 9c 73 f6 e9 58 be 64 19 bc 5e 2f 00 06 9f 37 07 55 d5 bb 70 e7 dd f7 e3 cf 7f fc 4d 97 39 0b 1d b4 b5 85 f1 fd 1f de 8e cd 5b b6 a3 a0 30 cf 5c c4 4d 10 d0 12 08 e0 e2 0b cf e3 06 cf 3e 32 ef b3 85 58 bc 64 19 72 72 72 60 30 03 19 35 83 5f de f5 53 6e f0 70 38 9c c3 ce 91 12 d2 d6 01 81 a0 93 ce d2 46 1a 0e f2 52 2c 91 60 86 a6 c1 ae 69 94 92 65 a3 b5 b9 99 39 4b 4a 90 4b c4 2a b7 6d c3 ca 95 2b 71 fb ed b7 c3 66 b3 e1 9c 73 7a 5f 64 f8 ab c4 a0 33 7a 3a c8 36 38 19 4c 4c 99 32 85 59 2c 16 54 55 55 41 10 04 aa aa aa a2 d2 d2 52 d6 d6 d6 06 ab d5 ba 27 86 9d c3 e1 1c 3a ae bd e6 72 3c f6 8f ff 20 16 8f 23 c7 e3 06 c0 90 eb f7 e1 df 4f 3e 8b 9a 5d b5 b8 60 f6 39 7b d6 18 d1 0d 03 2b 56 ae c6 Data Ascii: eDQD":9`AQsXd^/7UpM9[0\M>2Xdrrr`05_Snp8FR,`ie9KJK*m+qfsz_d3z:68LL2Y,TUUAR':r< #O>]`9{+V
2024-04-24 02:18:50 UTC	9200	IN	Data Raw: ef 53 c6 5e c3 db 3a d6 d9 a9 ac ac a4 7f fd eb 5f f0 78 3c f4 da 6b af b1 1f fc e0 07 70 bb dd 34 7f fe 7c 2c 5d ba 94 2e bc f0 42 16 0c 06 a9 a1 a1 81 79 3c 1e aa ad a9 c1 d8 b1 63 b1 b6 a5 85 92 5b b7 c2 eb 70 51 5d 3a ca 86 85 6a b4 f0 c4 9f 3b f4 09 3f 7b 3c ed f4 5f 47 c9 2f 3d 23 a9 0c 10 4f 03 b1 14 50 e2 03 86 e6 01 b9 4e c0 61 3d 30 17 83 c3 e1 70 38 1c 0e 87 c3 e1 1c 78 12 69 20 92 04 aa 9a 81 da 20 20 0b 80 cb 06 d8 2c 5f 7a a0 98 05 60 46 7a 9e 65 e7 f3 3f 90 17 7e 6f bb ab 78 28 09 a2 5b 8c 31 03 32 40 aa a6 31 3b 11 36 d5 d6 b2 73 ce 3b 0f 8a 2c 63 eb d6 ad 4c d7 75 3a ed b4 d3 98 dd 6e c7 f9 e7 9f cf 12 89 04 ea eb eb 31 6b d6 2c 64 32 19 4c 9a 34 89 dd 71 c7 1d f8 f9 cf 7f de ab 8c bd 1a 3d 3f fc e1 0f 71 ed b5 d7 a2 ad ad 8d fe f7 bf ff Data Ascii: S^:_x<kp4\|,].By<c[pQ]:j;?{<_G/=#OPNa=0p8xi ,_z`Fze?~ox([12@1;6s;,cLu:n1k,d2L4q=?q
2024-04-24 02:18:50 UTC	7184	IN	Data Raw: 2d 2c b5 71 23 c4 11 23 48 56 14 e4 e5 e5 91 aa aa 88 44 22 4c 51 14 92 18 a3 44 3c 8e 4c 06 10 c4 43 69 f2 98 46 ca fd ff 06 c6 8e 03 86 e7 03 23 0b cd 37 16 53 ca 80 61 f9 a6 17 a6 bf 94 e5 03 77 5f 02 dc 78 3a f0 f4 7c e0 95 cf cd 37 24 b2 98 dd 38 e9 be 1e 11 11 d0 d8 06 8c 2f 05 ce 9b d2 75 5f 4d 20 bb d1 33 64 1f 23 bf 16 6c 06 9e 5d 08 7c bc 0e d8 d5 08 0c 2b 02 be 77 16 50 ec dd b7 f2 ba c3 00 64 54 15 23 47 8d c2 77 6f be a5 4b 2a 72 22 82 ae 6b f8 e0 fd 77 b1 bb a6 06 79 05 05 98 7d e1 c5 b0 5a 6d 5d e6 01 75 84 b7 71 00 9f 3f 17 d7 7c f3 5b d8 be 6d 2b 46 8e 1c 0d 1f 37 7a 38 9c 03 ca da 35 5f 60 ed ea 2f 60 b7 d9 70 f6 ac 0b 90 93 93 73 b8 45 e2 0c 72 3e fd f8 43 54 ed dc 81 e2 92 12 9c 7d ce 2c 88 92 d4 f7 49 5f 11 6a 5b 81 6f fd 0d f8 74 23 Data Ascii: -,q##HVD"LQD<LCiF#7Saw_x:\|7$8/u_M 3d#l]\|+wPdT#GwoK*r"kwy}Zm]uq?\|[m+F7z85_`/`psEr>CT},I_j[ot#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50218	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	957	OUT	GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:50 UTC	900	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50206	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126369 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:50 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:50 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:50 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50214	52.30.32.26	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	708	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Unique-Id: 901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:18:51 UTC	380	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:50 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1499 RateLimit-Reset: 7 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50209	3.126.72.131	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	493	OUT	GET /js/v3/event/wetransfer_website_tracking_sdk/pageviews_website_sdk?modified=1713925126374 HTTP/1.1 Host: eu01.in.treasuredata.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _td_global=232369e7-a87d-4943-91bb-fe5b7c365170
2024-04-24 02:18:50 UTC	182	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:50 GMT Content-Type: application/json Content-Length: 108 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-24 02:18:50 UTC	108	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6d 69 73 73 69 6e 67 20 70 61 72 61 6d 65 74 65 72 3a 20 6a 73 6f 6e 3d 6e 69 6c 2c 20 77 72 69 74 65 5f 61 70 69 6b 65 79 3d 6e 69 6c 2c 20 64 65 76 69 63 65 3d 5c 22 6a 73 5c 22 2c 20 76 65 72 73 69 6f 6e 3d 5c 22 76 33 5c 22 2c 20 63 61 74 65 67 6f 72 79 3d 5c 22 65 76 65 6e 74 5c 22 22 7d Data Ascii: {"error":"missing parameter: json=nil, write_apikey=nil, device=\"js\", version=\"v3\", category=\"event\""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50220	13.226.228.42	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	688	OUT	GET /pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094 HTTP/1.1 Host: track.activemetering.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	381	IN	HTTP/1.1 200 Ok Content-Type: image/gif Content-Length: 43 Connection: close Server: CloudFront Date: Wed, 24 Apr 2024 02:18:50 GMT Cache-Control: no-store X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 64e24cad8b52037c4c824ec57b5995be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: 930xLFOliZFZ3bWaHlgblg1jjjQaEsO5PzypgGeJGN7llKVLVB6gUA==
2024-04-24 02:18:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50223	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	675	OUT	GET /rp.gif?ts=1713925126090&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:50 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50217	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	3002	OUT	GET /i.gif?e=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&s=q_dCoJ5MyZRGnCTB4mG72RDMf5s HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925120.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.15; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087
2024-04-24 02:18:51 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50219	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	2279	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 2714 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16
2024-04-24 02:18:50 UTC	2714	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 64 66 34 64 64 64 36 36 2d 33 36 32 37 2d 34 30 66 38 2d 39 30 62 61 2d 34 32 66 62 35 62 32 36 33 36 64 66 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"df4ddd66-3627-40f8-90ba-42fb5b2636df","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:18:51 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:50 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:50 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:51 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50224	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	1355	OUT	GET /pagead/1p-user-list/778938880/?random=1543118924&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqQXw5hrzmH2wFSsPQcU21uoM96ZyIAI2alxO2p5R31dNllmuB&random=2833824626 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:50 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50225	151.101.65.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	909	OUT	GET /rp.gif?ts=1713925126241&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:50 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50226	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	3256	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=3&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A48.104%2B02%3A00&epn.hit_timestamp_unix=1713925128104&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=3&ep.event_id=1713925125026-87-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-87-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1855&tfd=4793&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16
2024-04-24 02:18:51 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:51 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 4da73d467823f30ef1dd22d0d9b779dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: RLMv5F_EoLcQruWFoQPg9vTLVsPLtBappMZqbXKKLhKxBX7pm5fpnw==
2024-04-24 02:18:51 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50222	34.196.145.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	571	OUT	GET /rjss/st/1566598/79010620/skeleton.js HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	352	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:50 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 60910 Connection: close pragma: no-cache cache-control: no-cache expires: Wed, 31 Dec 1969 23:59:59 GMT access-control-allow-origin: pixel.adsafeprotected.com access-control-allow-credentials: true vary: accept-encoding
2024-04-24 02:18:51 UTC	16032	IN	Data Raw: 0a 0a 0a 0a 0a 76 61 72 20 5f 5f 49 6e 74 65 67 72 61 6c 41 53 44 69 61 67 6e 6f 73 74 69 63 43 61 6c 6c 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 61 6c 72 65 61 64 79 53 65 6e 74 20 3d 20 7b 7d 3b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 74 72 79 20 7b 0a 09 09 09 09 76 61 72 20 67 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 2c 20 65 72 72 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 20 3d 20 27 2f 2f 64 69 61 67 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 6a 73 3f 27 3b 0a 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 72 72 4d 73 67 20 3d 20 65 Data Ascii: var __IntegralASDiagnosticCall = (function() {try {var alreadySent = {};return function(code, err, config) {try {var gen = function(code, err, config) {var url = '//diag.adsafeprotected.com/js?';try {var errMsg = e
2024-04-24 02:18:51 UTC	16384	IN	Data Raw: 4e 4d 45 41 53 55 52 41 42 4c 45 3a 22 75 6e 6d 65 61 73 75 72 61 62 6c 65 22 2c 20 4e 4f 5f 57 49 4e 44 4f 57 5f 46 4f 43 55 53 3a 22 6e 6f 57 69 6e 64 6f 77 46 6f 63 75 73 22 2c 20 4e 4f 5f 4f 55 54 50 55 54 5f 44 45 56 49 43 45 3a 22 6e 6f 4f 75 74 70 75 74 44 65 76 69 63 65 22 2c 7d 2c 20 53 75 70 70 6f 72 74 65 64 46 65 61 74 75 72 65 73 3a 7b 43 4f 4e 54 41 49 4e 45 52 3a 22 63 6c 69 64 22 2c 20 56 49 44 45 4f 3a 22 76 6c 69 64 22 2c 7d 2c 20 56 69 64 65 6f 50 6f 73 69 74 69 6f 6e 3a 7b 50 52 45 52 4f 4c 4c 3a 22 70 72 65 72 6f 6c 6c 22 2c 20 4d 49 44 52 4f 4c 4c 3a 22 6d 69 64 72 6f 6c 6c 22 2c 20 50 4f 53 54 52 4f 4c 4c 3a 22 70 6f 73 74 72 6f 6c 6c 22 2c 20 53 54 41 4e 44 41 4c 4f 4e 45 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 7d 2c 20 56 69 64 Data Ascii: NMEASURABLE:"unmeasurable", NO_WINDOW_FOCUS:"noWindowFocus", NO_OUTPUT_DEVICE:"noOutputDevice",}, SupportedFeatures:{CONTAINER:"clid", VIDEO:"vlid",}, VideoPosition:{PREROLL:"preroll", MIDROLL:"midroll", POSTROLL:"postroll", STANDALONE:"standalone",}, Vid
2024-04-24 02:18:51 UTC	19	IN	Data Raw: 20 67 6c 6f 62 61 6c 20 26 26 20 67 6c 6f 62 61 6c 29 20 Data Ascii: global && global)
2024-04-24 02:18:51 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 0a 20 20 7d 0a 20 20 69 66 20 28 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 3d 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 0a 20 20 7d 0a 20 20 69 66 20 28 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 3d 20 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 26 26 20 67 6c 6f 62 61 6c 54 68 69 73 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 0a 20 20 7d 0a 20 20 76 61 72 20 61 20 3d 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 0a 20 20 69 66 20 28 61 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 61 3b 0a 20 20 7d 0a 20 20 74 68 72 6f 77 20 Data Ascii: { return global; } if ("undefined" !== typeof window && window) { return window; } if ("undefined" !== typeof globalThis && globalThis) { return globalThis; } var a = Function("return this")(); if (a) { return a; } throw
2024-04-24 02:18:51 UTC	12091	IN	Data Raw: 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 3b 0a 7d 3b 0a 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 24 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6c 69 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 49 6e 74 65 72 76 61 6c 4d 65 74 68 6f 64 73 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 24 65 78 70 6f 72 74 73 24 6f 6d 69 64 24 63 6f 6d 6d 6f 6e 24 4f 6d 69 64 47 6c 6f 62 61 6c 50 72 6f 76 69 64 65 72 2e 6f 6d 69 64 47 6c 6f 62 61 6c 2e 73 65 74 49 6e 74 65 72 76 61 6c 20 26 26 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 24 65 78 Data Ascii: .clearTimeout;};module$exports$omid$verificationClient$VerificationClient.prototype.hasIntervalMethods_ = function() { return "function" === typeof module$exports$omid$common$OmidGlobalProvider.omidGlobal.setInterval && "function" === typeof module$ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50228	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:50 UTC	2436	OUT	GET /_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304iZYkRNrQBltj2VMI55RfnAImp4auLtWs%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925128.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16
2024-04-24 02:18:51 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:51 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 5b04a01f48583fc1372237be2a8b3964.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: ZHt5uO-fHlUBr1nFjuEW4MnYgDfVg7Hq_YebkinRlCQj5Ns2wCfUAQ==
2024-04-24 02:18:51 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50231	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	991	OUT	GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:51 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg; expires=Mon, 21-Oct-2024 02:18:51 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50235	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	938	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925130238&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:51 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1072091704266123 Date: Wed, 24 Apr 2024 02:18:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:51 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50236	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130239&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:51 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3693104262696648 Date: Wed, 24 Apr 2024 02:18:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:51 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50238	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	857	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130240&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:51 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1406215329033790 Date: Wed, 24 Apr 2024 02:18:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:51 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50237	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	1618	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925130241 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:51 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:51 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1340298473914054 Date: Wed, 24 Apr 2024 02:18:51 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50234	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	1121	OUT	GET /pagead/1p-user-list/778938880/?random=1543118924&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqQXw5hrzmH2wFSsPQcU21uoM96ZyIAI2alxO2p5R31dNllmuB&random=2833824626 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50233	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	1417	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:51 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17491466366452046632"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"17491466366452046632","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"17491466366452046632","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"17491466366452046632","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"17491466366452046632","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50239	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	675	OUT	GET /rp.gif?ts=1713925126241&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=bf4fb756-1cf9-4f83-86bc-3183bcff62b3&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:51 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-24 02:18:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50241	13.226.228.11	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	454	OUT	GET /pixel/v1/all/pixel.gif?cid=3d4b1472-14c9-445f-aeaf-c8655b9e0c43&creativeId=211953244&placementId=390749094 HTTP/1.1 Host: track.activemetering.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	381	IN	HTTP/1.1 200 Ok Content-Type: image/gif Content-Length: 43 Connection: close Server: CloudFront Date: Wed, 24 Apr 2024 02:18:51 GMT Cache-Control: no-store X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 fab4d1785391ca36e07af7bad114dd9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C3 X-Amz-Cf-Id: boczpa51foeoFfj44uFhiJF7DJuLW5NtO3-KXl3XKbroLRIo3ntKag==
2024-04-24 02:18:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50242	18.65.25.70	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	800	OUT	GET /attn.js?aid=62b5db706796a0962e5471f5&mid=64833f994d803c63942a4674&mt=displayBanner&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&ct=US&a=199071&customModel=wetransfer&lp_format=premium&cp_creativeType=Base__Image__Static HTTP/1.1 Host: cdn.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51078 Connection: close Last-Modified: Thu, 18 Apr 2024 10:51:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:17:17 GMT Cache-Control: max-age=900 ETag: "cfc33ecafe0a3d20ed59ba16c0be3987" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 30e44f6bcab5a55553866f1b4c293f0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: TPKwxIIa1KBxp2J48HFCY3CMic7pv9D34ocevjfLDJTAIaNuLTVz9A== Age: 95 Vary: Origin
2024-04-24 02:18:51 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 7d 2c 65 28 74 2c 69 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: (()=>{"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};function t(t,i){if("function"
2024-04-24 02:18:51 UTC	16384	IN	Data Raw: 2e 5f 65 72 72 6f 72 2c 61 2e 5f 63 6f 6d 70 6c 65 74 65 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 65 72 72 6f 72 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 3a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 6c 65 74 65 2c 61 7d 72 65 74 75 72 6e 20 74 28 69 2c 65 29 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 69 66 28 21 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 7c 7c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 73 65 64 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e Data Ascii: ._error,a._complete=r?function(){try{r()}catch(e){t.error(e)}finally{this.unsubscribe()}}:e.prototype._complete,a}return t(i,e),i.prototype.unsubscribe=function(){var t;if(!this.shouldUnsubscribe\|\|this.shouldUnsubscribe()){var i=this.closed;e.prototype.un
2024-04-24 02:18:51 UTC	15202	IN	Data Raw: 7b 63 6f 6e 73 74 20 65 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 66 72 61 6d 65 28 29 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 6f 70 2e 70 61 67 65 59 4f 66 66 73 65 74 3f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 3f 28 65 2e 79 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 2c 65 2e 78 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 Data Ascii: {const e={x:0,y:0};return this.isIframe()\|\|"number"!=typeof top.pageYOffset?document.body&&(document.body.scrollLeft\|\|document.body.scrollTop)?(e.y=document.body.scrollTop,e.x=document.body.scrollLeft):document.documentElement&&(document.documentElement.s
2024-04-24 02:18:51 UTC	3108	IN	Data Raw: 53 6c 6f 74 29 3f 28 28 65 2c 74 29 3d 3e 7b 74 72 79 7b 6c 65 74 20 69 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 72 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 69 2e 77 69 64 74 68 2a 69 2e 68 65 69 67 68 74 3e 3d 72 2e 77 69 64 74 68 2a 72 2e 68 65 69 67 68 74 3f 65 3a 74 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 7d 7d 29 28 74 68 69 73 2e 76 69 64 65 6f 53 6c 6f 74 2c 74 68 69 73 2e 73 6c 6f 74 29 3a 74 68 69 73 2e 73 6c 6f 74 3b 74 68 69 73 2e 76 69 65 77 61 62 69 6c 69 74 79 54 72 61 63 6b 65 72 3d 6e 65 77 20 4e 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 Data Ascii: Slot)?((e,t)=>{try{let i=e.getBoundingClientRect(),r=t.getBoundingClientRect();return i.widthi.height>=r.widthr.height?e:t}catch(e){return t}})(this.videoSlot,this.slot):this.slot;this.viewabilityTracker=new Ne(Object.assign(Object.assign({},this.config

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50246	151.101.194.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	941	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Authorization: Api-Key client-eOWm0wyG7UQC8u3SXqkg11Qnh4vUpARA X-Amp-Exp-User: eyJsaWJyYXJ5IjoiZXhwZXJpbWVudC1qcy1jbGllbnQvMS45LjUiLCJsYW5ndWFnZSI6ImVuLVVTIiwicGxhdGZvcm0iOiJXZWIiLCJvcyI6IkNocm9tZSAxMTciLCJkZXZpY2VfbW9kZWwiOiJXaW5kb3dzIiwiZGV2aWNlX2lkIjoiLTBVWmJCaVdndklveE1ZZHR0dnNrTSIsInVzZXJfcHJvcGVydGllcyI6eyJJcyBJbnRlcm5hbCI6ZmFsc2UsIldUIExhbmd1YWdlIjoiRW5nbGlzaCJ9fQ Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	587	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5880 Content-Type: application/json;charset=utf-8 Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true X-Amzn-Trace-Id: Root=1-66286bd5-7ba0aa166a42610a55127543 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:51 GMT Age: 55 X-Served-By: cache-lax-kwhp1940106-LAX X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713925132.765757,VS0,VE1 Vary: Origin, Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:18:51 UTC	1378	IN	Data Raw: 7b 22 32 30 32 34 2d 70 2d 70 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 61 63 63 6f 75 6e 74 2d 73 74 61 74 65 2d 66 69 65 6c 64 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 61 63 74 69 76 65 2d 70 6c 61 63 65 6d 65 6e 74 2d 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6d 61 78 50 6f 73 69 74 69 6f 6e 22 3a 34 7d 2c 22 76 61 6c 75 65 22 3a 22 70 6f 73 69 74 69 6f 6e 2d 34 22 7d 2c 22 61 64 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 72 65 6c 65 61 73 65 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: {"2024-p-p":{"key":"off","metadata":{"default":true}},"account-state-field":{"key":"on","value":"on"},"active-placement-optimization":{"key":"position-4","payload":{"maxPosition":4},"value":"position-4"},"ad-block-library-release":{"key":"off","metadata":
2024-04-24 02:18:51 UTC	1378	IN	Data Raw: 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 7d 7d 2c 22 64 61 74 61 2d 6f 70 74 2d 69 6e 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 64 69 73 63 6f 76 65 72 79 2d 70 6f 72 74 61 6c 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 65 6e 61 62 6c 65 2d 63 61 64 2d 61 75 64 2d 63 75 72 72 65 6e 63 69 65 73 22 3a 7b 22 6b 65 79 22 3a 22 63 6f 6e 74 72 6f 6c 22 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 74 72 6f 6c 22 7d 2c 22 65 6e 61 62 6c 65 2d 67 62 70 2d 61 73 2d 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 65 66 61 75 6c 74 Data Ascii: "key":"off","metadata":{"default":true}},"data-opt-in":{"key":"on","value":"on"},"discovery-portals":{"key":"on","value":"on"},"enable-cad-aud-currencies":{"key":"control","value":"control"},"enable-gbp-as-local-currency":{"key":"off","metadata":{"default
2024-04-24 02:18:51 UTC	1378	IN	Data Raw: 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6d 77 65 62 2d 61 70 70 2d 69 6e 73 74 61 6c 6c 2d 62 61 6e 6e 65 72 2d 32 22 3a 7b 22 6b 65 79 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 72 65 63 65 69 76 65 72 2d 69 6e 66 6f 2d 76 69 65 77 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 2d 66 65 61 74 75 72 65 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 70 61 69 64 2d 74 72 61 6e 73 66 65 72 2d 75 70 73 65 6c 6c 22 3a 7b 22 6b 65 79 22 3a 22 6f 66 66 22 2c 22 6d 65 74 61 64 61 74 61 22 3a Data Ascii: xp-1"},"value":"receiver-info-view"},"mweb-app-install-banner-2":{"key":"receiver-info-view","metadata":{"experimentKey":"exp-1"},"value":"receiver-info-view"},"navigation-features":{"key":"on","value":"on"},"paid-transfer-upsell":{"key":"off","metadata":
2024-04-24 02:18:51 UTC	1378	IN	Data Raw: 6b 65 79 22 3a 22 6f 6e 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 32 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 7b 22 6b 65 79 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 2d 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 22 7d 2c 22 74 72 61 6e 73 66 65 72 2d 64 65 74 61 69 6c 73 2d 73 75 72 66 61 63 65 2d 61 63 74 69 6f 6e 73 22 3a 7b 22 6b 65 79 22 3a 22 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 6f 6e 22 7d 2c 22 74 72 61 Data Ascii: key":"on","metadata":{"experimentKey":"exp-2"},"value":"on"},"transfer-details-conversion":{"key":"new-transfer-details","metadata":{"experimentKey":"exp-1"},"value":"new-transfer-details"},"transfer-details-surface-actions":{"key":"on","value":"on"},"tra
2024-04-24 02:18:51 UTC	368	IN	Data Raw: 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 33 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 73 65 74 74 69 6e 67 73 2d 69 74 65 72 61 74 69 6f 6e 2d 34 22 3a 7b 22 6b 65 79 22 3a 22 65 6e 61 62 6c 65 64 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 65 78 70 2d 31 22 7d 2c 22 76 61 6c 75 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 22 77 6f 72 6b 73 70 61 63 65 2d 74 72 61 63 6b 69 6e Data Ascii: bled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-settings-iteration-3":{"key":"enabled","value":"enabled"},"workspace-settings-iteration-4":{"key":"enabled","metadata":{"experimentKey":"exp-1"},"value":"enabled"},"workspace-trackin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50248	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	2568	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
2024-04-24 02:18:51 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 32 34 34 30 2e 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"FCP","type":"view","time":2440.5,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-24 02:18:51 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 44 Connection: close Date: Wed, 24 Apr 2024 02:18:51 GMT ETag: "2c-D2LRiRDm/Bo1a2osVuK5uhgWNoY" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dcza29RGEc9ZVmqYizrnOBjrTuTUAhmMdnxxYR9znBiDdp2GgAYr2g==
2024-04-24 02:18:51 UTC	44	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 46 43 50 22 2c 22 74 69 6d 65 22 3a 32 34 34 30 2e 35 7d Data Ascii: {"status":"ok","metric":"FCP","time":2440.5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50249	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	2568	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
2024-04-24 02:18:51 UTC	132	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 31 32 30 2e 34 30 30 30 30 30 30 30 30 30 32 33 33 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"TTFB","type":"view","time":1120.4000000000233,"tags":{"rating":"needs-improvement","page_group":"/pricing","country":"US"}}
2024-04-24 02:18:51 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:18:51 GMT ETag: "39-vdg94hV83XHRuAzTneJ3o8ckIzo" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xSrmd_kTrlJ6fkZ_wKkHHC5cx8ISmsN1C7QZMKlffIpi390hND8kVg==
2024-04-24 02:18:51 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 54 54 46 42 22 2c 22 74 69 6d 65 22 3a 31 31 32 30 2e 34 30 30 30 30 30 30 30 30 30 32 33 33 7d Data Ascii: {"status":"ok","metric":"TTFB","time":1120.4000000000233}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50247	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	2335	OUT	GET /pagead/1p-conversion/614409984/?random=799777550&fst=1713925126592&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A45.077%2B02%3A00%3Bhit_timestamp_unix%3D1713925125077%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925125026-1-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CLzV8MmQx7yY5AEiEwiFpcDU5NmFAxVbQggEHXC3D_kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq4g2rWOiGb3tMbKEOpxS-C_k_J-MQ_NwEZXsLh6f6vVyAbMbg&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTJAnEYuWx3AMoS5a1974Owg2GdX8ySwYvA&random=486909452 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50243	34.248.204.163	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	425	OUT	GET /v1/login-status HTTP/1.1 Host: auth-session-caching.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"17-6KfFE322UJ8oECONJYza9lB9eAM"
2024-04-24 02:18:52 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 02:18:52 GMT ETag: W/"17-6KfFE322UJ8oECONJYza9lB9eAM" RateLimit-Limit: 1500 RateLimit-Policy: 1500;w=60 RateLimit-Remaining: 1498 RateLimit-Reset: 22 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50251	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	2203	OUT	GET /_set_cookie?val=SWTRQ6SW%2FQ0CdUTxjsr%2FqihD99aRQSkxQwdbu3W8QruV2pTRranEtaG93zK1gS4uIdWYzuMtlu5dK%2BlG3ulpjhD1Sy9M99Tyq%2Fpf5IcqzuQMbfIc%2FO409j6Voji3UjQdXVaLBUfwX%2Bmv60uPAVkZ4uis%2F%2FliQDF0304iZYkRNrQBltj2VMI55RfnAImp4auLtWs%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
2024-04-24 02:18:52 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:52 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 53fbe86f3600125d1772599fc7fb16c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: kf_YeJS-BGRApfE3FxK3MNZ4Mj7FtUSkR85u3VTRshORu6KKA76HCQ==
2024-04-24 02:18:52 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50245	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:51 UTC	1172	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 64 64 38 35 61 35 33 65 33 37 37 37 64 32 34 30 31 36 37 66 30 65 61 66 36 35 66 34 31 31 61 31 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 33 30 34 34 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 32 Data Ascii: checksum=dd85a53e3777d240167f0eaf65f411a1&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925130441%2C%22event_id%22%3A3%2C%22session_id%22%3A1713925074977%2C%22
2024-04-24 02:18:52 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c0b-60c9c48119bf1650548f5b8b Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:52 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50252	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	757	OUT	GET /ddm/trackimp/N1224323.288861WETRANSFER.COM/B30182212.390749094;dc_pre=CPa-0dTk2YUDFW7buAgdtB0NJA;dc_trk_aid=582080716;dc_trk_cid=211953244;ord=1713925123930;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:52 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6GaPHeM-Jxbdan4IIlCUuW4aDWBpyLU1dyL7qsFKScTQeEJQ; expires=Mon, 21-Oct-2024 02:18:52 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50250	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:51 UTC	2769	OUT	GET /i.gif?e=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&s=q_dCoJ5MyZRGnCTB4mG72RDMf5s HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc269.k.3.n
2024-04-24 02:18:52 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:18:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50253	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130983&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZYS1NFcXI0eDNYd0o4SzVyWmg2SEhTaUlENTcrKytOb2ZYV3JFSGo1YUlYUkxzaVpnaE14ckVlQUpBMzRjSXpMN041T0lQZmU2eXhDeTV0Zm5qa0FtUjhzUm4rMzVyZzRqM1VSWm1VQ2ZOdz0mSE85ZjhSSm9PWlJ2ZkJudTJCanFaM1dWV0o0PQ=="; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1207153932533737 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50254	151.101.192.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1650	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130985&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://wetransfer.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZETHQ0cmg1NyttQjVrd1RLV1poRjZWemt5dW5MSU9WV0pwSXFFWkRDZ0lCVUVKbWdwUndGdHhnQ2tVbUM3dm9lb3Y5T2kyMzZNS0pwOWl5MWxyRHhiT1FTcXVlQWlXN2pwWHZxY29wUVoxST0mS3Jxdi9LRVRCUCt0TDVJTThxRmgyY25GMmxnPQ=="; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 4582541781916807 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50244	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	2008	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6ubcpt.k.2.m; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087
2024-04-24 02:18:52 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50255	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	736	OUT	GET /user/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&cb=1713925130238&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5063278045066284 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50258	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130239&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1748043792067893 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50256	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1416	OUT	GET /v3/?tid=2612705757018&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713925130241 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:52 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8011448768985008 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50259	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	655	OUT	GET /user/?event=pagevisit&tid=2612705757018&cb=1713925130240&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZYRnlxOFlQU3BjTDRpL3JsakFaUFJoUG83TEZZRWlZcEZDQXRtSGorNlFqeGJqSlBMZ2hZaXV2N0wzUmhCNnBVZW1ncVAxdFNjSElIa3lzWkxtdnpjcW4xUTgwM1RPT3dJckk5a0NwQWNMbz0mQ1B4alBDcEFpbE91QUQ2UFZDcDFQUVZDVG4wPQ=="
2024-04-24 02:18:52 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 3320849856857331 Date: Wed, 24 Apr 2024 02:18:52 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:52 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50257	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1110	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX
2024-04-24 02:18:52 UTC	2234	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17491466366452046632"}],"aggregatable_trigger_data":[{"filters":[{"14":["13310770"]}],"key_piece":"0xb46ce7d2f15dffe3","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x64b206eac24f83e8","not_filters":{"14":["13310770"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13310770"]}],"key_piece":"0x54804f59865da452","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x791030e6f2085a3c","not_filters":{"14":["13310770"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"17491466366452046632","filters":[{"14":["13310770"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"17491466366452046632","filters":[{"14":["13310770"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"17491466366452046632","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"17491466366452046632","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:52 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50260	142.250.101.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:52 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:52 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50261	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	2193	OUT	GET /_next/static/css/3471d3babf255274.css HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925129.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.16; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc2s5.p.3.s
2024-04-24 02:18:52 UTC	600	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31554 Connection: close Date: Mon, 22 Apr 2024 07:19:32 GMT Last-Modified: Mon, 22 Apr 2024 06:23:20 GMT ETag: "a5e9e0bd25747c28af2c8919506692ff" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: V92-I4jRNwgnIdTdcQNvWeCa0iJdcMKV4qgrlmJBsJZJpywXcfc83Q== Age: 154761
2024-04-24 02:18:52 UTC	15784	IN	Data Raw: 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 34 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 70 61 6e 65 6c 5f 5f 63 6f 6e 74 65 6e 74 2e 70 72 69 63 69 6e 67 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 Data Ascii: .panel__content.pricing-page{padding-left:24px;padding-right:24px;max-width:1440px;position:static}@media(min-width:768px){.panel__content.pricing-page{margin:0 auto}}@media(min-width:1200px){.panel__content.pricing-page{padding-left:48px;padding-right:48
2024-04-24 02:18:52 UTC	15770	IN	Data Raw: 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 20 2e 74 61 62 6c 65 2d 64 61 74 61 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 72 65 6d 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 64 3e 64 69 76 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 39 32 70 78 7d 2e 50 72 69 63 69 6e 67 46 65 61 74 75 72 65 54 61 62 6c 65 5f 5f 73 Data Ascii: ion table tbody tr:last-child td .table-data:before{border-bottom:0!important}.PricingFeatureTable__section table tbody tr td{border:0;padding:0;line-height:1.4rem}.PricingFeatureTable__section table tbody tr td>div{min-width:192px}.PricingFeatureTable__s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50267	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	2129	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925131.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.19; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:52 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:52 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 881879d4c0c79b410b6d2fdc3ff2a8c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HmZrNRUXnxlezyk4XHIB96I7GUwW3eBa0UsicmXxIEV_6ZuSKcpNKw==
2024-04-24 02:18:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50265	151.101.2.132	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	363	OUT	GET /sdk/v2/vardata?v=0 HTTP/1.1 Host: api.lab.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	441	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 16 X-Amzn-Trace-Id: Root=1-66286c0c-612ab6bb09b6fd0b61cdcb71 X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:18:52 GMT X-Served-By: cache-lax-kwhp1940079-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713925133.671065,VS0,VE31 Vary: Origin cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-24 02:18:52 UTC	16	IN	Data Raw: 4d 69 73 73 69 6e 67 20 41 70 69 2d 4b 65 79 2e Data Ascii: Missing Api-Key.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50266	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	2046	OUT	GET /pagead/1p-conversion/614409984/?random=799777550&fst=1713925126592&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A45.077%2B02%3A00%3Bhit_timestamp_unix%3D1713925125077%3Btag_name%3DGA4%20-%20page_view%3Bevent_id%3D1713925125026-1-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-1-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUoVZXZlbnQtc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CLzV8MmQx7yY5AEiEwiFpcDU5NmFAxVbQggEHXC3D_kyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoXaHR0cHM6Ly93ZXRyYW5zZmVyLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtq4g2rWOiGb3tMbKEOpxS-C_k_J-MQ_NwEZXsLh6f6vVyAbMbg&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTJAnEYuWx3AMoS5a1974Owg2GdX8ySwYvA&random=486909452 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50264	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	849	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:52 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: EGC9PTESAAFB6MEXC78D Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50270	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c0c-5aaccf731eb7e2681881ec0d Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:52 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50271	18.164.174.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	552	OUT	GET /main.19.8.499.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	623	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 223553 Connection: close Date: Tue, 23 Apr 2024 23:11:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 20:33:00 GMT ETag: "fa6de7dcefc3499fe291b30908e6b762" x-amz-server-side-encryption: AES256 x-amz-version-id: e2w5WSmPYdvXSM8eUfmNQvPaZRq8kRwd Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f6ba0cbfdfc7f9e035cd4025b24bb098.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: bmuhdkobHkSnTO77t2WcgKBDyMzFzAs6B9IyVgtPfS2Sz81-Y8dOQg== Age: 11239
2024-04-24 02:18:52 UTC	15761	IN	Data Raw: 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 3d 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 7c 7c 7b 7d 2c 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 3d 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 7c 7c 7b 7d 2c 5f 5f 49 41 53 53 63 6f 70 65 2e 5f 5f 49 6e 74 65 67 72 61 6c 41 53 45 78 65 63 5b 22 31 39 2e 38 2e 34 39 39 22 5d 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6c 61 73 73 20 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6c 6f 67 73 3d 5b 5d 7d 61 64 64 28 7b 73 74 6f 72 Data Ascii: __IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.499"]=__IASScope.__IntegralASExec["19.8.499"]\|\|{},__IASScope.__IntegralASExec["19.8.499"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({stor
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 29 26 26 72 3b 72 65 74 75 72 6e 20 65 3f 72 3a 69 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 45 6d 70 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 2e 69 74 65 72 61 62 6c 65 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d Data Ascii: )&&r;return e?r:i},y.prototype.isArray=function(){"use strict";return this.iterable instanceof Array},y.prototype.isEmpty=function(e){"use strict";return 0===this.keys(e).length},y.prototype.each=function(e,t){"use strict";var n=this.iterable;if(n.length=
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 65 74 41 67 67 72 65 67 61 74 6f 72 28 29 2e 74 72 69 67 67 65 72 28 48 2e 45 6c 69 67 69 62 6c 65 52 65 6e 64 65 72 29 7d 29 29 7d 3b 76 61 72 20 48 2c 6a 2c 71 2c 59 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 5b 5d 2c 74 3d 5b 5d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 56 65 2e 69 73 57 69 6e 64 6f 77 28 65 29 29 74 3d 22 57 49 4e 44 4f 57 22 3b 65 6c 73 65 20 69 66 28 56 65 2e 69 73 4e 6f 64 65 58 44 6f 6d 61 69 6e 49 66 72 61 6d 65 28 65 29 29 74 3d 22 58 49 46 52 41 4d 45 22 3b 65 6c 73 65 20 74 72 79 7b 74 3d 56 65 2e 67 65 74 4e 6f 64 65 4e 61 6d 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 28 22 6e 65 6e 22 29 7d 72 65 74 75 72 6e 20 74 7d 2c 72 3d 66 75 6e 63 Data Ascii: etAggregator().trigger(H.EligibleRender)}))};var H,j,q,Y,X=function(){"use strict";var e=[],t=[],n=function(e){var t;if(Ve.isWindow(e))t="WINDOW";else if(Ve.isNodeXDomainIframe(e))t="XIFRAME";else try{t=Ve.getNodeName(e)}catch(e){r("nen")}return t},r=func
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 6f 72 28 29 2e 6f 6e 28 48 2e 53 65 6e 64 44 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 6f 3d 3d 3d 52 2e 44 54 5f 43 4f 44 45 53 2e 50 49 4e 47 26 26 61 3d 3d 3d 72 26 26 28 58 65 2e 65 78 65 63 41 74 45 6e 64 4f 66 54 68 72 65 61 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 72 65 71 75 65 73 74 54 6f 70 3a 22 72 65 66 72 65 73 68 41 64 22 2c 61 64 55 6e 69 74 49 64 3a 65 2c 63 61 63 68 65 49 64 3a 74 7d 29 2c 22 2a 22 29 7d 29 29 2c 6e 2e 73 65 6e 64 41 75 74 6f 52 65 66 72 65 73 68 50 72 6f 70 28 72 29 29 7d 29 29 7d 2c 73 65 6e 64 41 75 74 6f 52 65 66 72 65 73 68 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 2e 67 65 74 41 67 67 72 65 67 61 74 6f 72 Data Ascii: or().on(H.SendDt,(function(o,a){o===R.DT_CODES.PING&&a===r&&(Xe.execAtEndOfThread((function(){i.postMessage(JSON.stringify({requestTop:"refreshAd",adUnitId:e,cacheId:t}),"*")})),n.sendAutoRefreshProp(r))}))},sendAutoRefreshProp:function(e){_.getAggregator
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 20 44 2e 69 73 44 65 66 28 74 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 3f 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 28 69 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 26 26 28 72 3d 69 29 3a 44 2e 69 73 44 65 66 28 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 26 26 28 72 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 2c 72 7d 2c 77 68 65 6e 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 4e 65 2e 69 73 44 6f 6d 6c 65 73 73 28 29 29 58 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 29 2c 35 30 29 3b 65 6c 73 65 7b 76 61 72 20 72 2c 69 2c 6f 3d 74 7c 7c 28 4e 65 2e 78 44 6f 6d 61 69 6e 49 66 72 61 6d 65 3f 6e Data Ascii: D.isDef(t.XMLHttpRequest)?"withCredentials"in(i=new XMLHttpRequest)&&(r=i):D.isDef(XDomainRequest)&&(r=new XDomainRequest),r},whenReady:function(e,t){"use strict";if(Ne.isDomless())Xe.setTimeout((function(){e()}),50);else{var r,i,o=t\|\|(Ne.xDomainIframe?n
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 6f 74 73 74 72 61 70 46 65 61 74 75 72 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 5b 65 5d 3d 74 7d 2c 72 65 70 6f 72 74 65 64 42 6f 6f 74 73 74 72 61 70 46 65 61 74 75 72 65 73 3a 69 2c 6f 75 74 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 44 28 72 29 2e 6d 61 70 54 6f 4f 62 6a 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 3d 44 2e 66 72 6f 6d 42 6f 6f 6c 54 6f 4e 75 6d 28 74 5b 6e 5d 29 2c 72 7d 29 29 2c 6e 3d 44 28 69 29 2e 6d 61 70 54 6f 4f 62 6a 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 44 2e 66 72 6f 6d 42 6f 6f 6c Data Ascii: otstrapFeatures:function(e,t){i[e]=t},reportedBootstrapFeatures:i,output:function(){return D(function(){const e=D(r).mapToObj((function(e,n){const r={};return r[e]=D.fromBoolToNum(t[n]),r})),n=D(i).mapToObj((function(e,t){const n={};return n[e]=D.fromBool
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 28 29 7b 69 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 73 74 72 69 6e 67 54 6f 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 3d 58 65 2e 67 65 74 57 69 6e 64 6f 77 28 29 2c 72 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 2e 6c 65 6e 67 74 68 26 26 28 6e 2c 6e 3d 6e 5b 72 5b 74 5d 5d 2c 21 44 2e 69 73 55 6e 64 65 66 28 6e 29 29 3b 74 2b 2b 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 63 6f 6e 74 61 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 21 21 44 2e 69 73 53 74 72 28 65 29 26 26 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (){i.apply(r,arguments)}},stringToProp:function(e){"use strict";var t,n=Xe.getWindow(),r=e.split(".");for(t=0;t<r.length&&(n,n=n[r[t]],!D.isUndef(n));t++);return n},contains:function(e,t){"use strict";return!!D.isStr(e)&&-1!==e.indexOf(t)},trim:function(e
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 52 2e 4e 41 7d 2c 69 73 53 74 61 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 41 64 4e 6f 64 65 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 4d 65 28 7b 73 63 72 58 3a 76 6f 69 64 20 30 2c 73 63 72 59 3a 76 6f 69 64 20 30 2c 77 69 64 74 68 3a 6e 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 2e 68 65 69 67 68 74 7d 29 29 2c 65 7d 2c 67 65 74 4f 62 73 65 72 76 65 64 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 67 65 74 50 69 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 7d 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: nction(){return i!==R.NA},isStarted:function(){return a},getAdNodeDimensions:function(){var e;return n&&(e=Me({scrX:void 0,scrY:void 0,width:n.width,height:n.height})),e},getObservedNode:function(){return r},getPiv:function(){return i}}},Ct=function(){"us
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 75 6d 65 22 3a 63 61 73 65 22 62 75 66 66 65 72 46 69 6e 69 73 68 22 3a 41 3d 22 72 65 73 75 6d 65 41 64 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 6b 69 70 70 65 64 22 3a 41 3d 22 61 64 53 6b 69 70 70 65 64 22 7d 69 66 28 61 3d 61 3e 30 26 26 61 3c 2e 31 3f 2e 31 3a 70 61 72 73 65 49 6e 74 28 31 30 2a 61 29 2f 31 30 2c 73 3d 73 3e 30 26 26 73 3c 2e 31 3f 2e 31 3a 70 61 72 73 65 49 6e 74 28 31 30 2a 73 29 2f 31 30 2c 22 22 21 3d 3d 41 29 7b 76 61 72 20 4e 3d 5f 2e 67 65 74 41 67 67 72 65 67 61 74 6f 72 28 29 2e 72 65 71 75 65 73 74 28 71 2e 53 43 52 45 45 4e 5f 45 56 45 4e 54 53 29 3b 4e 26 26 28 4f 3d 4e 2e 67 65 74 43 75 72 72 65 6e 74 4c 6f 63 28 29 7c 7c 4f 29 2c 69 2e 70 75 73 68 28 7b 74 3a 53 2d 6f 2c 72 74 Data Ascii: break;case"resume":case"bufferFinish":A="resumeAd";break;case"skipped":A="adSkipped"}if(a=a>0&&a<.1?.1:parseInt(10a)/10,s=s>0&&s<.1?.1:parseInt(10s)/10,""!==A){var N=_.getAggregator().request(q.SCREEN_EVENTS);N&&(O=N.getCurrentLoc()\|\|O),i.push({t:S-o,rt
2024-04-24 02:18:53 UTC	16384	IN	Data Raw: 6f 75 6e 64 28 74 2e 68 65 69 67 68 74 29 29 7d 29 29 29 29 3b 76 61 72 20 68 3d 4e 65 2e 69 73 4f 6d 69 64 46 6f 72 57 65 62 28 29 3f 56 65 2e 63 61 6c 63 57 69 6e 44 69 6d 73 28 29 3a 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 2c 45 3d 6e 65 77 20 4d 65 28 65 2e 64 61 74 61 2e 76 69 65 77 70 6f 72 74 7c 7c 68 29 2c 76 3d 6e 65 77 20 4d 65 28 73 3f 74 2e 63 6f 6e 74 61 69 6e 65 72 47 65 6f 6d 65 74 72 79 3a 74 2e 67 65 6f 6d 65 74 72 79 7c 7c 7b 78 3a 30 2c 79 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 29 2c 41 3d 6e 65 77 20 4d 65 28 73 3f 74 2e 6f 6e 53 63 72 65 65 6e 43 6f 6e 74 61 69 6e 65 72 47 65 6f 6d 65 74 72 79 3a 74 2e 6f 6e 53 63 72 65 65 6e 47 65 6f 6d 65 74 72 79 7c 7c 7b 78 3a 30 2c 79 3a 30 2c 77 69 64 74 68 3a Data Ascii: ound(t.height))}))));var h=Ne.isOmidForWeb()?Ve.calcWinDims():{width:0,height:0},E=new Me(e.data.viewport\|\|h),v=new Me(s?t.containerGeometry:t.geometry\|\|{x:0,y:0,width:0,height:0}),A=new Me(s?t.onScreenContainerGeometry:t.onScreenGeometry\|\|{x:0,y:0,width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50274	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130983&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETHQ0cmg1NyttQjVrd1RLV1poRjZWemt5dW5MSU9WV0pwSXFFWkRDZ0lCVUVKbWdwUndGdHhnQ2tVbUM3dm9lb3Y5T2kyMzZNS0pwOWl5MWxyRHhiT1FTcXVlQWlXN2pwWHZxY29wUVoxST0mS3Jxdi9LRVRCUCt0TDVJTThxRmgyY25GMmxnPQ=="
2024-04-24 02:18:53 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZaL2tSMXdmOW9KRkgwRWp4ZWxSdXJEZHRseXliVDc5TXZMd3AxVDhHWGNsYmJSaU1Sb2gwc05Wc2Z6T0tNODNlRzZkOGFwNExheFBCVGw4UzAvdk1LVzdwNGZhMkE1MmVaKzdUSHZ2ZktXTT0mUll6OUhwR0ZkUThDcVd6OHNUb0ZjUmJPbFNrPQ=="; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1452749518269763 Date: Wed, 24 Apr 2024 02:18:53 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-24 02:18:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50275	151.101.128.84	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1448	OUT	GET /v3/?event=pagevisit&tid=2612705757018&cb=1713925130985&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22edb6538d%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZETHQ0cmg1NyttQjVrd1RLV1poRjZWemt5dW5MSU9WV0pwSXFFWkRDZ0lCVUVKbWdwUndGdHhnQ2tVbUM3dm9lb3Y5T2kyMzZNS0pwOWl5MWxyRHhiT1FTcXVlQWlXN2pwWHZxY29wUVoxST0mS3Jxdi9LRVRCUCt0TDVJTThxRmgyY25GMmxnPQ=="
2024-04-24 02:18:53 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYwNmtJemdwTEV6ZHhBaERSSmNSZFY1TytZL0xjMXpteWFkeWhneXZXWnc4bEczZU5ZTnZpVTdIK0JvWHdDM0dvSHJ3TVowWWZrbW5iWnBSK0dlUDJjejFRUHFhaWtBa1E3cFlqaUZJWXZHST0mV255TElXQUxZKzZLQzg5a0VxZURKenllMGtNPQ=="; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1960148840998568 Date: Wed, 24 Apr 2024 02:18:53 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-24 02:18:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50269	52.43.31.105	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	675	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 10740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:52 UTC	10740	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 39 39 32 34 37 65 64 37 37 65 37 36 66 61 30 64 64 64 32 31 63 30 30 63 37 62 33 36 63 30 32 63 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 33 31 31 32 37 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 Data Ascii: checksum=99247ed77e76fa0ddd21c00c7b36c02c&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925131127%2C%22event_id%22%3A21%2C%22session_id%22%3A1713925074977%2C%2
2024-04-24 02:18:53 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c0c-41ccc8af725f1c9245309abc Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:53 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50263	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	2280	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1990 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc2ti.t.3.10; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925131.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.17
2024-04-24 02:18:52 UTC	1990	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 73 65 22 2c 22 73 65 5f 63 61 22 3a 22 63 63 70 61 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 61 63 22 3a 22 73 68 6f 77 5f 62 61 6e 6e 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 43 50 39 6b 76 4d 41 50 39 6b 76 4d 41 50 6e 41 43 41 45 4e 41 78 43 41 41 45 49 41 45 45 4a 41 45 41 41 42 47 63 51 46 67 41 42 41 41 4d 41 42 6c 41 45 51 41 52 51 41 6e 41 42 6c 41 44 63 41 48 34 41 54 41 42 43 41 43 4c 41 45 63 41 4b 51 41 56 6b 41 75 6f 42 70 67 44 69 41 48 38 41 58 6d 41 77 51 42 6b 6b 6a 4b 53 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"se","se_ca":"ccpa_banner","se_ac":"show_banner","se_pr":"CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKS
2024-04-24 02:18:53 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:53 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50273	99.80.74.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:52 UTC	1075	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:53 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:18:53 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50276	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	554	OUT	OPTIONS /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:53 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Access-Control-Max-Age: 600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50278	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	2129	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925131.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.19; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _dd_s=rum=0&expire=1713926030411&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:53 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:53 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z5sNUHz4cp_ldkRqq4YWKoHP_l3zfK13TXLqRuYNk_IFPZ96Ah_W5g==
2024-04-24 02:18:53 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50277	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	2280	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:53 UTC	1132	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 73 2f 30 34 63 37 33 39 65 62 30 37 31 30 39 63 62 32 61 31 65 37 61 39 65 35 30 65 38 62 36 32 62 64 32 30 32 34 30 34 32 33 30 38 35 30 35 33 2f 35 38 62 65 38 34 3f 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 54 52 4e 5f 54 44 4c 5f 30 35 26 75 74 6d 5f 73 6f 75 72 63 65 3d 73 65 6e 64 67 72 69 64 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 74 72 6b 3d Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/downloads/04c739eb07109cb2a1e7a9e50e8b62bd20240423085053/58be84?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=
2024-04-24 02:18:53 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:53 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:53 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50279	52.46.130.91	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	615	OUT	GET /iui3?d=forester-did&ex-fargs=%3Fid%3D09b5c57a-b58c-454a-3153-26d18d0aad39%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://wetransfer.com/&ex-hargs=v%3D1.0%3Bc%3D8949843630001%3Bp%3D09B5C57A-B58C-454A-3153-26D18D0AAD39 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; ad-privacy=0
2024-04-24 02:18:53 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Z4FSX89R33D474WAGX6G Set-Cookie: ad-id=A2QyqSEffkdYgTo713gyzco; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 02:18:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 02:18:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-24 02:18:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50281	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	1377	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
2024-04-24 02:18:53 UTC	1172	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra000;ord=1650331830;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50282	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	1475	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
2024-04-24 02:18:53 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4838101482370378660"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4838101482370378660","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"4838101482370378660","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"4838101482370378660","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"4838101482370378660","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50284	44.240.232.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c0d-2ad3e7b979dcc3f54fcc595a Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:54 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50286	142.251.2.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	1375	OUT	GET /activity;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi4wkjf7fXAVtnA6idQAPb_ccvy1X5GdRb-Z3N7vPfjwQhrOSg
2024-04-24 02:18:54 UTC	1170	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50291	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:53 UTC	701	OUT	GET /apps/desktop-wallpaper/0.1.47/main.7532df0ed7cdb64f.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6c07a28ff53ed915f74a27fe90616d61" If-Modified-Since: Wed, 17 Apr 2024 14:18:33 GMT
2024-04-24 02:18:54 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:54 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "6c07a28ff53ed915f74a27fe90616d61" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 360ac648682c5b4ae3b84565b3d9c7b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: Nf9t8OzAJgNfijqYw-JV9WHOMlgARflyn6nahDefnW-qCRxpSL5rEQ== Age: 83051

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50292	3.218.116.188	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	348	OUT	GET /api/v2 HTTP/1.1 Host: e-10220.adzerk.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	633	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 02:18:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Access-Control-Allow-Origin: undefined Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Accept, Origin, Content-Type, Content-Length, X-Adzerk-Explain, X-Adzerk-Sdk-Version Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache x-served-by: prod-adservers-shard105-us-east-1-01-i-0f8dee61323d89c01 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-24 02:18:54 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 76 32 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/v2</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50288	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	2280	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:54 UTC	3458	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 33 32 64 65 30 33 63 63 2d 63 39 62 37 2d 34 66 38 61 2d 61 33 33 66 2d 37 63 66 36 36 30 63 38 34 33 63 63 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/?trk=NAV_pricing","eid":"32de03cc-c9b7-4f8a-a33f-7cf660c843cc","tv":"js-3.23.0","tna":"co","aid
2024-04-24 02:18:54 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:54 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:54 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:54 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50290	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	2009	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:54 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:54 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50298	18.164.174.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	549	OUT	GET /sca.17.6.2.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	656	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 93606 Connection: close Date: Tue, 23 Apr 2024 23:11:33 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 20 Sep 2022 19:21:34 GMT ETag: "1f3488247c90bb5de253d3d0cb3b7458" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: go8nfBUviNCPCwnrYX1LpMW5hEx3ASGy Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46fad0fa90a137a4d3e3f5f29cbccffc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: DWbtmN6QuqbLQLSe0to9gbxLpDzdyR7bDlq0FCNky65DprqxnNAixg== Age: 11242
2024-04-24 02:18:54 UTC	15728	IN	Data Raw: 2f 2a 20 0a 6a 73 6f 6e 32 2e 6a 73 0a 32 30 31 34 2d 30 32 2d 30 34 0a 50 75 62 6c 69 63 20 44 6f 6d 61 69 6e 2e 0a 4e 4f 20 57 41 52 52 41 4e 54 59 20 45 58 50 52 45 53 53 45 44 20 4f 52 20 49 4d 50 4c 49 45 44 2e 20 55 53 45 20 41 54 20 59 4f 55 52 20 4f 57 4e 20 52 49 53 4b 2e 0a 53 65 65 20 68 74 74 70 3a 2f 2f 77 77 77 2e 4a 53 4f 4e 2e 6f 72 67 2f 6a 73 2e 68 74 6d 6c 0a 54 68 69 73 20 63 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 6d 69 6e 69 66 69 65 64 20 62 65 66 6f 72 65 20 64 65 70 6c 6f 79 6d 65 6e 74 2e 0a 53 65 65 20 68 74 74 70 3a 2f 2f 6a 61 76 61 73 63 72 69 70 74 2e 63 72 6f 63 6b 66 6f 72 64 2e 63 6f 6d 2f 6a 73 6d 69 6e 2e 68 74 6d 6c 0a 0a 0a 4a 61 76 61 53 63 72 69 70 74 20 4d 44 35 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 Data Ascii: /* json2.js2014-02-04Public Domain.NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK.See http://www.JSON.org/js.htmlThis code should be minified before deployment.See http://javascript.crockford.com/jsmin.htmlJavaScript MD5https://github.c
2024-04-24 02:18:54 UTC	16384	IN	Data Raw: 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 30 2c 63 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 63 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 31 30 30 30 30 70 78 22 2c 63 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 2c 61 32 33 39 2e 61 33 34 31 2e 61 33 33 34 28 63 2e 61 74 74 61 63 68 45 76 65 6e 74 29 3f 63 2e 6f 6e 6c 6f 61 64 3d 62 3a 63 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 72 28 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 28 61 3d 61 32 33 39 2e 61 38 39 2e 61 32 37 32 28 29 29 Data Ascii: style.border=0,c.style.position="absolute",c.style.top="-10000px",c.style.left="-10000px",a239.a341.a334(c.attachEvent)?c.onload=b:c.attachEvent("onload",b),c.setAttribute("src",r()),document.body.appendChild(c)},t=function(){return a\|\|(a=a239.a89.a272())
2024-04-24 02:18:54 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 4f 75 74 70 75 74 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 4d 49 44 49 4f 75 74 70 75 74 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 4f 75 74 70 75 74 4d 61 70 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 4d 49 44 49 4f 75 74 70 75 74 4d 61 70 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 49 44 49 50 6f 72 74 26 26 61 32 33 39 Data Ascii: unction(){try{return"function"==typeof MIDIOutput&&a239.a341.a66(MIDIOutput)}catch(a){}return!1},function(){try{return"function"==typeof MIDIOutputMap&&a239.a341.a66(MIDIOutputMap)}catch(a){}return!1},function(){try{return"function"==typeof MIDIPort&&a239
2024-04-24 02:18:54 UTC	16384	IN	Data Raw: 72 69 74 79 4c 65 76 65 6c 20 2d 3e 20 5b 5b 4f 77 6e 50 72 6f 70 65 72 74 79 4b 65 79 73 5d 5d 22 2c 22 76 61 72 20 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 20 3d 20 30 3b 22 2c 22 76 61 72 20 70 20 3d 20 6e 65 77 20 50 72 6f 78 79 28 7b 7d 2c 20 7b 20 6f 77 6e 4b 65 79 73 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 29 20 7b 20 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 2b 2b 3b 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 20 7d 7d 29 3b 22 2c 22 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 70 29 3b 22 2c 22 28 6f 77 6e 4b 65 79 73 43 61 6c 6c 65 64 20 3d 3d 3d 20 31 29 22 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 3b 72 65 74 75 72 6e 20 61 32 33 39 2e 61 33 34 31 2e 61 37 39 28 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e Data Ascii: rityLevel -> [[OwnPropertyKeys]]","var ownKeysCalled = 0;","var p = new Proxy({}, { ownKeys: function(o) { ownKeysCalled++; return Object.keys(o); }});","Object.freeze(p);","(ownKeysCalled === 1)"].join("\n");return a239.a341.a79(a)},function(){try{return
2024-04-24 02:18:54 UTC	16384	IN	Data Raw: 70 3e 22 2c 22 5c 6e 5c 6e 5c 6e 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 32 33 39 2e 61 33 34 31 2e 61 37 38 28 22 61 62 63 3c 70 72 65 3e 31 32 33 5c 6e 34 35 36 5c 6e 5c 6e 5c 6e 20 20 20 20 37 38 39 3c 2f 70 72 65 3e 64 65 66 22 2c 22 20 20 20 20 37 38 39 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 2e 6c 61 62 65 6c 73 26 26 30 3d 3d 3d 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 2e 6c 61 62 65 6c 73 2e 6c 65 6e 67 74 68 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 32 33 39 2e 61 33 34 31 2e 61 37 34 28 29 26 26 22 6f 62 6a 65 63 74 Data Ascii: p>","\n\n\n")},function(){return a239.a341.a78("abc<pre>123\n456\n\n\n 789</pre>def"," 789")},function(){return!!a239.a341.a74()&&"object"==typeof a239.a341.a74().labels&&0===a239.a341.a74().labels.length},function(){return!!a239.a341.a74()&&"object
2024-04-24 02:18:54 UTC	12342	IN	Data Raw: 2e 74 72 69 6d 52 69 67 68 74 26 26 61 32 33 39 2e 61 33 34 31 2e 61 36 36 28 61 2e 74 72 69 6d 52 69 67 68 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 6c 65 72 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 61 6c 65 72 74 3b 74 72 79 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5c 6e 22 29 26 26 2d 31 21 3d 3d 62 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5c 6e 22 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 74 72 75 Data Ascii: .trimRight&&a239.a341.a66(a.trimRight)},function(){if("undefined"==typeof alert)return!1;var a=function(){},b=alert;try{return-1===a.toString().indexOf("\n")&&-1!==b.toString().indexOf("\n")}catch(a){}return!1},function(){try{return"function"==typeof stru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50296	34.196.145.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	1567	OUT	GET /rfw/st/1566598/79010620/skeleton.js?adsafe_url=https%3A%2F%2Fwetransfer.com&adsafe_type=g&adsafe_url=https%3A%2F%2Fnolan.wetransfer.net%2F&adsafe_type=e&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2F&adsafe_type=f&adsafe_url=https%3A%2F%2Fbackgrounds.wetransfer.net%2Fcreator%2Fmailchimp%2F2402%2Fstatic2%2F1_9hifw9%2Fus%2Findex.html%3F_origin%3Dhttps%3A%2F%2Fnolan.wetransfer.net%26_placement%3Ddesktop-web-renderer&adsafe_type=d&adsafe_jsinfo=,id:7f0967af-b568-56c1-bdd1-f263bedbcb3c,c:aLnZfx,sl:outOfView,em:true,fr:false,thd:1,mn:jsserver-primary-689f6c68bf-pmmjq,rg:va,pt:1-5-15,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:-1,obst:0,th:1,reas:f,mu:10000,br:c,bru:c,an:n,oam:0,mtim:2367,mot:0,app:0,maw:0,tdt:s,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pl:CV8L.CV8L.CV8L.CV8L.CV8L,rmeas:1,rend:1,renddet:IMG.qs,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,tt:rjss,et:2411,oid:fd7af33c-01e0-11ef-bf82-eaf9b4c06ee7,v:19.8.499,sp:1,st:0,fwm:1,wr:1280.984,sr:1280.1024,ov:0 HTTP/1.1 Host: pixel.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	268	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 02:18:54 GMT Content-Length: 0 Connection: close server: Apache-Coyote/1.1 p3p: CP="COM NAV INT STA NID OUR IND NOI" pragma: no-cache cache-control: no-cache location: https://static.adsafeprotected.com/skeleton.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50300	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	1168	OUT	GET /activity;register_conversion=1;ps=1;src=12370788;type=pagev0;cat=wetra0;ord=1691536751;gtm=45h91e44m0v893550495z8890364660z9890153243za200;dc_pre=1;u1=%2Fpricing;u4=1577694276.1713925069;u8=en-US;u11=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing;dma=1;dma_cps=sypham;npa=0;gcs=G111;gcd=13t3tPt2t6;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=497330811.1713925074;s3p=1;~oref=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlUm2e-eJEeExqPTBizsUj3pqpaKkqlfI5CeXaZ2e2AaxApONwxqdJGc2qX; APC=AfxxVi6GaPHeM-Jxbdan4IIlCUuW4aDWBpyLU1dyL7qsFKScTQeEJQ
2024-04-24 02:18:54 UTC	2229	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4838101482370378660"}],"aggregatable_trigger_data":[{"filters":[{"14":["13330377"]}],"key_piece":"0x31b50e9133291837","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x3ae6f3f677d8ebc7","not_filters":{"14":["13330377"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13330377"]}],"key_piece":"0xf06ef0dff2899aab","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x41c91011b35e4faa","not_filters":{"14":["13330377"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12200183183714872362","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"4838101482370378660","filters":[{"14":["13330377"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"4838101482370378660","filters":[{"14":["13330377"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"4838101482370378660","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"4838101482370378660","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["12370788"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 24-May-2024 02:18:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50293	99.80.74.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	890	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=0&sev=start&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts= HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:18:54 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50302	142.251.2.149	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 142 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	142	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 32 30 30 31 38 33 31 38 33 37 31 34 38 37 32 33 36 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://wetransfer.com","trigger_debug_key":"12200183183714872362"},"type":"trigger-no-matching-source"}]
2024-04-24 02:18:54 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 02:18:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50303	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	1354	OUT	GET /pagead/1p-user-list/778938880/?random=302810767&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD6Fn_WEKe7z-PfmXZfpuiAlzv5c_JvUlpCw5xfCBtwElS-l4&random=3432702778 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:54 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50301	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	1201	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgh,pingTime:-3,time:2456,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2456,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,1~0%5D,as:%5B80~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt27.or.303net.net
2024-04-24 02:18:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50305	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	2433	OUT	GET /_set_cookie?val=4HOm4D0LIoAQD4DdntC1aMKHAQkp5Mf8mT6MgHEPG437ockmNKOLFYV0vqY%2BOfnQDWRa2T1v4PYPCxyTdCFf1%2F4bMHHFYrFFvGMaXn6LgkaHreCH4ReiHwbiiTnyOMZK%2FZJDSpje1eD11Ls0lWl3eNf1we%2FsjoSvkpixF2YrG%2Fcn7F3UF%2BDGmFlqyfQRqgygCIc%3D HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:55 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48 Connection: close Date: Wed, 24 Apr 2024 02:18:54 GMT Set-Cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 1a6e1efe30d70fc3718c47f07ff0b6f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: fT2IuVN70gJ81pj14hu_qptxCVsSCog45SvOQ6M372XQtvR2m0AH0Q==
2024-04-24 02:18:55 UTC	48	IN	Data Raw: 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d Data Ascii: R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50307	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:54 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:18:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50310	18.164.174.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	547	OUT	GET /skeleton.js HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17 Connection: close Date: Tue, 23 Apr 2024 23:11:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:54:35 GMT ETag: "53fab767ecbd3bf07990b10246befbd4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 bba30123f54a6d1251a0db5da01006dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P4 X-Amz-Cf-Id: KIg93HSp6EU0raK6eYzi4GLvUu0m13ai57TkqZMkxNtaRr9OnJnJUQ== Age: 11244
2024-04-24 02:18:55 UTC	17	IN	Data Raw: 22 61 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b Data Ascii: "ad placeholder";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50312	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	2589	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20; _dd_s=rum=0&expire=1713926033094&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969&lock=8788699a-4177-4ce3-bea6-ac191116f717
2024-04-24 02:18:55 UTC	102	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 33 32 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"INP","type":"view","time":32,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:18:55 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 40 Connection: close Date: Wed, 24 Apr 2024 02:18:55 GMT ETag: "28-ZVFQrT0rF8gdqRMOOwAK2A35zoQ" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rPgzLl8-OFvP3OAmmTy1kuTUguOCh17IDOtdkxjcBubXhS_OzeAJ0g==
2024-04-24 02:18:55 UTC	40	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 49 4e 50 22 2c 22 74 69 6d 65 22 3a 33 32 7d Data Ascii: {"status":"ok","metric":"INP","time":32}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50311	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	2589	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20; _dd_s=rum=0&expire=1713926033094&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969&lock=8788699a-4177-4ce3-bea6-ac191116f717
2024-04-24 02:18:55 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 35 35 30 36 38 35 37 37 33 32 31 36 35 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.00865506857732165,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:18:55 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:18:55 GMT ETag: "39-FLZdhKnSSTIbNyRnw++nT+zMve4" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8e16c7938d4a57727005da6f93b9da6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: GsN-TEE-MHktE_EIvnyCevaGS_4tJ7n3zUhQrSV__Hi1SLUBIcnjCw==
2024-04-24 02:18:55 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 30 38 36 35 35 30 36 38 35 37 37 33 32 31 36 35 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.00865506857732165}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50316	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50317	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1176	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.or.303net.net
2024-04-24 02:18:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50318	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1541	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt24.or.303net.net
2024-04-24 02:18:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50320	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1120	OUT	GET /pagead/1p-user-list/778938880/?random=302810767&fst=1713924000000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&auid=497330811.1713925074&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&pscdl=noapi&is_vtc=1&cid=CAQSKQB7FLtqD6Fn_WEKe7z-PfmXZfpuiAlzv5c_JvUlpCw5xfCBtwElS-l4&random=3432702778 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50322	142.250.101.147	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	2404	OUT	GET /pagead/1p-conversion/614409984/?random=2042921191&fst=1713925127858&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A46.241%2B02%3A00%3Bhit_timestamp_unix%3D1713925126241%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925125026-62-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CMnyg8Hlxur_WCITCJqhqtbk2YUDFV1WCAQdUIwJMTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhdodHRwczovL3dldHJhbnNmZXIuY29tLw&is_vtc=1&cid=CAQSKQB7FLtq2ks73W1_DJVqVO9uTbHqY_NWp8xdGQJlxoCut411t94pUI4L&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTBjqho69MsEzqNQLxsN_JJN_n4N6vqCHnw&random=1638137281 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50319	99.80.74.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1087	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts=0%2C2700 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:18:55 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50323	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	955	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgh,pingTime:-3,time:2456,type:v,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2456,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,1~0%5D,as:%5B80~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:55 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.or.303net.net
2024-04-24 02:18:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50309	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	2009	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:56 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50313	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	2258	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:55 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 37 34 38 36 38 61 32 63 2d 33 66 37 36 2d 34 33 34 39 2d 39 62 36 31 2d 33 34 62 33 31 34 64 34 37 34 35 65 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"74868a2c-3f76-4349-9b61-34b314d4745e","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:18:56 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:56 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:56 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50325	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1033	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:56 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:56 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:56 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50326	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	923	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50328	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	1015	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:56 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:56 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:56 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50327	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	955	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=160, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50331	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:55 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50329	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	930	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgi,pingTime:-6,time:2457,type:i,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2457,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2~0%5D,as:%5B81~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412%7D&tpiLookup=ao:wetransfer.com%2Cnolan.wetransfer.net&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt35.or.303net.net
2024-04-24 02:18:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50330	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	1295	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZgt,pingTime:-2,time:2468,type:a,im:%7Bsf:0,pom:1,prf:%7BbdA:3986,bdZ:5455,beA:5457,beZ:5460,mfA:7824,cmA:7828,inA:7829,inZ:7836,prA:7836,prZ:7841,si:7867,poA:7871,poZ:7896,cmZ:7896,mfZ:7896,loA:7913,loZ:7918,ltA:7924,ltZ:7924,mdA:5460,mdZ:7490%7D%7D,sca:%7Bdfp:%7Bdf:0%7D%7D,env:%7Bgca:false,cca:false,gca2:false%7D,clog:%5B%7Bpiv:-1,vs:o,r:f,w:1280,h:907,t:2409%7D,%7Bpiv:0,r:l.f,t:2454%7D%5D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:2468,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,13~0%5D,as:%5B92~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:0,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,pd:CV8L.internal-pdf-viewer,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sinceFw:54,readyFired:true%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt13.or.303net.net
2024-04-24 02:18:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50332	18.154.132.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	2107	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926034105&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:56 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:56 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HTK8HIEqaTllHjdapD0B_5tiz_dMWqon93MeLr_XzMuUg1t_45thzQ==
2024-04-24 02:18:56 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50333	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	1065	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:56 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:56 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:56 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50324	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	2218	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:56 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":1,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:18:57 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:56 GMT ETag: W/"3e32-wg44JTyWrG/+GlY6lbaXuiAr5qQ" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15922 Connection: Close
2024-04-24 02:18:57 UTC	15922	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 32 33 35 30 37 31 31 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 37 30 37 35 36 37 33 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 31 30 39 36 38 39 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 38 38 32 31 31 30 34 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 34 4f 44 49 78 4d Data Ascii: {"creatives":[{"adId":522350711,"creativeId":347075673,"flightId":511096897,"campaignId":308821104,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA4ODIxM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50334	142.250.101.106	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	2092	OUT	GET /pagead/1p-conversion/614409984/?random=2042921191&fst=1713925127858&cv=10&fmt=3&label=98VwCIGvyMQDEIDO_KQC&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45h91e44m0v893550495z8890364660z9890153243za200&value=0&url=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&tiba=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&data=event%3Dpage_view%3Bgtm_info%3DGTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse%3Bconsent_analytics%3Dtrue%3Bconsent_marketing%3Dtrue%3Bsnowplow_user_id%3Dc444300f-6006-4e83-9c38-3f418b9b111c%3Bsnowplow_session_id%3D15%3Bhit_timestamp_local%3D2024-04-24T04%3A18%3A46.241%2B02%3A00%3Bhit_timestamp_unix%3D1713925126241%3Btag_name%3DGA4%20-%20page_view%20(virtual)%3Bevent_id%3D1713925125026-62-d5e1f2d9e45f%3Bwt_data%3D%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-62-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&auid=497330811.1713925074&dma=1&dma_cps=sypham&npa=0&gcs=G111&gcd=13t3tPt2t6&uip=154.16.105.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CMnyg8Hlxur_WCITCJqhqtbk2YUDFV1WCAQdUIwJMTICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhdodHRwczovL3dldHJhbnNmZXIuY29tLw&is_vtc=1&cid=CAQSKQB7FLtq2ks73W1_DJVqVO9uTbHqY_NWp8xdGQJlxoCut411t94pUI4L&eitems=ChAI8LidsQYQ_Ojrm7GTmZFyEh0AcBcTTBjqho69MsEzqNQLxsN_JJN_n4N6vqCHnw&random=1638137281 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 02:18:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 02:18:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50336	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	3516	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A50.129%2B02%3A00&epn.hit_timestamp_unix=1713925130130&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925125026-106-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-106-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1954&tfd=11305&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger;navigation-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:56 UTC	802	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close access-control-allow-credentials: true access-control-allow-origin: https://wetransfer.com cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:56 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 ff86682523b6a05dafb1edbd86b80e50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: 28KKezRHLwlcGl_trKGOBhGj7jcCbUTmwOsOsuFBFC_PsdmDLOIbUg==
2024-04-24 02:18:56 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50338	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	1196	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNi,time:4503,type:e,im:%7Bimprf:%7Bttecl:5421,ecd:1537,tsecr:2%7D%7D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4503,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2048~0%5D,as:%5B2127~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,0%5D%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt29.or.303net.net
2024-04-24 02:18:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50339	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	1147	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNn,time:4508,type:e,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4508,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2053~0%5D,as:%5B2132~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,4%5D%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt32.or.303net.net
2024-04-24 02:18:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50343	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129774&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-39-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:56 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:56 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50344	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	689	OUT	GET /tr/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50345	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	721	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:56 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50341	99.80.74.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	902	OUT	GET /measure/62b5db706796a0962e5471f5?mid=64833f994d803c63942a4674&mt=1&d=wetransfer.com&a=199071&c=0&r=0&evid=ab28b51c-32e1-45f3-b0dd-9331f289b0be&vmet=IntersectionObserver&seq=1&sev=end&sst=2024-04-24T02%3A18%3A51.433Z&h=907&w=1280&sh=1024&sw=1280&sah=984&saw=1280&vsum=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&vmax=2707%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&trk=false&cm=wetransfer&cp_advertiserId=2427786&cp_campaignId=273491617&cp_placementId=475577060&cp_creativeId=525325048&cp_creativeType=Base__Image__Static&lp_format=premium&ct=US&vts=0%2C2700 HTTP/1.1 Host: measure.lamp.avct.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	94	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 02:18:57 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50346	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	726	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=PageView&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129776&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1713925073230.1941515402&cs_est=true&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-62-d5e1f2d9e45f&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:57 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50348	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	956	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50350	18.154.132.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	2107	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926034105&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969
2024-04-24 02:18:57 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:18:57 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 2fa732230187764c42964d5b97126c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TEHf8giy6X2cu9yEh1AT-d_mv_grhxmYhz00j7aAyS1YfWD7mYYSEw==
2024-04-24 02:18:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50349	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:56 UTC	758	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925129777&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=3&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-87-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:57 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50342	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	2009	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; _gat_UA-11792855-4=1; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925132.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.20
2024-04-24 02:18:57 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:57 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50353	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	901	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNn,time:4508,type:e,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4508,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2053~0%5D,as:%5B2132~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,4%5D%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt09.or.303net.net
2024-04-24 02:18:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50352	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	950	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNi,time:4503,type:e,im:%7Bimprf:%7Bttecl:5421,ecd:1537,tsecr:2%7D%7D,es:0,sc:1,ha:1,fgad:1,fif:0,gmnp:0,for:1,b11:1,cnod:1,intblk:1,gm:0,slTimes:%7Bi:0,o:4503,n:0,pp:0,pm:0%7D,slEvents:%5B%7Bsl:o,t:2409,wc:0.0.1280.984,ac:NaN.NaN.1280.907,am:i,cc:NaN.NaN.1280.907,piv:0,obst:0,th:1,reas:l.f,bkn:%7Bpiv:%5B79~1,2048~0%5D,as:%5B2127~1280.907%5D%7D%7D%5D,slEventCount:1,em:true,fr:false,e:,tt:rjss,dtt:1742,fm:uaPdbiR+11%7C121.1566598-79010620,idMap:121,rmeas:1,rend:1,renddet:IMG.qs,siq:2412,sis:3950,hov:%5B4503,1,0%5D%7D&br=c HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt32.or.303net.net
2024-04-24 02:18:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50351	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	1956	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNY,pingTime:-10,time:4545,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1713925135237%7C%7Cde86bd9db1f497ec38edd91c2baa2a56%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C4cb7186908e680e6db746fddf8679a7e%7C%7C8bbca06e0e1b671af6eef268eb3ab302%7C%7C8a238fd2d8c80cbf7f58273074fb06d1%7C%7C136f9c12087b100fb754616b3bd49015%7C%7C2bdebd58842d2d570efc06acb249967a%7C%7C1663701684%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt22.or.303net.net
2024-04-24 02:18:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50354	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	1066	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:57 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 02:18:57 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 02:18:57 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50356	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	2168	OUT	GET /_next/static/chunks/pricing.7575d8b9ff1b3b50.js HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:57 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 46090 Connection: close Date: Mon, 22 Apr 2024 19:07:22 GMT Last-Modified: Mon, 22 Apr 2024 17:44:43 GMT ETag: "6d2b1124d8d986d756b08f0472fafe16" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ThNbyv3hT5RplATRtWFJMoULUhp9S_LHWXECDqUJv9qkq_YYjKY9tQ== Age: 112296
2024-04-24 02:18:57 UTC	15777	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 31 37 5d 2c 7b 35 36 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 72 2c 7b 45 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 65 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 78 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8717],{56563:function(e,r,i){"use strict";i.d(r,{Eh:function(){return t},eZ:function(){return n},xq:function(){return a}});var a="https://apps.apple.com/account/subscriptions",t="https://play.google
2024-04-24 02:18:57 UTC	16384	IN	Data Raw: 75 6d 6e 22 7d 2c 61 65 2e 66 72 65 65 2c 61 65 2e 70 72 6f 2c 6c 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 66 65 61 74 75 72 65 5f 74 61 62 6c 65 2e 70 6f 72 74 61 6c 73 2e 66 65 61 74 75 72 65 73 2e 66 65 61 74 75 72 65 5f 32 22 29 2c 74 6f 6f 6c 74 69 70 3a 6d 2e 5a 2e 74 28 22 22 2e 63 6f 6e 63 61 74 28 70 65 2c 22 2e 74 6f 6f 6c 74 69 70 5f 35 22 29 29 2c 74 79 70 65 3a 22 46 69 72 73 74 43 6f 6c 75 6d 6e 22 7d 2c 74 65 2e 66 72 65 65 2c 6c 2c 6c 5d 2c 5b 7b 6c 61 62 65 6c 3a 6d 2e 5a 2e 74 28 22 70 61 67 65 2e 70 72 69 63 69 6e 67 5f 70 61 6e 65 6c 2e 66 65 61 74 75 72 65 5f 74 61 62 6c 65 2e 70 6f 72 74 61 6c 73 2e 66 65 61 74 75 72 65 73 2e 66 65 61 74 75 72 65 5f 33 22 29 2c 74 6f Data Ascii: umn"},ae.free,ae.pro,l],[{label:m.Z.t("page.pricing_panel.feature_table.portals.features.feature_2"),tooltip:m.Z.t("".concat(pe,".tooltip_5")),type:"FirstColumn"},te.free,l,l],[{label:m.Z.t("page.pricing_panel.feature_table.portals.features.feature_3"),to
2024-04-24 02:18:57 UTC	12611	IN	Data Raw: 3f 22 64 69 73 63 6f 75 6e 74 5f 75 70 5f 74 6f 5f 73 68 6f 72 74 22 3a 22 64 69 73 63 6f 75 6e 74 22 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 47 65 28 29 2e 54 65 72 6d 53 65 6c 65 63 74 6f 72 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 74 65 72 6d 2d 73 65 6c 65 63 74 6f 72 22 2c 63 68 69 6c 64 72 65 6e 3a 64 3f 28 30 2c 61 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 61 2e 6a 73 78 29 28 76 2e 5a 44 2c 7b 6e 61 6d 65 3a 22 54 65 72 6d 20 73 65 6c 65 63 74 6f 72 22 2c 63 68 65 63 6b 65 64 3a 72 2c 6f 6e 43 68 61 6e 67 65 3a 75 28 7b 62 69 6c 6c 69 6e 67 43 79 63 6c 65 3a 72 Data Ascii: ?"discount_up_to_short":"discount");return(0,a.jsx)("div",{className:Ge().TermSelector,"data-testid":"term-selector",children:d?(0,a.jsxs)("div",{children:[(0,a.jsx)("div",{children:(0,a.jsx)(v.ZD,{name:"Term selector",checked:r,onChange:u({billingCycle:r
2024-04-24 02:18:57 UTC	1318	IN	Data Raw: 5f 5f 69 74 65 6d 49 63 6f 6e 3a 22 55 53 50 4c 69 73 74 5f 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 49 63 6f 6e 5f 5f 4e 76 54 34 32 22 2c 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 3a 22 55 53 50 4c 69 73 74 5f 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 5f 5f 70 64 50 55 49 22 2c 22 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 22 3a 22 55 53 50 4c 69 73 74 5f 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 2d 2d 70 72 69 6d 61 72 79 5f 5f 55 4d 76 51 6b 22 2c 22 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 2d 2d 61 63 63 65 6e 74 22 3a 22 55 53 50 4c 69 73 74 5f 55 53 50 4c 69 73 74 5f 5f 69 74 65 6d 2d 2d 61 63 63 65 6e 74 5f 5f 6a 62 4a 6e 71 22 7d 7d 2c 31 39 38 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 54 65 72 6d 53 Data Ascii: __itemIcon:"USPList_USPList__itemIcon__NvT42",USPList__item:"USPList_USPList__item__pdPUI","USPList__item--primary":"USPList_USPList__item--primary__UMvQk","USPList__item--accent":"USPList_USPList__item--accent__jbJnq"}},19833:function(e){e.exports={TermS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50357	13.33.21.100	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	3238	OUT	GET /g/collect?v=2&tid=G-0M019DTWVR&gtm=45he44m0v893550495z8890364660za200&_p=1713925125026&gcs=G111&gcd=13t3tPt2t6&npa=0&dma_cps=sypham&dma=1&tcfd=10001&cid=1577694276.1713925069&ecid=496837087&ul=en-us&sr=1280x1024&ur=&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sst.rnd=1095932681.1713925125&sst.gse=1&sst.gcd=13t3tPt2t6&sst.tft=1713925125026&sst.ude=0&_s=4&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&sid=1713925068&sct=1&seg=1&dt=Pricing%20%7C%20WeTransfer%20-%20Send%20Large%20Files%20%26%20Share%20Photos%20Online%20-%20Up%20to%202GB%20Free&en=timer&ep.gtm_info=GTM-NS54WBW%7Cversion%3A122%7Cenvironment%3ALive%7Cdebug%3Afalse&ep.consent_analytics=true&ep.consent_marketing=true&ep.snowplow_user_id=c444300f-6006-4e83-9c38-3f418b9b111c&ep.snowplow_session_id=15&ep.hit_timestamp_local=2024-04-24T04%3A18%3A50.129%2B02%3A00&epn.hit_timestamp_unix=1713925130130&ep.tag_name=GA4%20-%20timer&epn.seconds_elapsed=5&ep.event_id=1713925125026-106-d5e1f2d9e45f&ep.wt_data=%7B%22navigator_language%22%3A%22en-US%22%2C%22event_id%22%3A%221713925125026-106-d5e1f2d9e45f%22%2C%22action_source%22%3A%22web%22%7D&_et=1954&tfd=11305&richsstsse HTTP/1.1 Host: tagging.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:57 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 65 Connection: close cache-control: no-cache Date: Wed, 24 Apr 2024 02:18:57 GMT set-cookie: FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; Max-Age=63072000; Domain=wetransfer.com; Path=/; Secure; HttpOnly set-cookie: _fbp=fb.1.1713925073230.1941515402; Max-Age=7776000; Domain=wetransfer.com; Path=/; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 162e0a5e43b734e69d940498f98a7bb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: NwYmKBPithgQh37Z90KxtCwbBJudpY7HNPogci7W3OFrus-Az3kfFA==
2024-04-24 02:18:57 UTC	65	IN	Data Raw: 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a Data Ascii: event: messagedata: {"response":{"status_code":200,"body":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50360	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	856	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926035103
2024-04-24 02:18:57 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b1ef6ba7e467ee00b7e5f07d263b2d12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: T43-NAW2Efu_URspLIIA6zmEoh2Kn006Y-EhIDNJl_aM9eF_vlhsiA== Age: 71305
2024-04-24 02:18:57 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50363	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	722	OUT	GET /tr/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:57 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 02:18:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50361	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	1963	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:58 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:18:58 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:18:58 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50366	31.13.70.36	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	759	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1904796869803472&ev=timer&dl=https%3A%2F%2Fwetransfer.com%2Fpricing%3Ftrk%3DNAV_pricing&rl=&if=false&ts=1713925130136&cd[page_path]=%2Fpricing&cd[seconds_elapsed]=5&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4126&fbp=fb.1.1713925073230.1941515402&ler=empty&cdl=API_unavailable&it=1713925126278&coo=false&eid=1713925125026-106-d5e1f2d9e45f&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:58 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 02:18:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 02:18:58 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50365	34.215.30.93	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:57 UTC	1710	OUT	GET /dt?advEntityId=1566598&asId=7f0967af-b568-56c1-bdd1-f263bedbcb3c&tv=%7Bc:aLnZNY,pingTime:-10,time:4545,type:s,mvn:ZnNjPTEzLHNkPTMsbm89OCxhc3A9MQ--,sd:MTcuNi4ydjk4NHx8MTI4MHx8MXx8MXx8MjR8fDEwMjR8fDB8fDB8fDF8fGxhbmRzY2FwZS1wcmltYXJ5fHwyNHx8NS80fHw1LzR8fDB8fDEyODA-,no:MTcuNi4ydk1vemlsbGF8fE5ldHNjYXBlfHxufHxufHwwfHxufHxXaW4zMnx8R2Vja298fDIwMDMwMTA3fHwtMTIwfHxNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzZ8fDF8fDF8fEdvb2dsZSBJbmMufHxu,ch:n,fsc:17.6.2v222222220002222202222222220222222222202222222220222202000022000220222222220000222202002222202222222220222222220000020022222200022222220200000222200022220002022022022222202002220222022222022220000220200000022220222220222222222222202222222222222222222222222222222222222200000022022020020000002022202022022022222222000000000020222202022022222000000020000000000000000000020220202220000022200222202220022200200222022202220022220222200202222020002200002222022222202222000002002002222222202220022202200222002220222202,asp:1713925135237%7C%7Cde86bd9db1f497ec38edd91c2baa2a56%7C%7C22210ca73bf1af2ec2eace74a96ee356%7C%7C4cb7186908e680e6db746fddf8679a7e%7C%7C8bbca06e0e1b671af6eef268eb3ab302%7C%7C8a238fd2d8c80cbf7f58273074fb06d1%7C%7C136f9c12087b100fb754616b3bd49015%7C%7C2bdebd58842d2d570efc06acb249967a%7C%7C1663701684%7D HTTP/1.1 Host: dt.adsafeprotected.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:58 UTC	256	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx P3P: CP="COM NAV INT STA NID OUR IND NOI" Pragma: no-cache Cache-Control: no-cache X-Server-Name: dt29.or.303net.net
2024-04-24 02:18:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50368	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	2492	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926036939&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc8hs.10.3.13
2024-04-24 02:18:58 UTC	785	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:18:58 GMT ETag: W/"4380e7dc2835765ffb8a685c7adfdb47" Set-Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-2528k-207193 X-Request-Id: 40780b48e677102b3ec85be978d795f9 X-Runtime: 0.011659 X-Cache: Miss from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 05-FGkpIc3BDwAjUJPUCWCGGEoiYKUqPgoyqWloFe1R64kzfP2B1DA==
2024-04-24 02:18:58 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50372	18.154.206.107	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714958584036 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926035103 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-24 02:18:58 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:18:58 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 a6cf1a5f27a80935d88af3acfaa3a984.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: tO9GEFqWhqdPDNkcloNQWUNY63NnuGUfXY9uRRypXkW0mfFhD-ZTwA== Age: 62335

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.5	50369	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	1987	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc30s.u.3.11; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21
2024-04-24 02:18:58 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:18:58 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:18:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50371	52.88.50.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:58 UTC	1169	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 30 31 30 63 33 61 30 38 62 61 38 39 64 64 31 32 38 32 33 62 30 61 61 63 62 32 33 36 35 35 63 61 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 33 36 39 35 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 Data Ascii: checksum=010c3a08ba89dd12823b0aacb23655ca&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925136953%2C%22event_id%22%3A31%2C%22session_id%22%3A1713925074977%2C%2
2024-04-24 02:18:58 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:58 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c12-390dad107b41b57652456457 Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:58 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50374	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	2272	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9c4.13.3.16
2024-04-24 02:18:59 UTC	604	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 22 Apr 2024 10:44:08 GMT Last-Modified: Mon, 22 Apr 2024 10:11:24 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FUTHSmtBNPtaPtXpWjii8wDw71wXTGGV3pblvDe6ZWIwPOeRUYglpg== Age: 142492
2024-04-24 02:18:59 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50375	18.154.132.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:58 UTC	2183	OUT	GET /api/v4/nu_subscriptions/tiers?country_code=US HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; _dd_s=rum=0&expire=1713926036939&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9c4.13.3.16
2024-04-24 02:18:59 UTC	785	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5500 Connection: close Cache-Control: max-age=0, private, must-revalidate Date: Wed, 24 Apr 2024 02:18:59 GMT ETag: W/"4380e7dc2835765ffb8a685c7adfdb47" Set-Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; domain=.wetransfer.com Strict-Transport-Security: max-age=31536000; includeSubDomains vary: Accept-Encoding, Origin X-Frame-Options: deny X-Opaque: b26dcfb6c70577145f8cd31b32396a664a4b8020-s86zx-205938 X-Request-Id: 9c1cfb12b8fca62fd41d4ee123baeb29 X-Runtime: 0.010428 X-Cache: Miss from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fD4GUrkOSSLmI2pr7wnHL3f3P1d9qfYgvRzqOkmrIeFpnc2IQYuKEQ==
2024-04-24 02:18:59 UTC	5500	IN	Data Raw: 7b 0a 20 20 22 66 72 65 65 22 3a 20 7b 0a 20 20 20 20 22 70 61 63 6b 61 67 65 5f 63 6f 64 65 22 3a 20 22 41 43 43 4f 55 4e 54 5f 46 52 45 45 5f 56 31 22 2c 0a 20 20 20 20 22 70 72 6f 64 75 63 74 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 20 22 57 65 54 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 20 22 79 65 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 22 65 72 72 6f 72 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 22 70 6c 61 6e 5f 69 64 22 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 22 70 61 63 6b 61 67 65 5f 61 6e 64 5f 70 72 69 63 65 5f 74 6f 6b 65 6e 22 3a 20 22 65 79 4a 66 63 6d 46 70 62 48 4d 69 4f 6e 73 69 62 57 56 7a 63 32 46 6e 5a 53 49 36 49 6b 4a 42 61 44 64 43 65 6d 39 6c 57 6c 63 31 4d 47 46 59 55 6e 4e 61 56 7a 46 73 59 6d 35 53 65 6c 67 7a 51 6d 68 5a 4d Data Ascii: { "free": { "package_code": "ACCOUNT_FREE_V1", "product_display_name": "WeTransfer", "year": { "error": null, "plan_id": 107, "package_and_price_token": "eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9lWlc1MGFYUnNaVzFsYm5SelgzQmhZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50377	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	637	OUT	GET /_next/static/media/ActiefGrotesque-Bold.10832e10.woff2 HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/7eebedc3bb83273f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:59 UTC	753	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 27440 Connection: close Date: Thu, 02 Nov 2023 10:27:52 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Thu, 02 Nov 2023 09:51:45 GMT ETag: "a618eb8ddd7af554656002bcfdecfe86" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 afdb1da50225c72a4232b3531193b400.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: L7V5yYGjwERyZlp4_VT-iU-GGWoS5sVm8rly2B8W3QvQKO6E_SZDJQ== Age: 15004268
2024-04-24 02:18:59 UTC	15631	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b 30 00 12 00 00 00 01 15 64 00 00 6a c4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 34 1b e7 1c 1c a6 70 06 60 00 87 6e 08 97 72 09 8d 57 11 10 0a 82 9d 34 81 f5 52 0b 88 26 00 01 36 02 24 03 90 48 04 20 05 8e 5c 07 9e 7e 0c 85 33 1b 23 fc 57 d0 db f6 48 d0 9d 00 95 68 6d eb 77 87 91 08 dd 0e 50 42 ba 1f 1c 19 c8 e3 00 a2 fb 3d 65 ff ff ff 9f 99 54 64 cc 34 9b 69 cb 00 1c c2 40 bd b7 82 e4 10 53 08 99 93 22 85 a9 cd 88 14 16 ac 6e db 06 37 93 c2 ac 0e a7 f1 34 2e bb 96 37 aa 8a 9d b7 69 87 4c 0b bc 8e 73 98 0d 0b 11 2e 67 5e ef e4 cb 75 74 33 ee 29 e9 2d 36 89 ea 2d b7 ba 77 0f c8 34 c8 25 e9 86 36 21 d0 d1 73 97 fd a8 6e 43 18 1f 32 17 99 d9 40 94 65 85 03 7a 90 2f 2e 31 Data Ascii: wOF2k0dj?FFTM4p`nrW4R&6$H \~3#WHhmwPB=eTd4i@S"n74.7iLs.g^ut3)-6-w4%6!snC2@ez/.1
2024-04-24 02:18:59 UTC	11809	IN	Data Raw: 39 f2 3f 55 f0 42 c0 44 2e fd 7f 99 63 37 ea 27 0f fe 24 35 c0 a4 7e 49 23 4d 02 a4 25 76 1b b9 48 bb 0f 30 5c 8c e5 b8 05 ae 82 3d c4 72 64 c3 db db da 88 d9 36 93 db 67 31 aa 08 c3 07 df da c5 d2 f8 0b fd 11 8f 29 0f 90 99 6a b3 34 2a 39 76 8e 4a 7b 1d 94 94 10 31 00 0a 21 e3 0e 93 05 a3 4d 35 ab 6f 65 b0 22 38 ed 69 b2 d9 68 d3 d0 82 b3 4f 72 e5 ff 6a e0 56 c0 44 2c 7e f9 43 65 a7 bd c0 b5 a7 b9 b8 7f 7d 27 19 a4 5e 26 f5 6b 01 59 a5 d0 1a e0 31 ed 3a 6e b1 ce 50 c4 d5 b4 34 d4 c0 aa 07 31 c7 de d0 90 29 cd c7 0e c2 63 fb b4 3b 11 b1 c1 a3 39 fa 4c 25 2b 3c 0e 6a eb 5e db ad 0e 33 de e4 44 37 d8 bd a2 dd 66 94 75 4d a0 38 95 f7 ef 2b d4 fb 95 9b 0b be 3b 94 b1 9a b8 2e a6 3c ba fa 87 d5 a5 e0 8e 42 76 c7 ef cd d1 5b 37 c9 69 c1 93 5a cd 16 05 2d 78 46 Data Ascii: 9?UBD.c7'$5~I#M%vH0\=rd6g1)j4*9vJ{1!M5oe"8ihOrjVD,~Ce}'^&kY1:nP41)c;9L%+<j^3D7fuM8+;.<Bv[7iZ-xF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50378	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	815	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:59 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2869 Connection: close Last-Modified: Tue, 02 Apr 2024 13:07:10 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:19:00 GMT ETag: "48d0405834ea5ad28701cf9e867c8c6b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8eba96584a898f8a357fb6316ffd8f16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: MVwK6CHP_5dYdq6Vyk-YHoW_chUpSYmcWJRmp9fbzCOYV2t-kkBk8Q==
2024-04-24 02:18:59 UTC	2869	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50379	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	2590	OUT	POST /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Amplitude-Language: en-US sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json, text/plain, / X-Amplitude-Platform: Web X-Amplitude-Device-Id: -0UZbBiWgvIoxMYdttvskM X-Amplitude-Country: US X-App-Origin: decoupled sec-ch-ua-platform: "Windows" Origin: https://wetransfer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925113869\|3\|1\|bat.bing.com/p/insights/c/d; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _dd_s=rum=0&expire=1713926036939&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969&lock=387a2bef-16ac-4f8c-94e8-2aa091b8cd9a
2024-04-24 02:18:59 UTC	119	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 74 79 70 65 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2e 30 35 38 31 33 31 32 30 31 37 36 34 30 35 37 33 33 2c 22 74 61 67 73 22 3a 7b 22 72 61 74 69 6e 67 22 3a 22 67 6f 6f 64 22 2c 22 70 61 67 65 5f 67 72 6f 75 70 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 7d Data Ascii: {"name":"CLS","type":"view","time":0.05813120176405733,"tags":{"rating":"good","page_group":"/pricing","country":"US"}}
2024-04-24 02:18:59 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Date: Wed, 24 Apr 2024 02:18:59 GMT ETag: "39-yuR37zlVtZdQxwVukIsMP4XRC0A" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8c61d22bf169c76fd04a4b3420e5a87c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zqv_tsGHU5tpBLtai1xc3_uzMV6PYPmF2U2oZ3Q17eMLW_4Lc0_zWA==
2024-04-24 02:18:59 UTC	57	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 6d 65 74 72 69 63 22 3a 22 43 4c 53 22 2c 22 74 69 6d 65 22 3a 30 2e 30 35 38 31 33 31 32 30 31 37 36 34 30 35 37 33 33 7d Data Ascii: {"status":"ok","metric":"CLS","time":0.05813120176405733}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50380	52.88.50.113	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	674	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 5443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:59 UTC	5443	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 32 33 32 36 32 32 32 39 31 64 39 66 30 30 61 32 32 39 35 37 33 63 66 39 33 65 61 31 64 35 31 61 26 63 6c 69 65 6e 74 3d 38 37 34 62 37 37 31 36 33 39 64 65 66 65 33 31 61 37 37 62 31 35 38 35 62 31 62 61 39 38 31 66 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 2d 30 55 5a 62 42 69 57 67 76 49 6f 78 4d 59 64 74 74 76 73 6b 4d 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 39 32 35 31 33 36 39 35 36 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 39 32 35 30 37 34 39 37 37 25 32 43 25 32 Data Ascii: checksum=232622291d9f00a229573cf93ea1d51a&client=874b771639defe31a77b1585b1ba981f&e=%5B%7B%22device_id%22%3A%22-0UZbBiWgvIoxMYdttvskM%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1713925136956%2C%22event_id%22%3A32%2C%22session_id%22%3A1713925074977%2C%2
2024-04-24 02:18:59 UTC	334	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:18:59 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c13-170eb95472ec537e2f513c87 Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:59 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50381	54.218.244.204	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:18:59 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:18:59 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c13-0b625eab42d32e220559ef4b Strict-Transport-Security: max-age=15768000
2024-04-24 02:18:59 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50383	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:18:59 UTC	636	OUT	GET /_next/static/media/ActiefGrotesque_W_Bd.6d0b90be.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:00 UTC	752	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 30776 Connection: close Date: Wed, 13 Dec 2023 09:02:08 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Wed, 13 Dec 2023 08:46:33 GMT ETag: "3e43992e4e2c4420a860c2dced8cc368" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tQgQGIyI_6mJZIZRmwaBtVuiBFaOMRUxqzDd2Zl24p5DgOub9UP-2A== Age: 11467013
2024-04-24 02:19:00 UTC	15632	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 78 38 00 11 00 00 00 00 f7 3c 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 67 f0 00 00 00 1c 00 00 00 1c 02 6f 02 5d 47 50 4f 53 00 00 68 0c 00 00 0b 72 00 00 33 76 05 d1 ac b7 47 53 55 42 00 00 73 80 00 00 04 b7 00 00 09 38 2d 8e 6a 51 4f 53 2f 32 00 00 01 f8 00 00 00 59 00 00 00 60 87 fb 63 ae 63 6d 61 70 00 00 05 ec 00 00 01 d7 00 00 02 ae 3b ca 3c db 63 76 74 20 00 00 0d 90 00 00 01 74 00 00 0b f2 4f c3 2d 95 66 70 67 6d 00 00 07 c4 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 67 e4 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 13 20 00 00 53 85 00 00 90 94 30 39 ec 9c 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 17 8c 43 9a 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFx8<GDEFgo]GPOShr3vGSUBs8-jQOS/2Y`ccmap;<cvt tO-fpgm06gaspgglyf S09head66Chhea
2024-04-24 02:19:00 UTC	15144	IN	Data Raw: 30 ce 67 e9 45 55 56 82 c8 44 3f 52 98 cf 92 a6 86 85 4f df af ed 01 95 5b 8f 55 55 ce b6 9b 5c b3 44 6e 6f 8d b5 e2 53 e8 4d da 4c 91 12 87 66 18 b4 05 eb ca d5 1a 0e 15 32 2d 70 8b 02 f7 d3 06 2e dd 09 b8 ee 0b e0 96 af 86 79 97 28 b0 9f 02 25 22 77 f0 79 c7 68 1b ba 9b c8 64 18 d4 ef 2e 33 66 59 35 ab dd a6 98 88 4d a1 65 d8 cb 10 54 80 92 d0 46 3d e8 0f 1e da 7d e4 c8 ee 87 e0 47 7c c5 51 f6 d3 d1 23 ec 47 84 24 fa e4 af d0 27 9b 10 8b ad 95 a9 05 0c 67 33 e5 98 29 9f 98 89 46 14 27 0a 9b 6c 01 39 3f e3 b0 db e8 a9 ff 4e ff 59 16 1b a4 3f 79 d9 23 c4 25 b1 11 b1 70 11 1e ac d0 6c 41 b1 a8 1d fe d0 db 7b fa 98 a8 f8 aa 6d 03 9b 06 87 46 a9 ae 78 d7 d0 95 85 d1 4d 5f 29 4f 5d bd 3f bf be a3 ff ea fd f1 4b fb 8e ce b3 13 9d df d1 79 59 df 3b ae 65 bf 0c Data Ascii: 0gEUVD?RO[UU\DnoSMLf2-p.y(%"wyhd.3fY5MeTF=}G\|Q#G$'g3)F'l9?NY?y#%plA{mFxM_)O]?KyY;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50384	18.154.132.38	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:00 UTC	635	OUT	GET /_next/static/media/GT-Super-WT-Regular.20d77fe0.woff HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wetransfer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.wetransfer.com/_next/static/css/3471d3babf255274.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:00 UTC	751	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 43796 Connection: close Date: Mon, 12 Feb 2024 09:00:00 GMT Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Feb 2024 08:28:20 GMT ETag: "5321545e6fd1cec2eb1ee4b745f450a1" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 1af8ffe0ba83dcdd46617da36786bf1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HNiDLCxWVqHMev4VpHr11vhGdDLEOaRAtIUsG4ntfcvhiVXLIkc9Nw== Age: 6196741
2024-04-24 02:19:00 UTC	15633	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 ab 14 00 12 00 00 00 01 74 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 ab 0c 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 8a 00 00 00 b8 18 df 1f 89 47 50 4f 53 00 00 02 20 00 00 16 21 00 00 36 ac ea 09 31 e8 47 53 55 42 00 00 18 44 00 00 05 ba 00 00 0e 5e fa 5f c1 8f 4f 53 2f 32 00 00 1e 00 00 00 00 4e 00 00 00 60 68 79 81 ab 63 6d 61 70 00 00 1e 50 00 00 03 18 00 00 04 68 3d 6a f9 63 63 76 74 20 00 00 a3 8c 00 00 00 29 00 00 00 34 0b ae 02 e0 66 70 67 6d 00 00 a3 b8 00 00 06 c1 00 00 0e 15 9e 36 11 ca 67 61 73 70 00 00 a3 84 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 68 00 00 73 d1 00 01 00 2a fd a7 0a f0 68 65 61 64 00 00 95 3c 00 00 00 Data Ascii: wOFFtDSIGGDEFGPOS !61GSUBD^_OS/2N`hycmapPh=jccvt )4fpgm6gaspglyf!hs*head<
2024-04-24 02:19:00 UTC	16384	IN	Data Raw: d5 67 14 e1 2d 8b 61 4a 75 56 56 15 7f e7 c0 a8 f1 38 8f e9 60 6d 48 e5 72 00 b9 e5 dc f2 fc 5c a3 ae a4 69 01 5f 69 da 58 e0 8b 3a e5 c9 46 5c ba 34 f4 64 0f 17 5e 45 da a6 0f 2f c2 97 d3 7c 0e 7e 41 fa 72 54 cd c1 df 8b df ed b3 2c 2a 87 ae c0 73 d5 1e 1e 00 c2 70 b3 9d b6 1b 86 dc 90 b4 37 6f c9 06 53 9a 71 a7 50 c1 d7 70 94 4d 44 db a8 3e 48 22 99 a4 34 59 49 f2 22 97 26 68 bc 1d ad 58 9c c7 b8 2c 0f 7c ce c4 7c 8f 97 0a 57 8d 38 16 23 4b 06 36 ee 6c 8c 07 f7 f3 95 34 c1 c6 cd 90 1b 8f 25 bf d5 44 5e 69 82 bf e5 48 a3 88 36 52 d0 73 02 3a 80 06 3f 65 87 9a c0 40 a8 e1 47 00 3a c5 a3 ce 75 23 18 90 a1 67 1c 05 0a bf aa 53 6a f0 2a 95 01 d8 34 34 ec 2d 40 53 15 24 94 aa f6 85 38 06 6d 6c 58 c8 6e ed 28 0d 9e 84 b8 87 e9 68 ab 88 c3 2a 23 b7 72 f3 69 29 Data Ascii: g-aJuVV8`mHr\i_iX:F\4d^E/\|~ArT,sp7oSqPpMD>H"4YI"&hX,\|\|W8#K6l4%D^iH6Rs:?e@G:u#gSj44-@S$8mlXn(h*#ri)
2024-04-24 02:19:00 UTC	11779	IN	Data Raw: 5e 40 9e 81 8d cc 52 d8 5b 21 28 05 91 ad 6d a0 05 09 b5 d2 71 35 2e 4d 00 22 b2 fd 02 d7 ab 02 97 fc 4c a7 9a 2e 24 e3 89 64 92 f6 33 dc 28 ec 55 e1 a5 5a 9e 95 cd 6d b3 80 34 29 ae 82 d2 79 49 6e e7 d2 dd 07 29 1c d4 9e 2d 03 57 f5 57 da f2 95 de 8c c7 e1 18 8a 97 07 bb f7 0e 2c 5e 3d 38 7e f7 cc e6 f1 db b6 6c 7c 7d fb 94 68 99 39 5a c9 77 b4 f7 dc 87 1f bb 7d db 8e 97 cc 76 ef 1b 9a 58 2c 6e 2e b6 55 2a b9 54 b7 d6 17 1c a9 94 17 da 16 47 8b b3 b1 e9 e4 b5 63 a3 47 7a e3 81 cf 0d 1d ee 4f b4 06 3b 5a e6 e5 b5 9d e3 73 fc 13 14 e0 89 07 d2 c8 33 a5 2b a9 09 44 ad a0 15 4f 83 56 ab 64 40 27 08 20 ec 97 90 c5 96 ea b0 1e 6f 6a 6a 52 d7 d5 bc ae 92 6e 80 d7 15 ce 5e ba e1 2b a9 c7 76 be cc 01 da ed 8e b9 62 54 3d 9f e4 21 81 dc 83 2d 1e 57 41 40 14 13 1d Data Ascii: ^@R[!(mq5.M"L.$d3(UZm4)yIn)-WW,^=8~l\|}h9Zw}vX,n.U*TGcGzO;Zs3+DOVd@' ojjRn^+vbT=!-WA@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50385	18.154.132.120	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:00 UTC	1998	OUT	GET /_next/static/media/PricingBackground.74fe38a7.svg HTTP/1.1 Host: cdn.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:19:00 UTC	604	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3034 Connection: close Date: Mon, 22 Apr 2024 10:44:08 GMT Last-Modified: Mon, 22 Apr 2024 10:11:24 GMT ETag: "e8d839e4446a45008dddb79785e8a3e5" x-amz-server-side-encryption: AES256 Cache-Control: immutable,max-age=31536000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90f4da7b6a38ba227dc0bb05ee803fe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lozfUmSMh1uKUQ8ZZjM3osXgOi8nYAVs8mj9DXeQdE81WDY8ubOC5A== Age: 142493
2024-04-24 02:19:00 UTC	3034	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 36 30 22 20 68 65 69 67 68 74 3d 22 36 39 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 30 20 36 39 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 66 5f 32 31 38 38 5f 34 33 31 35 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 32 38 2e 30 34 36 20 2d 31 30 35 2e 33 35 38 4c 36 32 38 2e 30 34 34 20 2d 31 30 34 2e 30 31 32 43 36 32 37 2e 38 34 33 20 33 37 2e 37 30 32 38 20 35 38 35 2e 37 36 32 20 31 30 35 2e 33 34 Data Ascii: <svg width="1360" height="697" viewBox="0 0 1360 697" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_2188_43155)"><g filter="url(#filter0_f_2188_43155)"><path d="M628.046 -105.358L628.044 -104.012C627.843 37.7028 585.762 105.34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50387	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:00 UTC	734	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/bundle.c2e5335b92e3c7a2b1f4.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:01 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 290588 Connection: close Date: Wed, 24 Apr 2024 02:19:01 GMT Last-Modified: Tue, 02 Apr 2024 13:07:07 GMT ETag: "fe037e4b086257f693da393e98821f6b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6ceeb15f7cb3fbceefef9287ec267072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: A3Xxy30V2KTT3j2DJ7c-z2ENTSXCjYLskbm0Pq8nDhYuGSqLaMoGYQ==
2024-04-24 02:19:01 UTC	15868	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 63 32 65 35 33 33 35 62 39 32 65 33 63 37 61 32 62 31 66 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 38 31 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3b 72 2e 72 28 74 29 2c Data Ascii: /! For license information please see bundle.c2e5335b92e3c7a2b1f4.js.LICENSE.txt /!function(){var e,t,r={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},8131:function(e,t,r){"use strict";let n;r.r(t),
2024-04-24 02:19:01 UTC	1028	IN	Data Raw: 65 74 75 72 6e 20 65 5b 74 5d 7d 29 29 7d 2c 58 3d 7b 73 68 61 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 65 3b 72 2e 6c 65 6e 67 74 68 3b 72 3d 72 5b 30 5d 29 74 2e 70 75 73 68 28 72 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 7d 2c 66 6c 61 74 74 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 69 3d 31 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 69 2a 3d 74 5b 61 5d 3b 65 6c 73 65 20 69 3d 30 3b 76 61 72 20 6f 3d 6e 7c 7c 71 2e 61 6c 6c 6f 63 54 79 70 65 28 72 2c 69 29 3b 73 77 69 74 63 68 28 74 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 21 66 75 6e 63 74 Data Ascii: eturn e[t]}))},X={shape:function(e){for(var t=[],r=e;r.length;r=r[0])t.push(r.length);return t},flatten:function(e,t,r,n){var i=1;if(t.length)for(var a=0;a<t.length;++a)i*=t[a];else i=0;var o=n\|\|q.allocType(r,i);switch(t.length){case 0:break;case 1:!funct
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 6f 61 74 33 32 41 72 72 61 79 5d 22 3a 35 31 32 36 2c 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 36 34 41 72 72 61 79 5d 22 3a 35 31 32 31 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3a 35 31 32 31 7d 2c 4a 3d 7b 69 6e 74 38 3a 35 31 32 30 2c 69 6e 74 31 36 3a 35 31 32 32 2c 69 6e 74 33 32 3a 35 31 32 34 2c 75 69 6e 74 38 3a 35 31 32 31 2c 75 69 6e 74 31 36 3a 35 31 32 33 2c 75 69 6e 74 33 32 3a 35 31 32 35 2c 66 6c 6f 61 74 3a 35 31 32 36 2c 66 6c 6f 61 74 33 32 3a 35 31 32 36 7d 2c 65 65 3d 7b 64 79 6e 61 6d 69 63 3a 33 35 30 34 38 2c 73 74 72 65 61 6d 3a 33 35 30 34 30 2c 73 74 61 74 69 63 3a 33 35 30 34 34 7d 2c 74 65 3d 58 2e 66 6c 61 74 74 65 6e 2c 72 65 3d 58 2e 73 68 61 70 65 2c 6e 65 3d 33 35 30 34 34 2c 69 65 3d 33 35 30 Data Ascii: oat32Array]":5126,"[object Float64Array]":5121,"[object ArrayBuffer]":5121},J={int8:5120,int16:5122,int32:5124,uint8:5121,uint16:5123,uint32:5125,float:5126,float32:5126},ee={dynamic:35048,stream:35040,static:35044},te=X.flatten,re=X.shape,ne=35044,ie=350
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 6c 3d 6e 65 77 20 74 65 28 46 65 29 3b 5a 5b 6c 2e 69 64 5d 3d 6c 2c 73 2e 63 75 62 65 43 6f 75 6e 74 2b 2b 3b 76 61 72 20 66 3d 6e 65 77 20 41 72 72 61 79 28 36 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 72 2c 6e 2c 61 2c 6f 29 7b 76 61 72 20 73 2c 63 3d 6c 2e 74 65 78 49 6e 66 6f 3b 66 6f 72 28 48 2e 63 61 6c 6c 28 63 29 2c 73 3d 30 3b 73 3c 36 3b 2b 2b 73 29 66 5b 73 5d 3d 56 28 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 26 26 65 29 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 74 29 49 28 66 5b 30 5d 2c 65 29 2c 49 28 66 5b 31 5d 2c 74 29 2c 49 28 66 5b 32 5d 2c 72 29 2c 49 28 66 5b 33 5d 2c 6e 29 2c 49 28 66 5b 34 5d 2c 61 29 2c 49 28 66 5b 35 5d 2c 6f 29 3b 65 6c 73 65 Data Ascii: ){var l=new te(Fe);Z[l.id]=l,s.cubeCount++;var f=new Array(6);function p(e,t,r,n,a,o){var s,c=l.texInfo;for(H.call(c),s=0;s<6;++s)f[s]=V();if("number"!=typeof e&&e)if("object"==typeof e)if(t)I(f[0],e),I(f[1],t),I(f[2],r),I(f[3],n),I(f[4],a),I(f[5],o);else
2024-04-24 02:19:01 UTC	2048	IN	Data Raw: 73 6f 72 5f 62 6f 78 3a 61 28 4f 6e 29 7d 7d 28 65 2c 62 2c 70 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 73 74 61 74 69 63 2c 6e 3d 65 2e 64 79 6e 61 6d 69 63 2c 69 3d 7b 7d 2c 61 3d 21 31 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 49 6e 20 69 6e 20 72 29 7b 76 61 72 20 65 3d 72 5b 49 6e 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 3d 3d 3d 6c 2e 67 65 74 56 41 4f 28 65 29 26 26 28 65 3d 6c 2e 63 72 65 61 74 65 56 41 4f 28 65 29 29 2c 61 3d 21 30 2c 69 2e 76 61 6f 3d 65 2c 4b 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 6c 2e 67 65 74 56 41 4f 28 65 29 3b 72 65 74 75 72 6e 20 72 3f 74 2e 6c 69 6e 6b 28 72 29 3a 22 6e 75 6c 6c 22 7d 29 29 7d 69 66 28 49 6e 20 69 6e 20 6e Data Ascii: sor_box:a(On)}}(e,b,p),w=function(e,t){var r=e.static,n=e.dynamic,i={},a=!1,s=function(){if(In in r){var e=r[In];return null!==e&&null===l.getVAO(e)&&(e=l.createVAO(e)),a=!0,i.vao=e,Ki((function(t){var r=l.getVAO(e);return r?t.link(r):"null"}))}if(In in n
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 69 2e 70 72 69 6d 69 74 69 76 65 3d 65 2c 43 2e 63 6f 6d 6d 61 6e 64 50 61 72 61 6d 65 74 65 72 28 65 2c 66 65 2c 22 69 6e 76 61 6c 69 64 20 70 72 69 6d 69 74 76 65 22 2c 74 2e 63 6f 6d 6d 61 6e 64 53 74 72 29 2c 4b 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 66 65 5b 65 5d 7d 29 29 7d 69 66 28 4d 6e 20 69 6e 20 6e 29 7b 76 61 72 20 6f 3d 6e 5b 4d 6e 5d 3b 72 65 74 75 72 6e 20 5a 69 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 63 6f 6e 73 74 61 6e 74 73 2e 70 72 69 6d 54 79 70 65 73 2c 6e 3d 65 2e 69 6e 76 6f 6b 65 28 74 2c 6f 29 3b 72 65 74 75 72 6e 20 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 73 73 65 72 74 28 74 2c 6e 2b 22 20 69 6e 20 22 Data Ascii: eturn i.primitive=e,C.commandParameter(e,fe,"invalid primitve",t.commandStr),Ki((function(t,r){return fe[e]}))}if(Mn in n){var o=n[Mn];return Zi(o,(function(e,t){var r=e.constants.primTypes,n=e.invoke(t,o);return C.optional((function(){e.assert(t,n+" in "
2024-04-24 02:19:01 UTC	1024	IN	Data Raw: 63 3d 65 2e 63 6f 6e 64 28 73 2c 22 2e 64 69 72 74 79 22 29 3b 6b 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 6c 2c 66 3d 41 28 74 29 3b 69 66 28 21 28 66 20 69 6e 20 72 2e 73 74 61 74 65 29 29 69 66 28 66 20 69 6e 20 6f 29 7b 6e 3d 6f 5b 66 5d 2c 6c 3d 61 5b 66 5d 3b 76 61 72 20 70 3d 49 28 77 5b 66 5d 2e 6c 65 6e 67 74 68 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 2e 64 65 66 28 6e 2c 22 5b 22 2c 65 2c 22 5d 22 29 7d 29 29 3b 63 28 65 2e 63 6f 6e 64 28 70 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 22 21 3d 3d 22 2b 6c 2b 22 5b 22 2b 74 2b 22 5d 22 7d 29 29 2e 6a 6f 69 6e 28 22 7c 7c 22 29 29 2e 74 68 65 6e 28 69 2c 22 2e 22 2c 54 5b 66 5d 2c 22 28 Data Ascii: c=e.cond(s,".dirty");k.forEach((function(t){var n,l,f=A(t);if(!(f in r.state))if(f in o){n=o[f],l=a[f];var p=I(w[f].length,(function(e){return c.def(n,"[",e,"]")}));c(e.cond(p.map((function(e,t){return e+"!=="+l+"["+t+"]"})).join("\|\|")).then(i,".",T[f],"(
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 22 2c 6f 2c 22 2e 22 2c 69 2c 22 3d 22 2c 63 2c 22 3b 22 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 79 26 26 28 65 2e 69 6e 73 74 61 6e 63 69 6e 67 3d 74 2e 64 65 66 28 65 2e 73 68 61 72 65 64 2e 65 78 74 65 6e 73 69 6f 6e 73 2c 22 2e 61 6e 67 6c 65 5f 69 6e 73 74 61 6e 63 65 64 5f 61 72 72 61 79 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 76 61 72 20 61 2c 6f 2c 73 2c 75 3d 65 2e 73 68 61 72 65 64 2c 63 3d 65 2e 73 74 61 74 73 2c 6c 3d 75 2e 63 75 72 72 65 6e 74 2c 66 3d 75 2e 74 69 6d 65 72 2c 70 3d 72 2e 70 72 6f 66 69 6c 65 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 44 61 74 65 Data Ascii: ",o,".",i,"=",c,";")}}))}function L(e,t){y&&(e.instancing=t.def(e.shared.extensions,".angle_instanced_arrays"))}function q(e,t,r,n,i){var a,o,s,u=e.shared,c=e.stats,l=u.current,f=u.timer,p=r.profile;function d(){return"undefined"==typeof performance?"Date
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 6e 20 6e 28 65 29 7b 72 2e 70 75 73 68 28 65 29 7d 76 61 72 20 69 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 73 74 61 72 74 51 75 65 72 79 49 6e 64 65 78 3d 2d 31 2c 74 68 69 73 2e 65 6e 64 51 75 65 72 79 49 6e 64 65 78 3d 2d 31 2c 74 68 69 73 2e 73 75 6d 3d 30 2c 74 68 69 73 2e 73 74 61 74 73 3d 6e 75 6c 6c 7d 76 61 72 20 6f 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 6f 2e 70 75 73 68 28 65 29 7d 76 61 72 20 75 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 6f 2e 70 6f 70 28 29 7c 7c 6e 65 77 20 61 3b 6e 2e 73 74 61 72 74 51 75 65 72 79 49 6e 64 65 78 3d 65 2c 6e 2e 65 6e 64 51 75 65 72 79 49 6e 64 65 78 3d 74 2c 6e 2e 73 75 6d 3d 30 2c 6e 2e 73 74 61 74 73 3d 72 2c 75 2e 70 75 73 68 Data Ascii: n n(e){r.push(e)}var i=[];function a(){this.startQueryIndex=-1,this.endQueryIndex=-1,this.sum=0,this.stats=null}var o=[];function s(e){o.push(e)}var u=[];function c(e,t,r){var n=o.pop()\|\|new a;n.startQueryIndex=e,n.endQueryIndex=t,n.sum=0,n.stats=r,u.push
2024-04-24 02:19:01 UTC	16384	IN	Data Raw: 75 6c 6c 29 29 7d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 76 61 6f 29 7b 76 61 72 20 65 3d 68 28 29 3b 74 68 69 73 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 56 41 4f 26 26 28 64 2e 63 75 72 72 65 6e 74 56 41 4f 3d 6e 75 6c 6c 2c 65 2e 62 69 6e 64 56 65 72 74 65 78 41 72 72 61 79 4f 45 53 28 6e 75 6c 6c 29 29 2c 65 2e 64 65 6c 65 74 65 56 65 72 74 65 78 41 72 72 61 79 4f 45 53 28 74 68 69 73 2e 76 61 6f 29 2c 74 68 69 73 2e 76 61 6f 3d 6e 75 6c 6c 7d 74 68 69 73 2e 6f 77 6e 73 45 6c 65 6d 65 6e 74 73 26 26 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 77 6e 73 45 6c 65 6d 65 6e 74 Data Ascii: ull))},v.prototype.destroy=function(){if(this.vao){var e=h();this===d.currentVAO&&(d.currentVAO=null,e.bindVertexArrayOES(null)),e.deleteVertexArrayOES(this.vao),this.vao=null}this.ownsElements&&(this.elements.destroy(),this.elements=null,this.ownsElement

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50388	18.154.132.7	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:00 UTC	2108	OUT	GET /api/web-metrics HTTP/1.1 Host: wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_874b77=-0UZbBiWgvIoxMYdttvskM..........; wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925134.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.21; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _dd_s=rum=0&expire=1713926038162&logs=1&id=4ca1d26a-b136-4a07-b19b-d9d6862d81b1&created=1713925074969; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d
2024-04-24 02:19:00 UTC	675	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Date: Wed, 24 Apr 2024 02:19:00 GMT ETag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: on X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: f-iKwiDUolTTCmkLVkIUN5Er0MrERH4fCqe8nVVgCFvFP3AGVf-MkQ==
2024-04-24 02:19:00 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50389	54.218.244.204	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:00 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:00 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 02:19:00 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-66286c14-08bde57b09e6de6e2a292091 Strict-Transport-Security: max-age=15768000
2024-04-24 02:19:00 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50390	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:02 UTC	791	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:02 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28464 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 02 Apr 2024 13:07:05 GMT ETag: "ff4429feba146d5a8e608db1b13cd9b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 d5f067e387bd572daf470377271a020a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: EmpDtWfXAkvaHlYIQb7GHtL37EyrivNxoO4Zp9-GAcb_yvPQWalmKA==
2024-04-24 02:19:02 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 30 00 0f 00 00 00 01 59 1c 00 00 6e d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 6c 1b d8 48 1c 9d 3c 06 60 00 87 66 11 08 0a 83 da 38 83 8f 36 0b 87 1e 00 01 36 02 24 03 8e 36 04 20 05 a6 2f 07 99 07 5b f5 2e 71 02 bd 6d 8f 42 74 27 c0 a8 5a 6d ff 5d ce 12 36 b8 9a cd 79 0e 4a 99 79 2e 65 01 77 7e 70 1e 84 f0 3d bf aa 26 fb ff ff d3 92 8e 18 6b ec 6c 00 9c a6 69 d6 7f 5c ee 2c 3c cb db 2a 26 9c b8 4c ae f0 90 75 c8 d7 ed b9 a2 b7 dd ec c9 0e 04 e9 03 b2 af e1 c9 c5 35 ee 5d 8d c2 81 ad 5f 4f 73 56 55 e1 ea 77 77 9b ca 7b ab 32 55 85 3c ce 0d 9e c8 79 65 d9 0f 72 9e 58 b3 a9 fb 49 de c1 5c e6 24 e1 ec 74 17 09 d5 db 4c 54 c6 c0 6d 0e 08 eb 17 bb ec a4 21 3a 21 e6 10 d3 d0 Data Ascii: wOF2o0Yn?FFTMlH<`f866$6 /[.qmBt'Zm]6yJy.ew~p=&kli\,<*&Lu5]_OsVUww{2U<yerXI\$tLTm!:!
2024-04-24 02:19:02 UTC	987	IN	Data Raw: aa 5d 0e 48 0d a3 db 4c 5c 87 5c 85 70 73 9a a3 50 a3 28 49 c4 14 1a 33 37 c4 28 bf 0f f9 e9 65 b5 d9 dd 64 67 6a 70 6f 1d 5f 37 d1 2d 69 c0 e3 2d a1 6d dc 32 84 37 b5 c7 5d 41 c3 e9 03 1c a5 e8 53 9c b0 49 ec 37 09 ee 5e ba 3f 08 b5 85 8c 57 c9 99 f9 28 d0 34 67 3a fa 41 e0 ee 12 80 eb 9a f0 46 ec 04 e6 99 de 7e 71 f9 89 be de dc ec 66 ed a7 ee 65 ba e4 48 97 eb 65 f6 bd 62 e8 f5 5c cf 4d f3 b6 24 17 3b 47 b8 69 9f 89 dc c6 8e 64 fb 10 2f b9 1b 95 43 b6 70 dd 7d 86 ec 67 7e 06 1e dc 37 4e 09 47 9f 2c 74 f3 f3 1b 0f 7a 69 1a 78 ee 26 1d 93 ca fd c1 40 cb 35 38 23 c3 af ef 45 e2 90 e9 a6 29 83 12 2e 7b f6 7f d8 6a aa 65 67 45 1b 93 8c 66 8f 25 77 f7 7a 42 69 a8 04 7d 32 14 68 ac fa a9 f8 3c c3 dd a4 6e 12 bb 7b 51 8e 51 b0 96 2c bf 88 e6 2d 9f 22 4d c7 4c Data Ascii: ]HL\\psP(I37(edgjpo_7-i-m27]ASI7^?W(4g:AF~qfeHeb\M$;Gid/Cp}g~7NG,tzix&@58#E).{jegEf%wzBi}2h<n{QQ,-"ML
2024-04-24 02:19:02 UTC	607	IN	Data Raw: 72 31 9a 8e 08 25 a8 ae 82 29 f5 48 01 56 17 da 86 a1 de bd ec b1 7d d6 db 07 57 6b 41 3e 3f 87 2c ce 23 c4 9d 7b d8 ec e8 3e cb 89 a6 9f 26 2e 51 9e 55 aa 5d 4f 6d b4 cf 29 86 b2 a5 f1 09 25 60 77 9f 00 f1 53 20 3a d8 10 fb 47 1a f0 25 1c 00 3b f8 f4 2c 90 4c 00 f9 f4 68 aa da 55 79 36 2e 4e 4c 8d bd 4b 54 e8 fe 08 53 41 6c 29 ac c0 22 24 af df 28 96 76 68 c2 64 b9 f2 2e b5 be 6e d3 a5 43 7e 6a 57 c0 eb 46 9e d1 e9 d1 54 15 b7 a8 fa 32 16 84 1b 68 da eb 6a 37 cf ef 8c 52 b9 02 92 f9 35 1b 78 b7 ef 2c 82 57 8e 82 57 16 ef 7c 46 1f 1f c9 31 19 a9 9d 91 fd 83 91 fd d4 4e 93 29 31 30 1d 53 c7 46 e0 7b f1 29 25 c7 f5 8e d8 a7 40 88 2d 8a e2 c1 6a 1f 56 a5 a2 24 6d 5c c6 ea d8 3d 1a 3d f4 8c 64 6c bd 36 df 20 e5 44 a9 5c 1d ed ce 01 76 04 1c 12 41 cb 4e 30 7b Data Ascii: r1%)HV}WkA>?,#{>&.QU]Om)%`wS :G%;,LhUy6.NLKTSAl)"$(vhd.nC~jWFT2hj7R5x,WW\|F1N)10SF{)%@-jV$m\==dl6 D\vAN0{
2024-04-24 02:19:03 UTC	11145	IN	Data Raw: a3 fb 16 85 ca ec ba 64 ff b6 31 fb 30 56 ce 99 98 4a da 9f a0 43 f7 b0 42 49 b4 bf 40 df f2 cd 87 d8 53 ef 94 d7 94 42 d7 1b 29 c2 55 18 41 7c 4e 91 b2 51 f9 51 e1 f1 b6 fc f0 7b b7 9a 77 ca b3 ca 77 db 3e b8 d0 32 19 90 d0 cf 18 00 4e ad 8c 6d 30 67 9f 3b 03 53 18 fe d2 f7 cc a1 e6 ea 11 78 81 00 c4 33 15 bc 2b 4b de 0e f8 fc f6 25 97 c1 65 e7 60 19 12 7c 0a 2d e5 ba 93 96 ba ac 71 a7 10 a6 b5 25 b6 ec 91 dd 01 0a 55 34 6f 9a 45 45 91 68 23 62 1c bf 89 a7 5b a1 52 05 36 3f 8a 44 f5 95 f7 af 95 19 d5 11 3a 27 27 24 5a 05 63 49 90 5c e0 b7 37 d8 16 62 6b 5e 20 b9 ba d7 cf 48 48 ac d1 75 97 e5 96 ca c3 e4 61 b9 a5 65 dd dc d0 62 34 c9 10 57 eb 9e 2f cb 0b 24 b6 5a d8 af 77 a6 d9 ef 4c 03 d2 ff e7 02 3c 00 68 00 20 a7 6a d9 16 30 af 77 7e 9d bb de 38 83 e4 Data Ascii: d10VJCBI@SB)UA\|NQQ{ww>2Nm0g;Sx3+K%e`\|-q%U4oEEh#b[R6?D:''$ZcI\7bk^ HHuaeb4W/$ZwL<h j0w~8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50391	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:02 UTC	784	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:02 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47828 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 02 Apr 2024 13:07:05 GMT ETag: "6dbab1c1c6f168db27cbe727e3ad7fe8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: jRhciS92AGUlUnKfPqH6beUnmrb90u7i3Epw9VntIjdPt0dETHteqA==
2024-04-24 02:19:02 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ba d4 00 12 00 00 00 02 53 f4 00 00 ba 6b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 30 1b 81 c6 5e 1c e1 12 06 60 00 88 26 08 2a 09 82 73 11 10 0a 85 da 44 85 8b 2a 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 70 07 d2 72 0c 81 1b 5b 97 22 92 0a a9 71 ed 65 de 26 3e 00 09 e8 36 04 c8 32 75 d3 aa ce d7 7b 41 1c 63 3b 08 5a 3a c7 26 e7 03 15 a4 98 95 e2 02 ee ec 89 31 6e 47 38 e2 f4 3b 7a f6 ff ff ff ff ff ff af 4a fe f3 8c f3 cf 3d e9 dc fb 5e a5 12 08 44 7d ec 6f db 06 31 b9 23 04 a5 48 39 e5 4a 75 55 a5 26 a3 5a 57 15 5a e4 2e 67 f5 15 32 02 be 09 1b 1a c8 b6 c6 6e 1f 07 54 38 e6 71 9f f2 98 57 b0 53 61 71 f1 18 72 ed 7b 73 82 90 10 38 5f d2 59 bd e9 d2 95 aa 65 bd 6f a8 8a Data Ascii: wOF2Sk?FFTM0^`&sD6$ pr["qe&>62u{Ac;Z:&1nG8;zJ=^D}o1#H9JuU&ZWZ.g2nT8qWSaqr{s8_Yeo
2024-04-24 02:19:02 UTC	2391	IN	Data Raw: f0 62 9b 15 be 04 77 52 01 17 9b 71 ed 90 e0 d4 63 9f 90 3a 4b 96 bf 36 80 5e 1c 9f 2b ff 67 29 99 6c 17 eb 35 e6 a5 1a 1e 7d 32 16 68 c1 0c ab 06 84 d6 e0 2c bf 2f 84 c8 28 f7 2a 55 25 7d 9a e9 d1 ac c7 9c f8 84 fd 19 ee cf 72 4f 43 59 60 62 8f 33 26 4b ba 67 3f 0a 80 c2 f0 4c 19 16 1d 3d 82 7a 48 d6 7a 3f 9b c3 7a a4 5e ab 64 f9 0d f9 d6 66 61 20 e1 ea d5 67 5c 1d 0a 88 e6 55 69 a1 77 51 9f 04 50 85 19 74 d8 2a 29 7c 60 e7 e7 67 3e 5f fa a4 69 6b 40 7a fc 8e 37 94 29 b8 d4 60 98 4b 59 65 6d d5 50 9c d2 4c ea 09 b0 60 f9 d0 bd 27 7c 9f 07 13 c0 6c 17 96 b5 24 d5 1e ef 52 a8 92 13 95 ef 74 83 50 a8 d7 c0 f3 83 8a f0 0d ce da 8c 4c 38 88 b1 ee 7c e8 7c 0d 0c ce 22 c8 11 51 16 4b 82 38 7d ee 49 a0 72 ee 2e 52 9d 19 ba 4c 19 c6 12 d5 f6 a0 2b 32 f2 37 bd b0 Data Ascii: bwRqc:K6^+g)l5}2h,/(U%}rOCY`b3&Kg?L=zHz?z^dfa g\UiwQPt)\|`g>_ik@z7)`KYemPL`'\|l$RtPL8\|\|"QK8}Ir.RL+27
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: 38 e6 07 0c 78 34 b9 79 ae 19 e5 d0 60 c6 b8 c6 c3 59 88 66 5a 2a 69 58 0f 26 54 79 9d c9 07 f9 2f 8c ce fc 3f 3d 6c 62 4a 97 27 66 99 f0 d7 85 f8 85 04 f4 96 e5 1a 0e 31 dd f2 6f 97 d9 87 7d 48 97 0a e6 8d ef bd 50 8a 17 86 df ae 20 10 af d8 28 76 48 e1 80 fc 22 ce a8 c5 25 d8 9d 36 79 09 be 56 c8 76 45 ce 8f 94 21 95 a1 84 4a 82 32 ab 61 ce 9b 70 ff 9c 23 b9 92 4a 47 ac 3c ab 32 e6 a0 68 a6 de 82 59 89 ad db 49 75 8e 4c 1f 6e e2 a2 c3 11 87 d9 12 84 94 b8 f1 00 11 85 e1 11 8a 0a c7 51 08 0a 63 5f 0e bc 5e 7d 1e 48 a7 3b 72 e3 99 e5 60 4c de 53 dc 58 51 dd 9b 4b 0c b1 6b bd 2e 56 3c a0 76 4f 04 c0 db 62 22 be ea 78 aa 2a 96 04 8b 03 2b 97 f4 a6 6c 11 6c 0b 59 50 89 df fb d3 50 be f0 ac 07 a0 2c 46 e5 e1 c4 8c 56 8f f5 32 9d 36 a2 d5 62 7b b0 a2 ae 06 45 Data Ascii: 8x4y`YfZiX&Ty/?=lbJ'f1o}HP (vH"%6yVvE!J2ap#JG<2hYIuLnQc_^}H;r`LSXQKk.V<vOb"x+llYPP,FV26b{E
2024-04-24 02:19:03 UTC	12669	IN	Data Raw: 09 13 fa 38 4a cc 8a da e2 52 27 8c c7 4b 2d 77 c8 89 d8 a3 3a fc 27 2f 1e 51 ed 30 98 21 d7 a6 d7 ab 59 0f a5 8a e8 70 63 bd 76 35 c2 1a e3 70 52 76 f2 30 85 12 04 9f a3 e7 55 b5 37 e1 44 03 09 4d 8f 03 b3 4e 52 45 ea 48 59 29 94 6a ac a5 a8 e3 b9 14 87 52 45 ea 48 59 08 09 39 ad 4d 31 a8 45 56 14 ae bd d1 75 36 e4 dd 7d 85 7d 42 76 45 f6 5d ef b7 79 6f 5f 65 38 54 d7 94 59 91 44 e9 cd 05 ef 72 9f 35 5b 0d b8 a7 fa 12 a8 c6 dd 35 fd 2b 4c d2 93 87 54 ea f7 8e 18 73 01 58 91 3a 76 1d 62 b1 f8 3c 6a 29 7a 6b cf ed cd 90 c0 23 96 4b 63 54 9b f2 56 f4 fa 64 57 df e7 e3 4d 8d 47 4f 23 b1 1e 52 a1 a3 b5 48 5b b0 c0 1a 0b e4 65 41 f6 ca 13 db a6 64 be 6d 48 ff 4c 46 9c 9c 06 7b 79 aa ac 8f 20 ac 39 b7 db 4b 80 9b 0d 96 8b 05 cd c6 96 c3 a3 4e 85 0e 4d 62 53 d3 Data Ascii: 8JR'K-w:'/Q0!Ypcv5pRv0U7DMNREHY)jREHY9M1EVu6}}BvE]yo_e8TYDr5[5+LTsX:vb<j)zk#KcTVdWMGO#RH[eAdmHLF{y 9KNMbS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50392	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:02 UTC	803	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:02 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:11 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7bfc7790cc690be558ed3a9136bf2206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ToLSTvJ6X0YgwUnsXsvbAo2cYcO5IA0RK0AQKA9CFg5a6OA10Qd04Q==
2024-04-24 02:19:02 UTC	12792	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26
2024-04-24 02:19:02 UTC	2047	IN	Data Raw: 32 20 32 32 39 2e 33 32 33 20 37 38 2e 37 39 32 36 20 32 32 38 2e 37 36 37 20 37 39 2e 32 30 33 35 43 32 32 38 2e 32 31 31 20 37 39 2e 36 31 34 33 20 32 32 37 2e 39 33 32 20 38 30 2e 33 36 33 33 20 32 32 37 2e 39 33 20 38 31 2e 34 35 30 33 56 38 33 2e 30 31 34 39 48 32 33 32 2e 33 30 35 56 38 35 2e 33 31 31 39 48 32 32 37 2e 39 33 56 31 30 30 2e 32 32 38 48 32 32 35 2e 30 32 35 56 38 35 2e 33 31 31 39 48 32 32 32 2e 33 32 31 56 38 33 2e 31 31 33 38 48 32 32 33 2e 38 32 33 43 32 32 34 2e 34 30 32 20 38 33 2e 31 31 33 38 20 32 32 34 2e 37 36 34 20 38 33 2e 30 31 33 38 20 32 32 34 2e 39 30 39 20 38 32 2e 38 31 33 39 43 32 32 35 2e 30 35 34 20 38 32 2e 36 31 34 20 32 32 35 2e 31 32 36 20 38 32 2e 31 39 32 38 20 32 32 35 2e 31 32 36 20 38 31 2e 35 35 30 34 5a Data Ascii: 2 229.323 78.7926 228.767 79.2035C228.211 79.6143 227.932 80.3633 227.93 81.4503V83.0149H232.305V85.3119H227.93V100.228H225.025V85.3119H222.321V83.1138H223.823C224.402 83.1138 224.764 83.0138 224.909 82.8139C225.054 82.614 225.126 82.1928 225.126 81.5504Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50393	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:02 UTC	793	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img1.cedc71cac222019d305e.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:03 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 307426 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:09 GMT ETag: "1cff9093ba7619f76854b2d4f71c01dc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e9c14790ff63b931e8e58434b28761a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: _t_vpO48g3oIegtgmxfJTIL5qt1qWx3Onsp3m408Yd68-n57WX8WjQ==
2024-04-24 02:19:03 UTC	15876	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 07 2d 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f3 04 15 04 1b 18 38 23 82 57 35 ce 11 47 2a 2c 60 ae 1a 38 01 62 57 b5 ea e6 2b 81 88 4a b1 b9 45 6a 80 28 22 a2 88 a0 80 a8 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|-"8#W5G*,`8bW+JEj("
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: d3 91 44 95 aa 8c c3 ce af 36 7b 55 0d 95 b7 5a a5 db 95 a7 64 76 d9 ce 17 99 7e 55 73 5c 0c 8e 79 b7 96 9b 27 cf a1 56 c5 48 d8 e9 87 db 73 f0 ec 40 58 ab b1 52 7d 99 c9 79 eb 95 2e f3 37 b9 76 f5 3c b3 ba 7e 5a ce cf 3b bd 57 37 ae e5 53 af e7 fd 31 97 f4 aa de 7c 95 1b 68 a5 17 39 e6 cb af e8 a9 82 f5 ca 96 42 de 16 a0 c6 03 4a 36 e0 8e e3 ab c9 33 53 e8 3f 2e ca c4 4c d9 ac 62 5c 9e a1 02 3e 47 5a 5a db 3d 26 4e 0c 74 ac 5d 1f cc e8 5b 9e 6d 49 11 ea 2a 23 79 bc 9a eb 22 3a 22 47 bb 42 dd 75 6c 8a 0c c3 bf 24 57 64 64 56 1e 43 22 5b 9b 49 c9 1d 7e 52 65 b3 56 bc 8d bc b6 2c 11 e5 e8 cd 9f 61 d4 df 26 f8 b3 f3 ba 71 a7 27 77 10 e9 39 d7 74 5c eb b7 b9 ed 98 b3 fa 4e 71 bd 47 37 ed c9 1d 97 42 db 83 6b be 08 b9 af 37 5d 8f 47 39 d7 98 f6 6b 5d 6d 0b af Data Ascii: D6{UZdv~Us\y'VHs@XR}y.7v<~Z;W7S1\|h9BJ63S?.Lb\>GZZ=&Nt][mI*#y":"GBul$WddVC"[I~ReV,a&q'w9t\NqG7Bk7]G9k]m
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: b1 2d de b1 71 77 95 c7 6c 28 27 58 6f 3a 31 7f 3d d3 d9 e3 e9 7e b6 35 a3 1c 4e 18 7a 2f 7d 5b 9d 72 c6 71 7d 1b 4e 9a e7 cf be bc 9d 3d 3b e1 27 7f 97 bd f0 76 89 84 6a 47 6d 4a c7 6c a2 93 7a b3 4b 9b 8d e1 15 7a 72 ce 92 70 6b 8e 27 7b de af 34 c4 c3 d5 71 d3 77 84 ed ac ea ae b1 d3 e6 26 5b 71 f2 75 c3 32 74 9d fd 8b b9 d3 04 a9 75 bd 73 da cc e6 a5 46 f8 74 eb ca 59 8c ce 58 76 e9 bd 1c a1 94 f4 a6 fa 4e 39 ef d3 93 77 0b df e4 e7 33 b6 9f 37 96 f3 bc e5 df 1e ee b6 ee 74 e7 60 5d a5 5d b2 64 be 7b db 93 d1 9c eb 3c f1 70 ba d5 ba d6 32 9c 8e 9d 66 fa 05 99 de 99 75 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 08 01 03 10 00 00 00 f3 a8 26 12 a8 02 ab 54 aa 60 2a 00 00 0b 01 32 99 24 bc 84 81 02 b6 Data Ascii: -qwl('Xo:1=~5Nz/}[rq}N=;'vjGmJlzKzrpk'{4qw&[qu2tusFtYXvN9w37t`]]d{<p2fu&T`*2$
2024-04-24 02:19:03 UTC	2048	IN	Data Raw: df 1f f2 5d 56 66 34 35 b5 92 65 f8 54 ac 9d ef 0c 75 63 f3 f8 21 06 b6 25 49 14 92 38 b8 97 3a cd 03 9e 41 32 96 49 1f 85 8d 73 8e b9 28 f6 74 8f 71 6b b1 37 e0 a4 a4 31 9d 5d aa 6d 3b 8e 22 1c a8 69 5a fa a8 63 71 c8 9c d3 f6 6c 0d 7b 21 0e cb 32 ba 8c 2e de 30 f7 45 b8 f2 54 d4 6c 8a 68 30 fa f7 f9 a8 1a 7a c4 e0 81 d8 d3 e2 15 48 21 90 61 e2 43 56 ee f8 87 b0 59 51 b4 98 09 76 a5 df c8 ad b6 d3 8e 9a de 93 d3 28 dd 0b 64 c9 82 f6 cf 92 30 55 39 fe 71 a3 25 d5 de 03 31 49 71 7c cd 96 d0 a1 a6 95 af 92 e4 ba c6 c6 ea 96 8a 62 0d e0 3a 6a a9 a3 a7 6e f5 80 80 7b 3a 70 5d 5a 8d b2 48 4b ee 72 3a a1 3c 00 64 e6 7c d5 76 d1 a7 dc 96 5c 1d 15 5e d4 8c ca 5f 14 36 47 6a 49 bc c6 e8 d8 ee d5 ec 47 e4 b6 8c db fa a7 c9 60 31 70 0a 4b e2 fb 36 28 31 c7 d0 3f 25 Data Ascii: ]Vf45eTuc!%I8:A2Is(tqk71]m;"iZcql{!2.0ETlh0zH!aCVYQv(d0U9q%1Iq\|b:jn{:p]ZHKr:<d\|v\^_6GjIG`1pK6(1?%
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: a8 ff 00 fd a3 fc ab ea 36 ff 00 68 3f 25 f5 24 5f da 1d f2 0b ea 5a 7f ed 0e fc 93 f6 4d 38 b7 95 7f e4 be ac 80 7e dc fe 4a 2a 16 c6 71 36 73 7b 2a ea c3 57 49 0c 26 cd c0 e0 6e 3d 8a 3a cc 27 57 db c5 47 b4 20 69 ce 39 3f 89 1a fa 47 b4 5f 7e db 1e 19 ff 00 25 53 53 b2 9c ee db ea 3e 4a 7d a1 b2 0c 40 46 e9 af f2 4c da 3b 38 c9 e5 23 9b 00 77 64 eb d9 53 56 81 52 ec 36 63 6f ab b8 58 5d 54 d6 c8 24 f2 52 34 80 0e 76 e7 aa 74 8e 76 a8 4d 24 7d d7 5a e8 d4 4e 7d 35 88 bb 32 73 52 74 b7 da 82 d8 fb 56 8a 95 ee eb 34 81 e3 85 86 6a a7 6f 6c 89 64 92 db 2d a1 bc 0e 57 4f aa a7 23 28 2c a4 7b 5d a0 b2 c5 60 9a f6 f1 09 f3 34 c7 86 ca 96 78 e3 93 13 b1 69 a8 52 3f 1b 8b af a9 5e 82 aa da f1 4f 4e c8 5b 48 d6 5a f9 8f 14 f9 b1 02 b7 ad 2c 63 6d 6b 21 33 05 b2 Data Ascii: 6h?%$_ZM8~Jq6s{WI&n=:'WG i9?G_~%SS>J}@FL;8#wdSVR6coX]T$R4vtvM$}ZN}52sRtV4jold-WO#(,{]`4xiR?^ON[HZ,cmk!3
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: 15 46 1d f4 96 1e 91 56 5a 2b 20 6c 08 cb f9 2b dc 22 e0 10 ab 19 5c fe 48 38 12 3c a8 58 0e 5d b4 5a ef 5f f2 58 5c 1b de fc 97 6f d7 5d af 5d 61 c8 76 ca 64 63 0f 34 43 18 2e 72 0a 53 3d 43 9e 20 16 6d b3 79 50 d1 98 ed e4 b1 5b 52 9d 11 c7 77 33 b3 9f 0b ea 8d 2d 29 b7 6d 1a 08 c8 bb 24 3f cd 1a 19 fd 19 2f 9a 11 55 b6 fd 9b ac 52 b7 58 ca df c7 60 1d 75 53 23 5c f1 87 4b 2c d1 39 2b ba da ac 6f b6 a8 b8 9d 4a 0e cd 09 1d 95 dc 84 8d 0c 20 0c f9 a2 6e b1 15 75 9f 35 73 7b 74 5d 5d 71 e8 c5 96 aa e3 92 bf d8 b8 57 44 f4 5f ec dd 38 33 17 b1 59 9b d6 e1 d2 e1 07 34 5e ea a0 e1 9b 10 39 e2 45 b9 92 54 56 df 33 de 52 48 43 40 2e ca f9 05 f4 7e 9e 8a b2 aa 68 2a ec 7b 01 cc ce cb 68 f5 38 6a a6 8a 1d 03 88 be 2b aa ea 8d 93 d5 69 ba a6 52 7a 6d 37 36 f8 a8 Data Ascii: FVZ+ l+"\H8<X]Z_X\o]]avdc4C.rS=C myP[Rw3-)m$?/URX`uS#\K,9+oJ nu5s{t]]qWD_83Y4^9ETV3RHC@.~h*{h8j+iRzm76
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: d8 f6 b1 1d 13 aa 69 9d 34 0e 0f b6 79 fc 95 5e d0 99 b5 0f 6c 73 76 38 58 21 b4 66 01 ed 95 e5 f7 1f 25 1d 54 82 76 4b 6b 59 e0 83 e0 a9 be 94 50 6e 19 bd 9d ed 75 cd c6 1b f1 5f d2 ba 06 ca e1 e5 4b 0e 78 ac aa 36 f5 33 f6 cd 25 58 0f c1 1b 48 39 67 9a ac fa 57 1b d9 23 20 8c e6 cc 9e 4d ac a5 aa 92 57 35 d2 48 e7 ba da 9c d4 b5 f2 cd 49 14 32 97 39 cc 91 c7 11 3c d6 31 64 d7 2d 95 b5 23 a1 7c f8 d8 e7 36 46 5a c0 f1 5b f8 da 1c f6 e3 70 c5 e9 6a 85 6d c5 f7 67 e6 a6 92 d2 5f d8 13 5e 39 ac 4d e6 b1 85 8d bc d6 36 f3 5b c6 f3 5b c6 84 64 6a c6 d2 54 63 1c c4 1d 30 aa 76 86 b9 f6 1c be c4 e7 b0 54 73 63 36 b2 7c c1 ae b5 95 81 bd fd 89 ad b6 3c f8 a7 68 51 39 74 e6 af 9f 40 50 c6 f9 a5 64 4c 2d 0f 71 b0 b9 b2 ab d9 d5 54 76 74 d2 46 71 7a af c4 81 f6 a2 Data Ascii: i4y^lsv8X!f%TvKkYPnu_Kx63%XH9gW# MW5HI29<1d-#\|6FZ[pjmg_^9M6[[djTc0vTsc6\|<hQ9t@PdL-qTvtFqz
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: 38 7a a8 ec be cd f7 c6 fb bc 5d db 2b ab 8b e6 55 a1 b7 9d 17 e5 65 8b d8 9e 6e 0a ed 23 8f 9a 9b b5 19 57 d1 55 5f 1b 72 be 49 d8 c8 ee 7e 49 c0 8d 42 32 1c 38 6c a5 38 de 5f d1 11 ed b0 7e 25 38 02 58 ed c9 48 e3 89 48 46 0b fe 14 6d 7c 94 1a e6 9a 05 cf 24 f2 d0 a2 b1 1a 21 93 8a 70 69 41 a3 09 0a d6 59 10 54 23 55 19 20 3d 33 5f 82 93 cd fc 51 77 f2 59 9e 82 86 8a a3 d0 f8 ab 74 00 b4 58 b1 3e 34 eb 87 5d 3b 54 3a 6e 79 20 4d b4 5d ae 8f 8a cd 0b a2 6c 7f 79 01 11 1d c5 86 3f 51 61 67 dd 84 18 df bb 6a 0e 67 dd 84 fc c7 64 01 f0 43 bc 47 25 8b f0 b9 6e c6 ec 3e eb aa e7 93 91 a5 1c 5e ba a8 f5 95 5b 04 6e 01 47 8b 06 48 c5 23 86 81 1a 77 96 d9 1a 67 0e 28 53 ba e8 53 bc 71 09 d4 cf 23 50 85 33 8f a4 9b 13 c0 b5 c2 dd bc 7a 49 cd 0f f4 d7 56 fc 4b ab Data Ascii: 8z]+Uen#WU_rI~IB28l8_~%8XHHFm\|$!piAYT#U =3_QwYtX>4];T:ny M]ly?QagjgdCG%n>^[nGH#wg(SSq#P3zIVK
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: e6 f9 40 b0 0b 94 07 64 2f 4d 66 b0 ea a3 a7 16 2d 7d f3 d1 0a 18 2c 4d dc 8c 34 83 d3 fc d4 60 75 62 1b a6 68 90 00 c9 54 b8 38 c7 6e 61 62 18 be 08 66 13 43 58 4b ad 74 2a ed e8 35 53 d4 6f 2e e7 0d 0f 05 34 e2 dd 94 d7 cf 21 b3 86 4b 70 e5 20 b3 88 54 90 19 ea 5b 1b 5f 86 f7 cf c1 50 60 a8 ab 64 27 20 6f 72 9b 45 4f 1c ce 6f 69 c3 da 54 d2 c7 4a 4b 59 04 7d de 22 ea 33 d9 3e 25 41 13 64 db 4d 6e b7 67 fa 2a 6d 8b 44 1a c7 bd 98 cd 86 ab 6c c1 15 34 e5 b1 0c 23 0a 98 be 46 f2 53 9d db 74 b9 cb 54 6a 1d ea 37 e4 9b e7 8e 5d 9c ae ba bc 2e 8c 3a 2b 38 7e 6a 3e c4 4f 36 d0 d9 48 f2 49 ba 2e 68 21 cd 37 c8 2b de 47 f8 05 53 1b 6e 4a 3d 0e cd 1c a2 23 da 99 de 0b 4c d4 fe 6a 4f 77 ec 59 6b d2 54 7d e0 9c ec d4 7c 50 5b b7 5d 6e 9c b7 4e 58 48 62 c5 92 7d 8d Data Ascii: @d/Mf-},M4`ubhT8nabfCXKt5So.4!Kp T[_P`d' orEOoiTJKY}"3>%AdMngmDl4#FStTj7].:+8~j>O6HI.h!7+GSnJ=#LjOwYkT}\|P[]nNXHb}
2024-04-24 02:19:03 UTC	5120	IN	Data Raw: 28 e7 d1 90 b7 44 86 cc 79 fc 0e fe 4a e1 5c 28 65 0d 76 aa 19 18 e1 aa aa a4 6e 6e 61 16 e5 c9 48 e3 15 2d 1d 8f af fc d0 ae 20 68 b7 c1 ee c4 aa 24 c2 63 ff 00 09 a9 f3 48 1c 7b 2b 7d 2f aa b7 93 7a 9f 92 0e 98 fa 27 e4 a8 b7 82 63 70 7b a7 82 03 b0 df 05 92 a7 fd 5e 2f 74 26 9b 5f c4 ac 3f 9a dd 34 22 d3 63 6d 55 dc c8 bb 65 38 e2 68 44 64 85 86 a8 b9 b7 d5 12 98 6c 11 85 f9 1b 2c 32 b7 4c 49 8f 9c 9d 56 ea a8 c3 d6 4c 36 8e fd e1 a2 63 ae f4 3e c3 5d 8d c4 a9 8a 2b 79 18 e6 85 43 6d dd 5d 60 fa a1 09 5d cd 3d d7 64 9e c5 50 f2 21 8e c5 19 1f eb 14 5c e3 c4 a8 7b a3 a1 da 8f 15 bc 69 c9 63 f6 2d e5 b8 26 ba ed 05 7a 48 a9 35 29 9a a3 90 4d 73 4b 14 d6 2f 43 45 29 c9 3b bc 7f a8 23 ed 01 d3 92 ba 2b 09 56 28 58 23 63 c1 6e dd aa dd 39 6e 8d 94 2c c3 20 Data Ascii: (DyJ\(evnnaH- h$cH{+}/z'cp{^/t&_?4"cmUe8hDdl,2LIVL6c>]+yCm]`]=dP!\{ic-&zH5)MsK/CE);#+V(X#cn9n,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50394	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:02 UTC	793	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img2.35539ce3dc0fcc71a276.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://backgrounds.wetransfer.net/creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:02 UTC	488	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 493345 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:09 GMT ETag: "f6b0abd028338f6a7eccda3aff7b6e94" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: iErifONX-g-mI6fkwLuT9TpQCQ0NXc16zoeJlli9NtyKUDqjSJrvNA==
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 07 3c 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff da 00 08 01 01 00 00 00 00 e0 70 47 e8 89 5c 4e ee 2c 0b b4 8b 41 d9 99 2c 63 2c 5f bf a5 97 6d 7d ed a4 87 b1 30 86 e5 d0 62 da 31 78 9f 29 b5 35 1a 6b Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|<"pG\N,A,c,_m}0b1x)5k
2024-04-24 02:19:03 UTC	515	IN	Data Raw: f3 4c 06 85 5b 41 93 09 1b 36 b1 e8 2b 56 fa 55 d7 6a fa 41 23 f6 36 c6 2d 56 21 66 6a b8 ce 50 82 29 fc 51 4d 3b c6 a0 d2 29 75 8d e4 9d 97 d0 18 af d4 df a8 e9 71 d4 f9 7a 83 4f 9c 1d 60 62 f1 83 35 14 d5 60 d8 0b 8e 25 1e 69 8a f8 13 e8 ca 63 07 9d 6a 69 fd 34 9a b4 75 3d 21 85 e1 97 3d b2 37 b5 a7 ad c0 78 a9 98 1c de b4 20 b6 42 a6 8d 2b db a5 28 63 5d c1 51 b2 09 06 c0 30 1c 21 2c b5 bd 5f 58 0c 0c 21 84 6f 53 d9 6a 7b 23 d5 f1 91 49 3d 79 f1 56 6e 6e 30 bc ec 6f ab 26 33 c8 38 a1 2e 83 31 2c 1b 7b 23 e1 f1 95 29 cc bd 6f 43 0a 5c 47 2e 7d 88 f7 f3 0b 96 fe 2c ce 5f 5d 2a 09 f6 b4 30 ea c2 57 38 b4 50 4e 47 6e a6 f4 92 c5 e7 e8 c2 ee a3 d3 f9 f8 51 c8 e1 64 30 38 6b 16 53 ab c4 07 bc 62 d0 1a 99 82 24 af 4d 2e da 9d 24 32 d9 5c 54 eb 4c 71 06 cd 49 Data Ascii: L[A6+VUjA#6-V!fjP)QM;)uqzO`b5`%icji4u=!=7x B+(c]Q0!,_X!oSj{#I=yVnn0o&38.1,{#)oC\G.},_]*0W8PNGnQd08kSb$M.$2\TLqI
2024-04-24 02:19:03 UTC	12792	IN	Data Raw: 01 3d be 15 a8 a0 8f 85 94 bc 7d 07 30 bc 23 3b d9 2c e6 56 2e b6 0d be 71 2b 5e d8 52 0a 7d 6a d8 2c 44 31 71 bd 3b c8 41 93 68 de 3e cd 5e b4 43 18 11 b1 5e b6 51 a5 de 49 0d 94 62 fd 8d b1 3b 1a d1 d6 0d c2 51 61 ba 34 af 56 cb 78 bc 5b 41 f5 6f 75 8e 52 56 bb 6a 16 91 31 60 79 63 af 7d 67 f9 b0 85 f2 94 45 8c 9c ed a6 20 50 44 ee 7d cf 54 da d0 21 22 3d 8e bc af b3 d6 f4 90 7d c9 de 50 19 2d 71 63 d1 5a a5 63 4d 33 51 14 b5 59 ef 6b ae 09 d7 6d 58 6c 18 ae 83 d7 48 2d 5d 63 86 6e e2 f9 6c 23 90 b3 24 ee 4e ae 3d bb 93 49 78 05 aa c1 9a ba 33 ef 97 0c fc f7 86 3d 44 e5 34 bd 66 3a 53 70 3e 2b 6c aa a2 8f ae b6 67 d0 f3 49 da 5a a1 ab 57 87 2a 18 21 cc 9e d7 4f 1e c1 88 71 e6 30 a3 3c d7 af ee a8 b9 e4 80 d8 b6 7a e0 3a dd 8f da 07 ba 16 ed 54 e7 77 9b Data Ascii: =}0#;,V.q+^R}j,D1q;Ah>^C^QIb;Qa4Vx[AouRVj1`yc}gE PD}T!"=}P-qcZcM3QYkmXlH-]cnl#$N=Ix3=D4f:Sp>+lgIZW*!Oq0<z:Tw
2024-04-24 02:19:03 UTC	4616	IN	Data Raw: 91 0a 41 5e 06 23 c8 d5 7c 24 9f b0 ea f5 62 6e d0 2b c9 87 b7 b2 6d bc 14 e0 f7 00 d0 ac 17 42 27 cf b7 0e b3 5d 5e 6a 23 82 b4 74 c9 37 c8 75 4e 74 bd 8d 80 eb f1 db 6f 20 74 c5 34 d6 c9 43 98 8f 41 a4 3b 9f d3 08 9b 39 c6 2b 1c f1 f9 32 6e 16 87 ca ee c0 ea b7 ce e1 cd ed a5 55 72 bb 25 b2 79 64 8b 48 17 47 1d 0c 9e d7 dc 37 14 bd 22 c0 eb 6a bc 5e d9 5b 48 36 62 f1 d3 18 fa 7a 9d 4e 48 37 9c a8 60 e9 77 61 c1 1d 19 2b 2b 6b 64 d2 7f 6d b4 c6 55 a0 d6 6f 44 64 83 e0 a9 06 80 82 bc 0c 66 15 aa e8 0c 3b 61 d4 ec c8 ad a0 5d b1 4e 6d fe af a9 0f 1b ac 6f 72 67 2e fb ed 84 14 62 25 5d 3b 10 91 bc ea db c6 8e 97 84 80 1f d3 6d 59 df de 43 4d 57 22 06 e1 a1 de 49 c1 db 69 0c be 6e c6 4d fd ec a3 a0 ca 66 25 30 2f 32 e8 fd 5f 90 f2 12 62 05 f1 cb 82 11 a5 ed Data Ascii: A^#\|$bn+mB']^j#t7uNto t4CA;9+2nUr%ydHG7"j^[H6bzNH7`wa++kdmUoDdf;a]Nmorg.b%];mYCMW"IinMf%0/2_b
2024-04-24 02:19:03 UTC	12792	IN	Data Raw: 49 27 b4 d3 6a 84 76 b6 19 ad 25 b0 59 f3 85 e4 35 a7 ce dd 38 84 31 8b 79 93 bb 80 1a e5 81 ed bb 21 bc 4c 4d 0d 11 b6 5b 90 95 ab 25 60 c2 54 df 39 c6 07 db 6d bd ed f0 28 59 33 11 80 ba 7b 0d 70 67 1f 4e 10 12 5e 5f 57 da 1d e5 4c 30 83 6b 31 06 19 2e 23 d2 2d 71 1c 7a 63 4f 63 19 f4 59 2f 22 6a c2 41 04 30 cc 2e d1 99 16 dd f2 25 5c 5d 95 cf 71 6f 9f 6c 0d 25 4f b6 79 75 0a 9f b7 42 ac 28 c2 bb 45 be 5c e1 35 71 06 2c b6 c9 36 a1 da 3c 9c 78 43 2e c9 aa 85 2e cd da 5d f5 4e 71 b5 f4 96 b7 1e 57 50 6f 6f 93 c9 ec 95 49 0f 5a 3e 32 7c bb af 6a 28 03 8c 4d 92 c3 60 4f 1c 89 97 b0 b6 8d 57 b3 d7 18 46 8e eb 4d 04 69 e4 d6 49 bd ed 17 cb b0 64 0a b5 87 48 ae 54 b4 e8 bd 7f c1 f2 aa 4f b5 cf b5 02 11 84 1f d3 90 69 92 47 1c 7a e9 88 e3 d7 5d 7d 8c 67 d1 6c Data Ascii: I'jv%Y581y!LM[%`T9m(Y3{pgN^_WL0k1.#-qzcOcY/"jA0.%\]qol%OyuB(E\5q,6<xC..]NqWPooIZ>2\|j(M`OWFMiIdHTOiGz]}gl
2024-04-24 02:19:03 UTC	4616	IN	Data Raw: 8c 5f 79 e8 7d 3e 8e 26 eb a0 d8 b3 98 6b 2a a2 d3 4d 55 34 d1 59 81 90 0c 1e 77 22 15 85 92 fb 4d 96 12 70 be 54 3a 7d 09 f6 5d 10 cc ce ae 5f 6f 48 89 a8 d2 3e 59 46 aa 77 76 cf 8f bd c8 34 73 38 e2 5a 42 b2 50 89 91 10 d5 19 76 4c da d9 79 ba 79 dd d8 89 f5 71 f3 59 27 0f 23 93 a7 d4 f5 b6 59 bc e2 6d 57 cf ba 95 8c d6 71 9f 77 97 c0 d5 ed af 53 f2 f7 ee 95 42 f9 13 30 ac 16 a2 28 81 74 91 ab 8a 61 93 1a bb 71 76 71 54 74 19 4a d2 87 32 73 08 72 da fd fd 2e c3 9f 9d fa de 95 2c 8f 43 a1 c7 c5 2d df e8 72 f8 1d 75 ee a5 d7 b6 95 10 63 b2 ad c0 44 ba 73 04 55 1a 27 a5 4a 10 a0 84 7b 73 77 f0 59 8c d7 5f 8f 86 7c 1e a5 fc b9 92 7a bd 18 73 5b ab 93 aa ce c2 89 d4 91 e3 8c e3 32 b7 6e ee 6e 9f 6b 92 a2 7d 15 54 cc f9 25 53 59 42 f2 88 40 aa 62 3a 71 46 c8 Data Ascii: _y}>&k*MU4Yw"MpT:}]_oH>YFwv4s8ZBPvLyyqY'#YmWqwSB0(taqvqTtJ2sr.,C-rucDsU'J{swY_\|zs[2nnk}T%SYB@b:qF
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: b7 b6 d3 b2 f3 f2 cf ad c1 8a 7f bb 1f a6 87 a5 5c b7 4c 50 a4 c1 d2 81 02 64 74 e0 94 5a f0 54 e6 76 2c 9d 97 86 b6 11 55 38 9e 5c 1a 55 d3 d6 ca ab 71 fe 88 38 f9 b7 a1 da 80 99 76 25 14 84 0f 65 7c 4f 84 ac 31 02 59 8a e8 37 16 a7 66 d0 5c 3b 89 94 74 9b 6d 24 4b 7f 0f 5d 5a 57 0f 49 aa b1 fb af 8f 8d cf 8a 2d 0c ce 54 0c 4b 0c 6a 6c 53 a9 db 79 db 7d 6e 68 fa 57 8c f6 0f 0f 5b 23 15 31 50 98 d5 b2 fa d7 4b be b5 fe 9b 6c ff 00 4e b2 7f a7 dd 07 4f b8 c7 e9 57 ad e6 a9 fe 9b 95 2c 66 27 c8 fa 0c ae a3 68 24 0c 34 d7 bf f2 ca 0f 9a 42 f6 f8 cd 01 b9 fb 43 ea 67 5f ed c5 6d a9 11 13 96 e3 d6 5d 78 ca 17 b9 78 42 d4 63 b8 e3 35 a2 44 07 cf 9a ea 6a c9 10 27 1c 85 03 b1 58 8a a0 52 77 9a dd ab f9 1b ae c7 b7 81 a9 87 f8 f4 1b 9c a6 fd 04 3e 9e 26 a7 4c 62 Data Ascii: \LPdtZTv,U8\Uq8v%e\|O1Y7f\;tm$K]ZWI-TKjlSy}nhW[#1PKlNOW,f'h$4BCg_m]xxBc5Dj'XRw>&Lb
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: 8b ad bc f3 a1 ff 00 62 93 3a af bb 21 0c 5c 6b 9b e3 99 e2 37 db b1 d0 92 b8 7a fa dd 28 ad 6c e3 dd 61 5d 44 3e cc 77 ac 8d 1b 1d b9 63 e9 6a 76 2d ca ba 6a 4d ca 31 72 6e f3 5e 37 4d 3f 9d cc 4b 7b fd 33 1b e8 bb ac 64 3f d3 65 d6 59 bd f3 25 44 ca 1f d3 db 2a 3f bb 5c 6c 9b 91 ec 59 80 e1 a8 f0 3e 1a 5b ff 00 be 3a 16 6e bf a1 27 f6 cb 1d ab d9 95 e4 6d 03 44 4a 79 96 9c 1b 5e 1d 01 3e e6 ab d8 15 57 1b b4 6c 69 81 fc 06 2f c9 99 2d a6 95 55 59 6e 69 d3 ff 00 ed 8b fc 89 3a 87 f1 34 c9 d0 c8 79 d4 19 ea 21 eb c6 be cb 28 e4 53 23 94 2d 5b 09 db ff 00 c4 83 f7 c7 ad 16 dd 83 e4 4b 7e 84 99 cb fb 82 2e 45 ca 35 30 9b 96 32 34 c5 ff 00 92 93 28 8e 26 5b 67 bc cb 3f 85 0c e8 7e 7a ae 24 cd f3 7b cd 7f 4f d5 26 27 8c 9c 23 11 76 2e 56 b8 fe 66 e4 29 92 83 Data Ascii: b:!\k7z(la]D>wcjv-jM1rn^7M?K{3d?eY%D*?\lY>[:n'mDJy^>Wli/-UYni:4y!(S#-[K~.E5024(&[g?~z${O&'#v.Vf)
2024-04-24 02:19:03 UTC	2048	IN	Data Raw: ba 4c b6 21 5e 5d 8f dd 66 22 dd 57 89 4a 9f c3 68 47 53 af 79 3f cf 64 bd 40 aa f5 80 5a a1 0a 57 8f aa 2c ef f7 f1 68 6d d1 65 d9 17 78 6a ba 46 5d ab b2 7a 37 0d 71 bf 07 26 a5 2c 75 d3 6b 71 6b bf 52 b1 80 5a 81 b5 cc ba b6 2b 60 9d 48 ef a8 65 c2 7f 70 4c 6c 3c ac af e1 c4 fc 39 42 fb b2 12 aa a9 55 4a a2 fc b4 78 ef 5d 6b c9 ef eb b4 ae c6 3e 5e 76 5e 4d 80 58 df 13 28 ff 00 49 62 ca f1 57 be bc 1a c6 af 7b ea 4c c7 29 54 9a 2b 2d a8 f5 3a 7c 99 c4 18 50 fd a0 76 1f 02 e6 5c 74 de 47 55 bf 26 c9 de f3 e5 5e b6 f8 65 9c 76 23 52 18 68 35 07 c6 99 6c dc d9 06 72 ff 00 1b 3f 70 e3 72 cf 76 a3 e8 98 40 02 7c c4 5f b4 b3 1c d5 a2 d5 68 bd 0b 28 c2 aa ec da 44 eb 27 89 ad 25 19 36 d0 9c 05 27 85 eb 3e 1a 6f e6 35 aa 8c 03 58 40 bc 30 b0 56 cf c6 58 bf b6 Data Ascii: L!^]f"WJhGSy?d@ZW,hmexjF]z7q&,ukqkRZ+`HepLl<9BUJx]k>^v^MX(IbW{L)T+-:\|Pv\tGU&^ev#Rh5lr?prv@\|_h(D'%6'>o5X@0VX
2024-04-24 02:19:03 UTC	16384	IN	Data Raw: b4 95 c4 8b 2a d1 be a9 85 85 d6 7a 8d 99 16 bb af 42 e9 c4 f7 fa 97 e2 1c ca de cc 6c 5c 1d 9c 6a 4b 0f 89 e0 31 66 cc eb 98 94 02 2b c8 ea 79 99 03 45 7f 91 a5 9f 49 95 d5 65 8d c5 30 ff 00 0f 64 37 9b e8 c0 c4 c4 53 da 06 7f 71 99 03 74 38 9c 99 7c 37 25 61 ed b3 61 00 8c 88 e5 89 e9 c1 dd ee 65 63 51 56 68 b7 93 62 52 59 42 db aa da cb 50 e9 ca a5 b6 6a 2d 44 f1 31 df ec 42 a9 1e 0a c0 7f f2 53 a3 61 9b 3e 22 e3 2d aa 65 98 b6 20 e5 30 80 6b c0 3e 3b ad a5 be d8 b6 d4 4f 9f ab e3 46 69 4c c8 af db 31 13 76 89 66 8b 19 4d 21 9c 6e a3 40 b0 f1 c6 20 ab 58 5a 86 7b 02 a5 8d 76 f4 a3 e0 c3 b1 e8 66 fc 6a 00 74 56 53 bd 38 99 1e 42 18 ad ba c0 80 9d f9 3e b8 af c3 22 96 95 9e df 50 49 89 79 bb 26 cc 76 ce c5 ad 30 b1 1d 0a 16 c3 13 23 dd 89 5b 4e b5 fb bd Data Ascii: *zBl\jK1f+yEIe0d7Sqt8\|7%aaecQVhbRYBPj-D1BSa>"-e 0k>;OFiL1vfM!n@ XZ{vfjtVS8B>"PIy&v0#[N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50395	34.250.136.134	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:03 UTC	2259	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925141.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.22
2024-04-24 02:19:03 UTC	1776	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 70 61 67 65 22 3a 22 2f 70 72 69 63 69 6e 67 3f 74 72 6b 3d 4e 41 56 5f 70 72 69 63 69 6e 67 22 2c 22 65 69 64 22 3a 22 62 37 31 33 62 63 32 37 2d 38 62 36 37 2d 34 37 64 39 2d 62 64 33 63 2d 63 33 66 33 33 31 30 37 64 37 30 66 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/pricing?trk=NAV_pricing","page":"/pricing?trk=NAV_pricing","eid":"b713bc27-8b67-47d9-bd3c-c3f33107d70f","tv":"js-3.23.0","tna":"c
2024-04-24 02:19:03 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:03 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:03 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:03 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50398	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:03 UTC	433	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/wepresent-logo.815a0c71238ee072fe14.svg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:03 UTC	520	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14839 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:11 GMT ETag: "922e44a701439ab0a02b2dc32355cd01" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f11576d31938be10fbf6eaf4d14172da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: JuMM2AoXswVsBBExdmWI6h4V2JEtMQzl50eAyI8q10o2GwrQ9uezMw== Age: 1
2024-04-24 02:19:03 UTC	14839	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 30 20 31 30 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 35 34 38 39 37 20 31 32 2e 35 32 36 39 43 32 2e 39 39 39 35 37 20 36 2e 33 33 34 20 31 2e 38 37 37 35 39 20 33 2e 38 36 39 38 34 20 30 20 31 2e 31 39 35 35 36 56 31 2e 30 35 34 32 48 31 31 2e 31 38 39 32 56 31 2e 31 39 35 35 36 43 31 30 2e 31 37 30 33 20 33 2e 33 37 37 20 39 2e 37 39 36 33 31 20 37 2e 35 39 38 35 35 20 31 31 2e 30 38 32 34 20 31 32 2e 38 37 38 33 4c 31 37 2e 39 38 36 20 34 31 2e 33 37 38 35 4c 32 36 2e 32 36 Data Ascii: <svg width="320" height="107" viewBox="0 0 320 107" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.54897 12.5269C2.99957 6.334 1.87759 3.86984 0 1.19556V1.0542H11.1892V1.19556C10.1703 3.377 9.79631 7.59855 11.0824 12.8783L17.986 41.3785L26.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50400	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:03 UTC	423	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img1.cedc71cac222019d305e.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:04 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 307426 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:09 GMT ETag: "1cff9093ba7619f76854b2d4f71c01dc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 26f6cb7bc27a3b1f385b3c58823ff51c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: AWzbdn49mjxNMOGDn8ZHbe9BXO_frOlo4yD7P_lp5AwLf2yWA9figg== Age: 2
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 07 2d 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f3 04 15 04 1b 18 38 23 82 57 35 ce 11 47 2a 2c 60 ae 1a 38 01 62 57 b5 ea e6 2b 81 88 4a b1 b9 45 6a 80 28 22 a2 88 a0 80 a8 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|-"8#W5G*,`8bW+JEj("
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 99 e3 f1 61 d3 c8 d4 f4 4e 76 8d c9 f2 b2 ef 53 f4 0d a2 d3 65 a7 24 eb 9f 1f 29 e7 76 b7 7b 97 73 ae 5e 71 ab 24 b5 a7 59 66 23 1b 5a db 73 de 20 d1 de cd e6 b9 b9 ed e9 75 52 5c f8 f3 e9 ba 11 cd 8d b4 6f be c4 d9 f4 a3 56 92 35 2e c3 4d da 5b 90 d8 73 5a cc ac f7 4f 3d 4a 77 e5 46 32 69 18 92 43 bf a7 7b 17 94 8e 96 92 49 5e 04 56 dc 54 2d 58 df 89 98 74 e4 8f 55 c5 57 c8 4f 9b 9d a7 79 f5 df 52 08 60 ad d3 74 0f cb a1 a6 f9 78 6d 19 6a ea f5 1e 7f ab ca bb a0 c1 d8 dd e9 71 70 22 d2 c6 ba 76 fb af 8e 4b 12 d6 a7 6e 06 72 5e 6c 6e 7a 49 84 2f 15 0b 99 64 bc b6 d4 15 b4 74 1b 89 65 1f 35 77 1a cd b1 4e f5 7b d6 a8 d3 b3 06 3b 9a f4 54 86 95 cb 32 3e 85 e8 66 cb 82 fd c5 9e 86 25 bd 4d 58 6c 91 ac 78 55 a4 73 e2 65 b5 41 d7 2c 47 71 ba 87 b6 4f e5 5e 55 Data Ascii: aNvSe$)v{s^q$Yf#Zs uR\oV5.M[sZO=JwF2iC{I^VT-XtUWOyR`txmjqp"vKnr^lnzI/dte5wN{;T2>f%MXlxUseA,GqO^U
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 90 44 c0 15 00 89 a8 00 15 58 00 09 82 64 b0 91 a0 98 90 59 51 69 9b f1 81 00 54 08 10 00 0a d8 00 26 04 c8 58 48 5e 49 22 40 b2 66 d3 c7 75 04 01 50 22 51 00 00 15 b0 02 48 94 96 04 de 8b 4c 93 13 12 2d 55 a6 d2 9e 6a 02 00 a8 02 a0 00 15 b0 01 30 b0 0b 09 2f 20 90 5a ab 5b 4d b3 a3 96 68 10 05 40 42 00 02 b6 00 00 2c 2d 50 b4 de 8b da 02 42 d5 2f d7 f5 bf 25 cf 3c ca 04 02 a0 22 00 56 d5 b5 6c ad 80 00 13 22 d5 0b 25 75 a2 60 24 0b df a7 0a cf 3c 51 00 a8 02 10 2a b5 40 2c 00 01 29 89 01 64 ae 90 12 b2 b6 99 9b 52 d3 cd 41 01 50 04 40 2a 0b 54 2d 5b 00 09 44 c8 02 c9 2e 90 49 61 2b 5a 8b f2 cd 10 2a 08 44 90 2b 6a ad 50 00 b0 00 98 4c 84 12 b4 97 48 12 b0 5a 6d 45 f8 c4 0a 85 66 00 54 00 00 58 00 09 44 88 b2 c4 ae 94 24 9b 09 99 9a af c6 80 54 2a 00 a8 Data Ascii: DXdYQiT&XH^I"@fuP"QHL-Uj0/ Z[Mh@B,-PB/%<"Vl"%u`$<Q@,)dRAP@T-[D.Ia+ZD+jPLHZmEfTXD$T
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: a9 1a d2 fe 45 3d ed 0f 4e ff 00 87 5b fa 9b 7f b1 c2 ca 37 13 d6 8d 85 b2 e0 aa 22 a4 13 c9 d5 9e 37 5a 6b 72 a3 8b e8 ce 1c de cf cd 52 fd 48 0c dd 62 dd fe c5 c7 a2 aa df b1 4e e7 72 3b 21 fe 52 c3 d1 46 7d 80 66 39 10 38 59 8a 9e b3 65 41 8f ac 40 5e e2 72 ec df 25 59 55 b3 e7 8f f4 58 30 5b bd 95 ae a2 97 64 08 98 da 88 bc a0 19 9b 6a a8 aa 76 54 62 5d e3 3b 2e 7f 62 e3 82 ff 00 c2 5f 3b dd 96 e3 c3 8a 7b 76 46 f5 a2 3f 35 80 ef 32 e2 9c 36 68 78 dc 1c af db 1c 82 8b 77 d6 5f bb ee f6 b0 f8 2a 7b 61 70 f6 a6 77 c2 36 df 3b de 72 a3 ae 8a 28 df 0c a4 db 22 2c db e6 be b4 a4 2f b7 96 03 9d 91 da 34 45 f6 bc f6 e6 be b6 a4 2e d2 4f 14 36 a5 35 fc dc 9a af ae 29 c9 b6 ea 4b 29 aa db 23 d8 e8 e9 88 b1 b9 cd 42 1c d9 72 6d d3 e7 92 32 f6 16 db 13 2c ba fc Data Ascii: E=N[7"7ZkrRHbNr;!RF}f98YeA@^r%YUX0[djvTb];.b_;{vF?526hxw_*{apw6;r(",/4E.O65)K)#Brm2,
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: b5 6c 94 f4 5b 36 08 cb a9 9f 77 f2 c7 75 47 16 cf 7d 3d ea 3b de 3c 10 83 66 9a 99 41 70 10 8b 5b 3d 4a 91 9b 31 93 33 01 06 3c 27 1d 93 9f b3 9e e8 b7 51 61 b1 bb c5 b8 29 2a 68 24 68 64 70 e1 7d f5 b5 b4 55 73 6c d9 27 2e 8a 39 03 f8 70 6a 8a e1 f6 b1 f4 3e 37 51 ff 00 a9 55 44 75 a9 3d e5 5f ab 3c 10 71 0c c3 7f fb 09 d9 dc a6 b1 d2 1e cb 1c ef 01 75 24 13 63 3e 49 ff 00 c2 8c 72 d8 f9 17 7f 09 5b 99 3d 47 ff 00 09 5b b7 fa ae fe 15 bb 7f 27 7c 96 17 0e 1f 92 b1 59 ae 0a fe d5 77 7a cb 13 bd 6f cd 62 3e b7 e6 b1 bb d7 fc d6 37 61 ef 9f 9a c4 6f 7b e6 9e c9 31 9c 5a 9c cf c5 09 24 86 f8 1d 6c 4b ac c8 3f 69 9a 64 f0 e2 65 e7 cb 8e 6a ae a9 ad 60 30 cb 9f cd 43 51 33 ed 8a 5e 1c 93 aa ea 33 b3 ff 00 24 da a9 fd 7e 7c 13 2b a5 91 af 6b 80 73 8d b3 d0 04 Data Ascii: l[6wuG}=;<fAp[=J13<'Qa)*h$hdp}Usl'.9pj>7QUDu=_<qu$c>Ir[=G['\|Ywzob>7ao{1Z$lK?idej`0CQ3^3$~\|+ks
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 00 32 c2 f6 5f 98 b2 c0 4a c1 d1 6b a0 d5 1c 44 9c 96 cd a5 21 e4 f3 62 7c 78 56 44 a9 c9 14 d2 61 d5 35 c1 ad 82 f7 ee 0b e5 74 e2 4c 92 9b 5a ee c9 4c 6c c2 8d 84 13 fb a1 40 d6 98 c5 f9 05 34 0d 05 99 7a 61 45 89 a6 4f 8a 64 84 e0 f6 ab b4 b0 9b f1 55 13 48 c7 37 09 e1 c9 36 ee 92 2c 5c 8a 33 d4 5e cd 2e 46 a6 a7 4c 4e 41 b7 bb 9c b7 d5 1f 89 09 67 2f 17 c5 6b e6 a7 7b db 13 0b 35 5b ea c3 e8 bf e6 84 93 19 3b 77 02 c7 55 56 e7 6f 63 00 f1 17 51 39 ee a8 2c 2c cb 3f 82 0e b5 5e 1b fa 59 7c 94 ae 18 cd 9d f9 ac 47 9f f9 95 33 85 ce 7a 34 df 34 5e d2 49 c4 35 e6 8b 9b eb 0f e2 42 46 9a 69 8e 2c b4 54 58 61 9d af 7c 8d b7 8a 83 e8 d4 15 50 c1 33 a7 94 6f 06 2b 64 bf a2 54 61 de 7e 6b 7c 16 d5 a6 65 2d 49 82 32 70 b1 e0 0b ae 08 68 3c 50 00 84 f8 78 b5 30 Data Ascii: 2_JkD!b\|xVDa5tLZLl@4zaEOdUH76,\3^.FLNAg/k{5[;wUVocQ9,,?^Y\|G3z44^I5BFi,TXa\|P3o+dTa~k\|e-I2ph<Px0
2024-04-24 02:19:04 UTC	1115	IN	Data Raw: aa bb 9a 41 6b e4 51 3a 14 2a a6 1c 57 d6 33 fb 0a 35 e4 ea c5 d7 5a 78 15 d7 62 3c 0a eb 51 e1 e2 a1 a9 6b 6f 9a eb 6c c4 7b 79 2b 93 09 5d a4 45 d6 13 71 a6 ab 32 6e 6d e0 13 c1 1a 26 9e d0 bf 34 ef 34 54 64 0b e6 bd 14 32 50 36 fb df 00 8b ac 5f 7d 2c 17 ad ee 2f d9 05 84 b6 a2 fc 2e 14 83 ca 9f 04 3f 67 e2 b1 59 b2 a8 66 88 34 e2 7d 8e 22 84 8d 74 f9 1f 40 a0 98 e0 d2 6e a0 90 0a 52 ee 18 d3 6a a2 e6 ba f4 40 e4 50 99 b1 53 44 5d 7c ee ba f4 7e d5 35 53 24 6d 85 d5 6c b6 b3 48 f4 5a 99 3b 04 f8 f1 65 74 2a 1b 25 5c 76 f5 94 f3 35 93 3c 11 e9 2e b4 d1 e8 95 45 2e 39 64 36 f4 10 a9 b7 a0 ba f5 bd 05 0c c7 aa 54 49 6f 4d 1a a7 61 39 2a 86 38 9d e7 e1 0a 9e 73 0c ac 7d 83 ad c0 a7 ce ca 88 84 ac 6e 10 eb 64 b8 2c 8d d3 46 02 79 21 d0 5a 09 d3 e2 b3 1f 60 Data Ascii: AkQ:W35Zxb<Qkol{y+]Eq2nm&44Td2P6_},/.?gYf4}"t@nRj@PSD]\|~5S$mlHZ;et%\v5<.E.9d6TIoMa9*8s}nd,Fy!Z`
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 92 b5 9d f0 fb 07 ec 15 aa e0 b9 f8 a6 e0 1e 82 6b 83 7b ad 0a ec f5 1a ae 07 74 34 2c 95 d5 c7 40 3f 62 4d 14 7d c0 a5 c8 20 5a 1b 72 35 5b f0 34 07 e6 8d 53 dc 11 a8 91 c8 bc 01 7c 1f 9a c7 c8 2a 68 f1 b7 37 b4 78 a7 c6 06 8f 69 55 2c 0d c2 71 67 9a b2 19 5d 58 14 71 00 6d a2 c5 70 a2 cd aa 9a e1 ac 16 bd dc e5 09 38 e2 b8 e7 f9 29 db fa 11 37 e3 fe aa 66 e1 77 b2 cb 4f b1 7b 21 21 b7 04 e7 5f a2 97 cd b3 c1 54 01 b9 7a c4 4b 6c b3 cd 00 ec d6 07 72 58 4f 24 db ee dc d2 a3 36 7a 37 24 e6 9a db 31 d9 ad 9e 2c 65 f0 5f fb 2e 27 dc 47 26 b7 24 f0 d3 67 7e 20 a4 f3 9f 34 3b 8d f7 d0 fd af 82 77 9a 88 7b 0a 8f ce 9f 75 5b 24 35 51 5b 70 ff 00 f1 14 96 0d 4d ce 37 a3 fa a5 3f 82 65 d5 40 ed 85 5d 8b 79 11 1e a8 54 9b 5a 29 e9 c4 55 51 34 e9 9d b8 fb 42 da 74 Data Ascii: k{t4,@?bM} Zr5[4S\|*h7xiU,qg]Xqmp8)7fwO{!!_TzKlrXO$6z7$1,e_.'G&$g~ 4;w{u[$5Q[pM7?e@]yTZ)UQ4Bt
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 74 dc 56 51 66 fd 79 a6 38 b9 dd a7 1f 9a 86 46 0b 81 a2 9a 4b 95 0e 71 b4 dd 18 dc 2b 24 1f 80 ae af 2b 2d 8a 3d 74 5d 52 a0 7a 21 43 1d 44 58 cb f2 bd 94 bc 5c f3 75 14 e1 ac c3 7f 8a 76 07 36 4e d5 ce 34 2d 60 9a c2 48 b0 be a9 d0 4a d0 5c e1 60 a4 b0 8f 44 c6 5a 4f 06 85 3d 83 ca 76 83 a2 5e 28 9f 26 6c 99 de 09 bd e5 51 e6 a4 f0 57 2a ea eb 4e 8b ab ab a1 da 28 c6 00 4c 16 e8 de 0e 4b 79 ec 5b c7 72 41 f7 61 f1 47 45 37 74 23 dd 6a 3d e1 f0 59 ef 3f 79 04 de 97 2e 68 9f 26 9b 92 cc b8 a0 c1 cd 60 0b 76 d4 63 66 6a 76 34 30 59 46 73 b2 39 a8 49 2c 28 e4 4a bf 40 39 a7 ff 00 fc a3 a3 44 56 6a e8 77 4a 8d d6 2a 2c da f4 47 69 c9 e2 c4 ac d7 c5 59 61 5c 50 be 10 8e 6d d7 a2 c9 a0 93 64 d6 9e 6b 76 6e b7 45 16 1b ac 2c e6 84 63 55 bb cd 61 e4 83 2f e9 ac Data Ascii: tVQfy8FKq+$+-=t]Rz!CDX\uv6N4-`HJ\`DZO=v^(&lQWN(LKy[rAaGE7t#j=Y?y.h&`vcfjv40YFs9I,(J@9DVjwJ,GiYa\PmdkvnE,cUa/
2024-04-24 02:19:04 UTC	4542	IN	Data Raw: d5 a2 f7 53 34 3e 2a 4d 16 27 5c 76 94 99 16 2e 09 f2 96 06 e4 8c ae 3c 55 ee 53 96 a1 44 ee d0 f7 5c 83 3d df 83 94 6c 7d fb ce 6f c5 3f 18 3e 74 69 c9 45 a2 07 b6 10 3a 2b a2 55 d1 70 e6 aa 5c 08 5c 35 4e cf 24 06 49 cd 06 f9 26 c6 1b a0 cd 54 0b 46 a3 ee 8f 00 ad d0 48 41 3c f6 82 7b 43 82 6c 76 4c 07 a2 41 fc 93 6f 84 29 7b c9 99 dd 37 26 ac ec 9f 93 ba 1c 6c d2 9e 7b 45 5d 67 f6 af f6 87 f5 12 34 62 ec e9 d1 aa b7 43 5a 5c 6c 16 e2 4f 55 75 79 17 57 7e aa f6 b2 ba c4 ef 55 5e 41 c1 62 77 24 c2 6e b3 0f ef 59 19 05 d4 73 d8 a8 1e 5c c6 96 b3 e2 83 1d bb 1d 8e 49 ac 79 27 2e 48 31 dc 95 5d 44 71 55 c8 d7 11 74 fa e6 11 6c d3 2b 48 7e 4c 76 9c 91 ab a8 b7 98 7f f0 a9 25 a9 91 a6 d1 3f c6 cb 67 91 24 8c 61 f5 b3 f8 ad a1 b3 d8 43 d9 1b 34 b1 3f 14 f1 6f Data Ascii: S4>*M'\v.<USD\=l}o?>tiE:+Up\\5N$I&TFHA<{ClvLAo){7&l{E]g4bCZ\lOUuyW~U^Abw$nYs\Iy'.H1]DqUtl+H~Lv%?g$aC4?o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50402	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	423	OUT	GET /creator/wepresent/2404-p8/wp2-ver1/1_kkRi8G/img2.35539ce3dc0fcc71a276.jpg HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:04 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 493345 Connection: close Date: Wed, 24 Apr 2024 02:19:03 GMT Last-Modified: Tue, 02 Apr 2024 13:07:09 GMT ETag: "f6b0abd028338f6a7eccda3aff7b6e94" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 bf87b64ab79c59322d0e3419ad3e412a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: mzuF60cp3Kc-lnWDtoPKEiCO3KE-cDLhdtwuhvhv5p0jyGuZDmapVA== Age: 2
2024-04-24 02:19:04 UTC	15889	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 07 3c 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff da 00 08 01 01 00 00 00 00 e0 70 47 e8 89 5c 4e ee 2c 0b b4 8b 41 d9 99 2c 63 2c 5f bf a5 97 6d 7d ed a4 87 b1 30 86 e5 d0 62 da 31 78 9f 29 b5 35 1a 6b Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|<"pG\N,A,c,_m}0b1x)5k
2024-04-24 02:19:04 UTC	101	IN	Data Raw: 15 1e 5d 9c 33 31 ea 96 94 d7 33 38 e3 4f 2f b9 be da 02 eb 14 82 dd f5 d2 15 e8 ef 8e 58 98 d5 aa bd 0f a2 69 cb e8 44 49 25 96 cc 4d b3 1c f3 9e 4d 64 ef 91 c2 15 02 96 bf 59 7a 5d 96 7a a5 22 c7 69 1a b5 ca 41 73 94 db b4 48 6b 05 da b3 64 45 57 7b 5e aa ce 20 51 64 f5 ba 35 6c 0c b7 d2 aa f6 a8 e7 Data Ascii: ]3138O/XiDI%MMdYz]z"iAsHkdEW{^ Qd5l
2024-04-24 02:19:04 UTC	16384	IN	Data Raw: 24 a7 53 27 ac 91 56 02 d6 ce 44 f5 10 ec 4f 0c 16 21 fa 88 cc fc 24 59 d2 4c 44 3f 28 32 e2 da 38 df df 79 85 59 90 3e d0 6d 27 5b 5a 1b a0 ab f6 95 b5 7d 0f da 0a 66 a2 cd 78 89 a6 81 09 a9 23 c1 12 a4 a1 62 19 1b bf ca f8 1e 73 7b 9b 5a 13 0b f9 88 2a 16 0b 52 d1 58 51 22 eb 2d 67 e6 44 19 59 a9 0d a7 4c ea 3e a3 f3 79 ed ef a3 ab 85 da 71 44 e6 64 37 fa 12 08 f9 9f 3d 97 d1 c5 ab 8e d5 0a 5a 44 16 f4 95 fa cf 97 ec af 79 4b 1a 7d 86 b0 1a a3 5b 00 75 c3 0f 60 42 19 2d fa 52 5d 5b 2d 08 76 60 54 c4 48 0d 76 ab b2 90 dd b9 cd 39 41 16 cb 24 82 54 b7 6d 72 62 7e db 47 45 4f 67 b2 83 b2 66 fa 44 05 fb a0 f1 d4 db ea b6 30 71 a4 35 7c d8 77 1d 34 18 07 a1 7b 45 ef 09 15 a4 36 08 f6 07 5d b6 84 2a f4 60 8c c0 30 e5 3e c0 6a e4 8b a3 71 75 2d 52 10 e1 1d 95 Data Ascii: $S'VDO!$YLD?(28yY>m'[Z}fx#bs{ZRXQ"-gDYL>yqDd7=ZDyK}[u`B-R][-v`THv9A$Tmrb~GEOgfD0q5\|w4{E6]`0>jqu-R
2024-04-24 02:19:04 UTC	3198	IN	Data Raw: a4 cc 54 f5 d1 a4 92 eb 6e cf 3a 5f 69 69 48 2c 00 6e d7 32 33 b0 75 3a 38 e5 59 ef e5 51 aa 4a 4c 77 5e 32 0f 41 35 88 88 af 34 d8 48 ab ef 73 d4 a4 f4 97 17 e8 c9 59 47 1f a3 35 8c 2a 8f 5a ba 38 d6 1e 4f 58 11 48 6b e3 32 51 ee b6 4a fa 9b 0f aa 01 c4 cf 26 d8 b3 a6 e1 40 22 fc 30 c6 d8 c4 72 c8 9d 9b 29 a0 0f de df 69 37 5c 2d be 2d 34 8e 2b 87 67 2b e4 5d 33 ac 11 c5 1e 9a 7b db 6d 13 16 c9 c5 8b 42 a5 1c 62 0c f2 cc 32 9a 35 9a 33 27 d8 2e 48 30 2e e1 1b 73 22 4c e7 65 15 85 d3 80 6d f8 ed b4 a5 57 67 3c 03 71 78 6b 26 f9 4f 4f f5 7a 4e 89 64 ce b4 ca 24 f6 d8 d7 20 89 a8 e0 d8 99 c5 76 7f c9 0e 2a a4 de c1 9c af a2 cd d0 cb c8 7c e0 6b e5 91 65 37 b6 dd cc ad f3 54 43 ab 10 1d 17 6c df a0 be 59 58 db 24 82 a5 7d f9 62 8b 86 3c 22 79 26 56 46 70 68 Data Ascii: Tn:_iiH,n23u:8YQJLw^2A54HsYG5Z8OXHk2QJ&@"0r)i7\--4+g+]3{mBb253'.H0.s"LemWg<qxk&OOzNd$ v\|ke7TClYX$}b<"y&VFph
2024-04-24 02:19:04 UTC	6396	IN	Data Raw: 07 93 12 47 9d 9c 3d 55 25 a6 b6 a9 cd de be 91 c3 c5 8f aa 37 c4 c4 37 43 6a a9 ba 14 1b 05 49 a8 52 4b 59 9a bd 65 ed e8 17 c2 60 ab f8 f5 9d 64 44 6b b4 9a e3 3e db 3b 83 ae b8 c7 b5 84 51 61 de 73 0d 2f 6d 60 8e 38 fd 1c 7a 63 3e 8f 12 e2 0c 19 b8 b0 99 34 41 b0 72 c2 be 36 83 cd 64 69 ae de 06 ba a2 32 ee 0d 3d 95 94 ff 00 0f bd 96 c5 ef 6a 85 00 f3 db 19 62 35 e9 c0 db 5f 6d 99 08 33 d3 e9 91 a2 80 92 e2 ae 69 24 d3 14 b7 7b 86 e6 07 b1 11 d4 ae 0a a9 f0 fb 69 36 f4 72 16 f3 d6 da 6c 30 eb 64 4e 35 92 f3 5b 6d 54 7e f2 bf 6d ac 38 0c 3b 1d 48 c5 2d 37 af c5 a5 c7 ac 44 3d 10 b9 c7 e7 b5 5c bb 13 4f 4f a6 b2 67 4f 4f 80 f4 c6 b8 f7 b4 1c 61 a1 92 73 4e 27 78 62 d2 1d 31 1e 9a 63 3e 8b 32 78 7f 17 b8 91 1b 2c 72 10 b8 06 91 9d 65 de 4d 3d 58 45 a7 9d Data Ascii: G=U%77CjIRKYe`dDk>;Qas/m`8zc>4Ar6di2=jb5_m3i${i6rl0dN5[mT~m8;H-7D=\OOgOOasN'xb1c>2x,reM=XE
2024-04-24 02:19:04 UTC	12792	IN	Data Raw: ab 65 de 60 bb d7 57 9d 31 f7 76 9f 2d 4f f6 7d 09 de 9f 1e 77 84 54 1c 6d ad 12 d2 f0 98 ad 5b 35 12 8b 09 cd 2e c8 91 50 9b 8b 81 13 72 50 60 e2 ec 59 33 3b aa 2a d5 a0 ea 60 1c 35 0e f1 ea dd 4c 78 48 23 e6 1e a1 75 7b 55 f7 9f 31 c1 d1 d2 71 b6 b5 ca ea 42 36 52 a9 c5 8d 36 37 85 08 05 54 f3 e1 4a 73 9e 9f 1a ad 32 ed cd c0 09 bd 4a 38 9c 0b 78 92 c2 b8 56 5d cc 0d 0d b0 66 02 3d 69 0a 46 ef 56 12 2f 15 e5 1d 27 23 2b 19 1b 47 48 00 d2 da 99 dc b9 d4 23 de 96 e2 27 ce 65 25 2f 8d da fd ce 1d c4 28 bd 1a 8c 0d 8a 7c f4 a7 70 00 70 ea 41 e8 58 be 54 dc cd 26 b0 52 db 4f 7c d9 29 d9 5a e9 19 60 4a ca 42 35 d2 f7 77 28 16 b1 79 47 e8 02 f8 0d c5 88 96 40 9f b0 bb 04 78 ca ca cf 19 c7 44 e6 a7 8a 49 40 db 11 31 0b ec e4 ea 27 e2 26 51 cd a0 cb c5 64 b4 f4 Data Ascii: e`W1v-O}wTm[5.PrP`Y3;*`5LxH#u{U1qB6R67TJs2J8xV]f=iFV/'#+GH#'e%/(\|ppAXT&RO\|)Z`JB5w(yG@xDI@1'&Qd
2024-04-24 02:19:04 UTC	12792	IN	Data Raw: de fc cc b7 e7 87 ee af c3 f9 5b 9f 8a cd 12 7f 6c d1 70 f9 b4 28 e7 11 83 61 85 98 84 68 a9 b8 f2 20 ca 42 65 d7 57 37 ad 55 82 2d 49 aa 8a 40 f5 99 8c 18 83 b6 45 0e eb e8 20 ff 00 64 ce 9c da cb ab d3 c4 6f a2 63 d9 cb 1e 93 33 e9 b6 fc 7a d8 75 0e 9d 5e 56 47 75 95 7b 75 84 1d 50 7e c2 19 6f 8b 27 4f 6d e2 ac 68 c1 8f 95 5b 3d e1 5a 66 d3 ca b6 68 f5 78 d8 c0 6e 39 55 6d 97 df a8 d5 69 bc 59 59 20 47 a9 36 23 d1 af 8e 06 6b 53 0b 39 b1 f9 4a 7a 97 55 ca 74 29 77 4e ad 2c 6e 47 a6 5a eb ec c2 c7 1a 4a ae ba ba ab 55 15 de 97 56 8f c3 fa bb 06 3b 4c aa 29 ca c2 15 5e d4 e3 ef 9c ea 17 5b 5a 56 c1 f2 7b c1 1a bb 71 9c f6 03 f5 0c 86 bf 2c f6 b7 72 d6 89 5d b4 b1 a7 6c 71 32 59 b6 07 4d b4 b6 da cc 12 2c 41 3f 26 c3 46 74 a2 5a 92 b3 a2 b6 4a f7 d1 ec 2d Data Ascii: [lp(ah BeW7U-I@E doc3zu^VGu{uP~o'Omh[=Zfhxn9UmiYY G6#kS9JzUt)wN,nGZJUV;L)^[ZV{q,r]lq2YM,A?&FtZJ-
2024-04-24 02:19:04 UTC	6396	IN	Data Raw: b9 27 50 24 52 da af 26 8e 5c 67 b0 fc f6 bf f1 65 3f 76 44 7f 91 57 6c 7b 7f 2a e3 24 5b 31 75 dd 48 7e 25 9f 42 4b 95 6e 05 62 d3 d8 ac 89 89 e6 a7 33 1f fe 4d 53 37 ca 19 c4 77 0c b7 98 01 97 a7 e6 bd f9 14 52 cf 9d 7e 13 76 6a 6e a6 ed 5d ee 28 bb 26 ec 9c 6e 63 f9 32 1e 66 2e ae a1 65 df f0 cc 5f 62 02 51 0b 51 6a 83 53 a1 01 aa 4c 7b 2a c9 5c 8c 7c ce 81 49 e1 8a 3a f7 53 ce c9 c7 43 6a 3b da fa a5 47 65 18 0f 83 07 d6 65 f9 18 f4 2e ed b3 af 56 06 b1 f3 3a 96 45 a2 b0 7f cc e9 5f 89 73 f0 f1 ff 00 2d 56 5f 53 cf cf 28 72 2b e9 f9 16 0e 53 a4 e2 25 15 39 99 14 df 90 3f aa 54 ae b1 a4 ea d7 b7 fa ae 4a c5 6d 37 26 ef 23 fc 84 ac fc 1b ad ab e8 af a9 e4 05 4e 5f ea 94 b8 fd c4 c9 c5 64 01 12 ce e6 61 58 da 3b 13 7e 99 8f db c2 cc 79 92 be 3a 7d 32 e6 Data Ascii: 'P$R&\ge?vDWl{$[1uH~%BKnb3MS7wR~vjn](&nc2f.e_bQQjSL{\\|I:SCj;Gee.V:E_s-V_S(r+S%9?TJm7&#N_daX;~y:}2
2024-04-24 02:19:04 UTC	6396	IN	Data Raw: 22 eb ec a7 a3 e2 54 01 b3 bf 85 86 dc aa c9 ea 19 64 6c 96 4e cd b7 1c 1b ad 76 f3 88 9e c1 2c f3 d4 ef 9c 90 97 d6 56 0e 5e 57 51 bf b5 57 e1 fa c6 8d d5 53 4d 23 55 8f a9 a3 9f 69 9f 61 3f be 58 e8 88 59 ed eb 58 e8 38 d3 f9 ac 9c ab 55 5f 29 12 bc 5b 78 b7 85 02 3e 0e 46 51 b1 90 72 c5 e9 2c 8f 57 cc c8 c9 7b 28 45 3f 87 3c 52 58 e3 23 5f 94 ed 12 b5 a9 12 b5 dc df e8 ea 56 76 fa 66 63 4b 46 ef c4 ae 58 cc d9 d7 bc ad 0a 96 de 5b 03 59 98 a8 07 09 93 ae f7 85 70 13 8c b9 89 d4 fb 2c e9 21 57 a8 56 4f 52 b0 1c 9b 1a 26 43 1f 8b 2c df 86 fc bd 9e 38 d6 32 d2 0e 9b dc 5d cb f1 af 44 1b 4a 98 7b 66 3e 2e 38 aa d2 45 95 a7 b6 32 ce da c6 55 f8 9a d1 f2 6d ac 08 d6 58 23 12 7d c5 5f 8c 1b 3b 84 11 3a 79 2b 95 5c a4 85 cb b3 78 6e 51 f2 d2 62 e2 d3 62 64 72 Data Ascii: "TdlNv,V^WQWSM#Uia?XYX8U_)[x>FQr,W{(E?<RX#_VvfcKFX[Yp,!WVOR&C,82]DJ{f>.8E2UmX#}_;:y+\xnQbbdr
2024-04-24 02:19:04 UTC	12792	IN	Data Raw: ca af aa 66 78 ac cc 44 6f f5 0a cc ea 63 f8 a3 2f f4 d5 4e 9f 65 af dc e4 33 aa 4b 3b 6c 5d 3f b8 a8 d7 b6 9f 15 a8 95 8d 19 97 fc 6d 00 d4 e9 f6 d8 d9 41 5a 27 fc 7a 67 52 d1 3a 98 9a 6c 37 97 2e f2 ad 13 a8 78 14 89 93 e5 e8 8a be 26 52 63 9c 5a 1a fc 9e a1 45 22 a5 a7 0b f3 79 b7 12 8b d2 af aa b2 d9 59 6d 65 99 0c 93 1f a3 e5 5b a2 71 fa 46 2d 7f 5a a8 55 d0 b3 2f 1e b9 7f 53 b5 bc 57 d4 73 ee 4a 7b b5 dd 93 c8 ed b9 e9 63 3f 23 28 c7 be e7 e3 56 27 e1 ab 18 06 c8 c7 e9 f8 58 9c 7b 44 c1 f7 8d fd 93 ed 2e ea 18 78 fb e7 d6 ba 9b 66 56 95 0e 93 66 b9 d5 2b 52 b5 99 83 7d d7 3d ca e4 08 5a 33 42 d1 9c 01 2f b7 85 0c e1 af b2 db 38 1e cf 82 6d c7 aa af cb 01 2d e9 d4 bf d2 d8 39 0b f4 58 2e 16 e8 ec f2 f7 9a 74 fe ea 55 df c5 65 78 7c b1 27 e7 1e 9b ae Data Ascii: fxDoc/Ne3K;l]?mAZ'zgR:l7.x&RcZE"yYme[qF-ZU/SWsJ{c?#(V'X{D.xfVf+R}=Z3B/8m-9X.tUex\|'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50401	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	2950	OUT	GET /i.gif?e=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&s=BpOsA8srdQJukrFwZb9Tu9XyWzE HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925141.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.22
2024-04-24 02:19:04 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:19:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50405	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	1988	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:05 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:04 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50403	34.250.136.134	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	2259	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 3320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:04 UTC	3320	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 75 65 22 2c 22 65 69 64 22 3a 22 38 37 34 63 64 65 65 63 2d 61 35 36 39 2d 34 63 62 65 2d 62 65 39 38 2d 34 31 39 34 30 66 39 63 31 62 65 65 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 70 22 3a 22 77 65 62 22 2c 22 63 6f 6f 6b 69 65 22 3a 22 31 22 2c 22 63 73 22 3a 22 55 54 46 2d 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"ue","eid":"874cdeec-a569-4cbe-be98-41940f9c1bee","tv":"js-3.23.0","tna":"co","aid":"transfer_core","p":"web","cookie":"1","cs":"UTF-8","lang":"en-US","res":"1280x1
2024-04-24 02:19:05 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:05 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:05 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:05 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50406	151.101.193.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:04 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:19:04 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50407	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:04 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:05 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:19:05 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50412	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:05 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 1433 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:05 UTC	1433	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 32 36 36 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 34 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e 67 69 Data Ascii: [{"age":12661,"body":{"elapsed_time":647,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.1.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.gi
2024-04-24 02:19:05 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:19:05 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50411	151.101.1.140	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:05 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 1481 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:05 UTC	1481	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 34 31 36 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 34 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 36 35 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: [{"age":14161,"body":{"elapsed_time":647,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://wetransfer.com/","sampling_fraction":0.3,"server_ip":"151.101.65.140","status_code":200,"type":"ok"},"type":"network-error","url":"http
2024-04-24 02:19:05 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 02:19:05 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50410	99.80.201.152	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:05 UTC	2717	OUT	GET /i.gif?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA4ODIxMTA0LCJjaCI6MzQ5MDIsImNrIjp7fSwiY3IiOjM0NzA3NTY3MywiZGkiOiIzM2YzYWYxNzI2MDI0ZWIxOWQyMGNmYzRmOTZiZTg4OCIsImRqIjowLCJpaSI6ImFjZDU3Nzc2YTY4ZTRiN2RhZjhhN2M3Yzg4NDgwODM0IiwiZG0iOjMsImZjIjo1MjIzNTA3MTEsImZsIjo1MTEwOTY4OTcsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MTM5Njg2LCJydCI6MSwicnMiOjUwMCwic2EiOiI1NSIsInNiIjoiaS0wZjA4NDhhMjE0NzI2MzIwNiIsInNwIjoxMTQ5NjEwLCJzdCI6MTA1NTkyMiwidWsiOiJzcC1jNDQ0MzAwZi02MDA2LTRlODMtOWMzOC0zZjQxOGI5YjExMWMiLCJ6biI6MTk5MDcxLCJ0cyI6MTcxMzkyNTEzNjY0NiwicG4iOiJpZnJhbWUiLCJnciI6dHJ1ZSwiZ2MiOnRydWUsImdDIjp0cnVlLCJncyI6Im5vbmUiLCJ0eiI6IkV1cm9wZS9BbXN0ZXJkYW0iLCJiYSI6MSwiZnEiOjB9&s=BpOsA8srdQJukrFwZb9Tu9XyWzE HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:06 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:19:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50413	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:05 UTC	1988	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:06 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:06 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50409	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:05 UTC	515	OUT	OPTIONS /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://wetransfer.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:06 UTC	600	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true access-control-allow-headers: DNT,Keep-Alive,Accept-Language,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-kevel-env Access-Control-Allow-Methods: GET,HEAD,POST,OPTIONS Access-Control-Allow-Origin: https://wetransfer.com Content-Length: 0 Date: Wed, 24 Apr 2024 02:19:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50414	34.246.249.180	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:06 UTC	2219	OUT	POST /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:06 UTC	523	OUT	Data Raw: 7b 22 75 73 65 72 4b 65 79 22 3a 22 73 70 2d 63 34 34 34 33 30 30 66 2d 36 30 30 36 2d 34 65 38 33 2d 39 63 33 38 2d 33 66 34 31 38 62 39 62 31 31 31 63 22 2c 22 69 73 50 61 79 69 6e 67 55 73 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 41 64 62 6c 6f 63 6b 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 43 68 61 6e 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6c 61 70 22 3a 31 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 69 73 41 64 73 46 6f 72 50 72 6f 22 3a 66 61 6c 73 65 2c 22 69 73 52 54 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 63 75 73 74 6f 6d 54 61 72 67 65 74 69 6e 67 22 3a 7b 22 61 64 49 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 5b 22 75 73 65 72 5f 6c 6f Data Ascii: {"userKey":"sp-c444300f-6006-4e83-9c38-3f418b9b111c","isPayingUser":false,"isAdblock":false,"isConsent":true,"isChannel":false,"position":2,"lap":1,"experiments":{"isAdsForPro":false,"isRTAEnabled":true},"customTargeting":{"adId":null,"keywords":["user_lo
2024-04-24 02:19:07 UTC	383	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:19:07 GMT ETag: W/"3e59-CKnKT5UMGdQ/gen798XI6txJpbQ" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 15961 Connection: Close
2024-04-24 02:19:07 UTC	3749	IN	Data Raw: 7b 22 63 72 65 61 74 69 76 65 73 22 3a 5b 7b 22 61 64 49 64 22 3a 35 32 31 33 32 32 32 38 38 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 33 34 36 30 34 34 37 37 34 2c 22 66 6c 69 67 68 74 49 64 22 3a 35 31 30 30 37 33 35 33 33 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 30 37 38 30 30 34 37 38 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 34 32 38 37 35 39 2c 22 70 72 69 6f 72 69 74 79 49 64 22 3a 31 33 39 36 38 36 2c 22 63 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 6e 6e 79 2e 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 72 3f 65 3d 65 79 4a 32 49 6a 6f 69 4d 53 34 78 4d 53 49 73 49 6d 46 32 49 6a 6f 30 4d 6a 67 33 4e 54 6b 73 49 6d 46 30 49 6a 6f 35 4e 54 6b 73 49 6d 4a 30 49 6a 6f 77 4c 43 4a 6a 62 53 49 36 4d 7a 41 33 4f 44 41 77 4e Data Ascii: {"creatives":[{"adId":521322288,"creativeId":346044774,"flightId":510073533,"campaignId":307800478,"advertiserId":428759,"priorityId":139686,"clickUrl":"https://donny.wetransfer.com/r?e=eyJ2IjoiMS4xMSIsImF2Ijo0Mjg3NTksImF0Ijo5NTksImJ0IjowLCJjbSI6MzA3ODAwN
2024-04-24 02:19:07 UTC	12212	IN	Data Raw: 4e 44 63 33 4e 43 77 69 5a 47 6b 69 4f 69 4a 68 59 6a 49 33 5a 47 59 79 59 54 5a 6a 4d 54 67 30 4f 54 67 30 59 54 56 68 4f 44 46 68 4e 6d 4d 7a 4d 57 4e 6b 4e 57 4d 34 59 69 49 73 49 6d 52 71 49 6a 6f 77 4c 43 4a 70 61 53 49 36 49 6a 51 79 5a 47 5a 6c 59 6a 6b 30 4f 47 4d 7a 4e 54 51 31 59 32 4e 68 5a 6d 49 30 4f 57 45 78 4e 54 56 6a 4d 7a 41 34 4d 7a 63 34 49 69 77 69 5a 47 30 69 4f 6a 4d 73 49 6d 5a 6a 49 6a 6f 31 4d 6a 45 7a 4d 6a 49 79 4f 44 67 73 49 6d 5a 73 49 6a 6f 31 4d 54 41 77 4e 7a 4d 31 4d 7a 4d 73 49 6d 6c 77 49 6a 6f 69 4d 54 55 30 4c 6a 45 32 4c 6a 45 77 4e 53 34 7a 4e 69 49 73 49 6d 35 33 49 6a 6f 78 4d 44 49 79 4d 43 77 69 63 47 4d 69 4f 6a 41 73 49 6d 39 77 49 6a 6f 77 4c 43 4a 6c 59 79 49 36 4d 43 77 69 5a 32 30 69 4f 6a 41 73 49 6d 56 Data Ascii: NDc3NCwiZGkiOiJhYjI3ZGYyYTZjMTg0OTg0YTVhODFhNmMzMWNkNWM4YiIsImRqIjowLCJpaSI6IjQyZGZlYjk0OGMzNTQ1Y2NhZmI0OWExNTVjMzA4Mzc4IiwiZG0iOjMsImZjIjo1MjEzMjIyODgsImZsIjo1MTAwNzM1MzMsImlwIjoiMTU0LjE2LjEwNS4zNiIsIm53IjoxMDIyMCwicGMiOjAsIm9wIjowLCJlYyI6MCwiZ20iOjAsImV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50416	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:08 UTC	836	OUT	GET /apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829 HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926038107
2024-04-24 02:19:08 UTC	519	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1023 Connection: close Date: Tue, 23 Apr 2024 06:30:33 GMT Last-Modified: Mon, 22 Apr 2024 06:21:52 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 ETag: "79898cf2d7f9f4ee1057caa970572ddc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 137f3de8f493458c81ba383297ffa212.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 6NO__mvWjlzkUIECK0IDDGjSqpNJ4Svw0CIxWO87JLS28EE16PLDHg== Age: 71316
2024-04-24 02:19:08 UTC	1023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 64 65 73 6b 74 6f 70 2d 77 65 62 2d 72 65 6e 64 65 72 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <title>desktop-web-renderer</title> <meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50415	52.213.228.117	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:08 UTC	1964	OUT	GET /v1/desktop HTTP/1.1 Host: lebowski.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925143.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.23
2024-04-24 02:19:09 UTC	332	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 02:19:08 GMT ETag: W/"49-PTodQlZnP59Shmd+CwRtIgROg/g" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 73 Connection: Close
2024-04-24 02:19:09 UTC	73	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 76 31 2f 64 65 73 6b 74 6f 70 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Cannot GET /v1/desktop","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50418	18.154.206.35	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:08 UTC	872	OUT	GET /apps/desktop-web-renderer/0.5.9/main.ec3e19d7acef7c17.js HTTP/1.1 Host: nolan.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nolan.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nolan.wetransfer.net/apps/desktop-web-renderer/0.5.9/index.html?_origin=https://wetransfer.com&_placement=creative-frame-1714956542829 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=0&expire=1713926038107 If-None-Match: "56b11dee72df8e44c1e72bfd66e237ab" If-Modified-Since: Mon, 22 Apr 2024 06:21:52 GMT
2024-04-24 02:19:09 UTC	585	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 02:19:09 GMT Access-Control-Allow-Origin: https://nolan.wetransfer.net Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true ETag: "56b11dee72df8e44c1e72bfd66e237ab" x-amz-server-side-encryption: AES256 Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 00e54b40739bb73204922b8a0fe39bc6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: iV40U2sTcUvtflrQn2G32QACHkvHiBWbhr4nSYKPGhMBC1_lHDq0uw== Age: 62346

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50421	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:09 UTC	819	OUT	GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nolan.wetransfer.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:10 UTC	529	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2771 Connection: close Last-Modified: Fri, 22 Mar 2024 13:29:08 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 02:19:11 GMT ETag: "214bdb61302d057ce107a09f29ca5ab2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: q7gG42xfU7waAIhDU7BqFlYM4-Ad6WOoCF5sSXeCajw2SlPX0rZ33Q==
2024-04-24 02:19:10 UTC	2771	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6e 64 65 78 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html><head><meta charset="utf8"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,user-scalable=no"/><meta name="robots" content="nofollow, noindex"/><title></title><style>html {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50423	34.250.136.134	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:10 UTC	2259	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive Content-Length: 1750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://wetransfer.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925149.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.24
2024-04-24 02:19:10 UTC	1750	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 74 72 61 6e 73 66 65 72 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 70 61 67 65 22 3a 22 2f 6c 65 67 61 6c 2f 63 63 70 61 22 2c 22 65 69 64 22 3a 22 37 63 39 39 63 65 39 30 2d 61 61 65 64 2d 34 31 66 34 2d 62 37 37 32 2d 35 65 30 38 63 33 34 62 37 33 35 30 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 32 33 2e 30 22 2c 22 74 6e 61 22 3a 22 63 6f 22 2c 22 61 69 64 22 3a 22 74 72 61 6e 73 66 65 72 5f 63 6f 72 65 22 2c 22 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://wetransfer.com/legal/ccpa","page":"/legal/ccpa","eid":"7c99ce90-aaed-41f4-b772-5e08c34b7350","tv":"js-3.23.0","tna":"co","aid":"transfer_core","
2024-04-24 02:19:11 UTC	412	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:11 GMT Content-Length: 2 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:11 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://wetransfer.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:11 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50424	18.154.132.34	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:10 UTC	742	OUT	GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/bundle.ff2f6c6b99b0f6998598.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:11 UTC	516	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 285801 Connection: close Date: Wed, 24 Apr 2024 02:19:12 GMT Last-Modified: Fri, 22 Mar 2024 13:29:04 GMT ETag: "afe288e92d14ad8e4e3e4bc2340d3b43" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9be2516f259db4923b89b59f0abe8c36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: b6YE6nPlSEFFp1Q5pWiIaz26nGCJH5UayJVXKj_nn7rd_dwaCXD9IQ==
2024-04-24 02:19:11 UTC	15868	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 66 66 32 66 36 63 36 62 39 39 62 30 66 36 39 39 38 35 39 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 34 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 70 6c 61 74 66 6f 72 6d 3a 22 64 65 73 6b 74 6f 70 22 2c 76 61 72 69 61 6e 74 73 3a 5b 5d 2c 74 61 67 73 3a 5b 5d 2c 64 65 70 6c 6f 79 50 61 74 68 4f 76 65 72 72 69 64 65 3a 21 31 7d 7d 2c 34 33 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c Data Ascii: /! For license information please see bundle.ff2f6c6b99b0f6998598.js.LICENSE.txt /!function(){var e,t,n={4339:function(e){e.exports={title:"",platform:"desktop",variants:[],tags:[],deployPathOverride:!1}},4312:function(e,t,n){"use strict";n.r(t),n.d(t,
2024-04-24 02:19:11 UTC	4	IN	Data Raw: 65 72 20 6f Data Ascii: er o
2024-04-24 02:19:11 UTC	16384	IN	Data Raw: 72 20 67 72 61 70 68 69 63 73 20 64 72 69 76 65 72 73 20 68 74 74 70 3a 2f 2f 67 65 74 2e 77 65 62 67 6c 2e 6f 72 67 22 29 2c 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 2b 2b 72 29 6e 5b 72 5d 3d 74 28 72 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 74 3d 28 65 3e 36 35 35 33 35 29 3c 3c 34 2c 74 7c 3d 6e 3d 28 28 65 3e 3e 3e 3d 74 29 3e 32 35 35 29 3c 3c 33 2c 74 7c 3d 6e 3d 28 28 65 3e 3e 3e 3d 6e 29 3e 31 35 29 3c 3c 32 2c 28 74 7c 3d 6e 3d 28 28 65 3e 3e 3e 3d 6e 29 3e 33 29 3c 3c 31 29 7c 28 65 3e 3e 3e 3d 6e 29 3e 3e 31 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 76 61 72 20 Data Ascii: r graphics drivers http://get.webgl.org"),null)}function I(e,t){for(var n=Array(e),r=0;r<e;++r)n[r]=t(r);return n}function q(e){var t,n;return t=(e>65535)<<4,t\|=n=((e>>>=t)>255)<<3,t\|=n=((e>>>=n)>15)<<2,(t\|=n=((e>>>=n)>3)<<1)\|(e>>>=n)>>1}function N(){var
2024-04-24 02:19:11 UTC	16384	IN	Data Raw: 65 6c 65 74 65 20 5a 5b 65 2e 69 64 5d 2c 73 2e 74 65 78 74 75 72 65 43 6f 75 6e 74 2d 2d 7d 72 65 74 75 72 6e 20 74 28 74 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 62 69 6e 64 43 6f 75 6e 74 2b 3d 31 3b 76 61 72 20 74 3d 65 2e 75 6e 69 74 3b 69 66 28 74 3c 30 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 4a 3b 2b 2b 72 29 7b 76 61 72 20 69 3d 65 65 5b 72 5d 3b 69 66 28 69 29 7b 69 66 28 69 2e 62 69 6e 64 43 6f 75 6e 74 3e 30 29 63 6f 6e 74 69 6e 75 65 3b 69 2e 75 6e 69 74 3d 2d 31 7d 65 65 5b 72 5d 3d 65 2c 74 3d 72 3b 62 72 65 61 6b 7d 74 3e 3d 4a 26 26 43 2e 72 61 69 73 65 28 22 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 65 78 74 75 72 65 Data Ascii: elete Z[e.id],s.textureCount--}return t(te.prototype,{bind:function(){var e=this;e.bindCount+=1;var t=e.unit;if(t<0){for(var r=0;r<J;++r){var i=ee[r];if(i){if(i.bindCount>0)continue;i.unit=-1}ee[r]=e,t=r;break}t>=J&&C.raise("insufficient number of texture
2024-04-24 02:19:11 UTC	630	IN	Data Raw: 76 61 6f 73 22 29 2c 6f 2e 70 75 73 68 28 5b 30 7c 72 5b 69 5b 61 5d 5d 2c 69 5b 61 5d 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 65 2c 74 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 69 63 2c 72 3d 65 2e 64 79 6e 61 6d 69 63 3b 69 66 28 46 72 20 69 6e 20 6e 29 7b 76 61 72 20 69 3d 6e 5b 46 72 5d 3b 72 65 74 75 72 6e 20 69 3f 28 69 3d 75 2e 67 65 74 46 72 61 6d 65 62 75 66 66 65 72 28 69 29 2c 43 2e 63 6f 6d 6d 61 6e 64 28 69 2c 22 69 6e 76 61 6c 69 64 20 66 72 61 6d 65 62 75 66 66 65 72 20 6f 62 6a 65 63 74 22 29 2c 4b 69 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 69 6e 6b 28 69 29 2c 72 3d 65 2e 73 68 61 72 65 64 3b 74 2e 73 65 74 28 72 2e 66 Data Ascii: vaos"),o.push([0\|r[i[a]],i[a]]);return o}}return null}(e,t),b=function(e,t){var n=e.static,r=e.dynamic;if(Fr in n){var i=n[Fr];return i?(i=u.getFramebuffer(i),C.command(i,"invalid framebuffer object"),Ki((function(e,t){var n=e.link(i),r=e.shared;t.set(r.f
2024-04-24 02:19:11 UTC	1418	IN	Data Raw: 65 62 75 66 66 65 72 28 22 2c 6e 2c 22 29 22 29 3b 43 2e 6f 70 74 69 6f 6e 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 73 73 65 72 74 28 74 2c 22 21 22 2b 6e 2b 22 7c 7c 22 2b 61 2c 22 69 6e 76 61 6c 69 64 20 66 72 61 6d 65 62 75 66 66 65 72 20 6f 62 6a 65 63 74 22 29 7d 29 29 2c 74 2e 73 65 74 28 69 2c 22 2e 6e 65 78 74 22 2c 61 29 3b 76 61 72 20 73 3d 72 2e 63 6f 6e 74 65 78 74 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 73 2c 22 2e 22 2b 4c 72 2c 61 2b 22 3f 22 2b 61 2b 22 2e 77 69 64 74 68 3a 22 2b 73 2b 22 2e 22 2b 51 72 29 2c 74 2e 73 65 74 28 73 2c 22 2e 22 2b 56 72 2c 61 2b 22 3f 22 2b 61 2b 22 2e 68 65 69 67 68 74 3a 22 2b 73 2b 22 2e 22 2b 55 72 29 2c 61 7d 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 65 29 2c 78 3d 66 75 6e 63 74 69 Data Ascii: ebuffer(",n,")");C.optional((function(){e.assert(t,"!"+n+"\|\|"+a,"invalid framebuffer object")})),t.set(i,".next",a);var s=r.context;return t.set(s,"."+Lr,a+"?"+a+".width:"+s+"."+Qr),t.set(s,"."+Vr,a+"?"+a+".height:"+s+"."+Ur),a}))}return null}(e),x=functi
2024-04-24 02:19:12 UTC	16384	IN	Data Raw: 28 6e 2c 22 2e 22 2c 4c 72 29 2c 74 2e 64 65 66 28 6e 2c 22 2e 22 2c 56 72 29 5d 7d 29 29 3a 6e 75 6c 6c 7d 76 61 72 20 61 3d 6f 28 45 72 29 3b 69 66 28 61 29 7b 76 61 72 20 73 3d 61 3b 61 3d 6e 65 77 20 58 69 28 61 2e 74 68 69 73 44 65 70 2c 61 2e 63 6f 6e 74 65 78 74 44 65 70 2c 61 2e 70 72 6f 70 44 65 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 73 2e 61 70 70 65 6e 64 28 65 2c 74 29 2c 72 3d 65 2e 73 68 61 72 65 64 2e 63 6f 6e 74 65 78 74 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 72 2c 22 2e 22 2b 59 72 2c 6e 5b 32 5d 29 2c 74 2e 73 65 74 28 72 2c 22 2e 22 2b 48 72 2c 6e 5b 33 5d 29 2c 6e 7d 29 29 7d 72 65 74 75 72 6e 7b 76 69 65 77 70 6f 72 74 3a 61 2c 73 63 69 73 73 6f 72 5f 62 6f 78 3a 6f 28 53 72 29 7d 7d 28 65 2c 62 2c 64 Data Ascii: (n,".",Lr),t.def(n,".",Vr)]})):null}var a=o(Er);if(a){var s=a;a=new Xi(a.thisDep,a.contextDep,a.propDep,(function(e,t){var n=s.append(e,t),r=e.shared.context;return t.set(r,"."+Yr,n[2]),t.set(r,"."+Hr,n[3]),n}))}return{viewport:a,scissor_box:o(Sr)}}(e,b,d
2024-04-24 02:19:12 UTC	16384	IN	Data Raw: 22 28 22 2b 69 2b 22 29 7c 7c 22 2b 75 2b 22 2e 67 65 74 42 75 66 66 65 72 28 22 2b 69 2b 22 29 7c 7c 22 2b 75 2b 22 2e 67 65 74 42 75 66 66 65 72 28 22 2b 69 2b 22 2e 62 75 66 66 65 72 29 7c 7c 22 2b 73 2b 22 28 22 2b 69 2b 27 2e 62 75 66 66 65 72 29 7c 7c 28 22 63 6f 6e 73 74 61 6e 74 22 20 69 6e 20 27 2b 69 2b 22 26 26 28 74 79 70 65 6f 66 20 22 2b 69 2b 27 2e 63 6f 6e 73 74 61 6e 74 3d 3d 3d 22 6e 75 6d 62 65 72 22 7c 7c 27 2b 6f 2e 69 73 41 72 72 61 79 4c 69 6b 65 2b 22 28 22 2b 69 2b 22 2e 63 6f 6e 73 74 61 6e 74 29 29 29 29 22 2c 27 69 6e 76 61 6c 69 64 20 64 79 6e 61 6d 69 63 20 61 74 74 72 69 62 75 74 65 20 22 27 2b 65 2b 27 22 27 29 7d 29 29 3b 76 61 72 20 63 3d 7b 69 73 53 74 72 65 61 6d 3a 72 2e 64 65 66 28 21 31 29 7d 2c 66 3d 6e 65 77 20 76 Data Ascii: "("+i+")\|\|"+u+".getBuffer("+i+")\|\|"+u+".getBuffer("+i+".buffer)\|\|"+s+"("+i+'.buffer)\|\|("constant" in '+i+"&&(typeof "+i+'.constant==="number"\|\|'+o.isArrayLike+"("+i+".constant))))",'invalid dynamic attribute "'+e+'"')}));var c={isStream:r.def(!1)},f=new v
2024-04-24 02:19:12 UTC	10997	IN	Data Raw: 49 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2b 22 5b 22 2b 65 2b 22 5d 22 7d 29 29 2c 22 29 3b 22 2c 49 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2b 22 5b 22 2b 65 2b 22 5d 3d 22 2b 69 2b 22 5b 22 2b 65 2b 22 5d 3b 22 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 29 2c 74 28 22 69 66 28 22 2c 49 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2b 22 5b 22 2b 65 2b 22 5d 21 3d 3d 22 2b 61 2b 22 5b 22 2b 65 2b 22 5d 22 7d 29 29 2e 6a 6f 69 6e 28 22 7c 7c 22 29 2c 22 29 7b 22 2c 64 2c 22 7d 22 29 7d 65 6c 73 65 20 69 3d 6f 2e 64 65 66 28 63 2c 22 2e 22 2c 72 29 2c 61 3d 6f 2e 64 65 66 28 66 2c 22 2e 22 2c 72 29 2c 64 28 69 2c 22 29 3b 22 2c 66 2c 22 2e 22 2c 72 2c 22 3d 22 2c 69 2c 22 Data Ascii: I(p,(function(e){return i+"["+e+"]"})),");",I(p,(function(e){return a+"["+e+"]="+i+"["+e+"];"})).join("")),t("if(",I(p,(function(e){return i+"["+e+"]!=="+a+"["+e+"]"})).join("\|\|"),"){",d,"}")}else i=o.def(c,".",r),a=o.def(f,".",r),d(i,");",f,".",r,"=",i,"
2024-04-24 02:19:12 UTC	16384	IN	Data Raw: 69 73 41 72 72 61 79 28 74 29 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 29 7b 76 61 72 20 6f 3d 4c 2e 61 6c 6c 6f 63 54 79 70 65 28 64 2e 64 74 79 70 65 2c 74 2e 6c 65 6e 67 74 68 29 3b 63 65 28 6f 2c 74 29 2c 68 28 6f 2c 69 29 2c 4c 2e 66 72 65 65 54 79 70 65 28 6f 29 7d 65 6c 73 65 20 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 5b 30 5d 29 7c 7c 65 28 74 5b 30 5d 29 29 7b 72 3d 6e 65 28 74 29 3b 76 61 72 20 61 3d 74 65 28 74 2c 72 2c 64 2e 64 74 79 70 65 29 3b 68 28 61 2c 69 29 2c 4c 2e 66 72 65 65 54 79 70 65 28 61 29 7d 65 6c 73 65 20 43 2e 72 61 69 73 65 28 22 69 6e 76 61 6c 69 64 20 62 75 66 66 65 72 20 64 61 74 61 22 29 7d 65 6c 73 65 20 69 66 28 51 28 74 29 29 Data Ascii: isArray(t)){if(t.length>0)if("number"==typeof t[0]){var o=L.allocType(d.dtype,t.length);ce(o,t),h(o,i),L.freeType(o)}else if(Array.isArray(t[0])\|\|e(t[0])){r=ne(t);var a=te(t,r,d.dtype);h(a,i),L.freeType(a)}else C.raise("invalid buffer data")}else if(Q(t))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50425	52.210.6.56	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:11 UTC	1988	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: snowplow.wetransfer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=*; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925149.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.24
2024-04-24 02:19:12 UTC	469	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 02:19:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; Expires=Thu, 24 Apr 2025 02:19:12 GMT; Domain=wetransfer.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 02:19:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.5	50426	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:12 UTC	739	OUT	GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/460.8410c9803a20af04dea9.js HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:13 UTC	514	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4877 Connection: close Date: Wed, 24 Apr 2024 02:19:14 GMT Last-Modified: Fri, 22 Mar 2024 13:29:00 GMT ETag: "386a8f7359235f2656a1440273b12df8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 39e44e46353104df87ef42f4a05553fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: vwvQ85_sw-slvWahBaqyJLCUR8vvcr9N6t9R7HSFUH2T-RqED47CUA==
2024-04-24 02:19:13 UTC	4877	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 77 65 74 72 61 6e 73 66 65 72 5f 77 61 6c 6c 70 61 70 65 72 5f 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 77 65 74 72 61 6e 73 66 65 72 5f 77 61 6c 6c 70 61 70 65 72 5f 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 30 5d 2c 7b 34 36 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 63 6f 6e 73 74 20 69 3d 73 28 33 39 30 39 29 2c 6e 3d 73 28 37 31 30 39 29 2c 61 3d 73 28 39 35 38 32 29 2c 72 3d 73 28 36 34 35 37 29 3b 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 Data Ascii: "use strict";(self.webpackChunk_wetransfer_wallpaper_ui=self.webpackChunk_wetransfer_wallpaper_ui\|\|[]).push([[460],{4645:function(e,t,s){Object.defineProperty(t,"__esModule",{value:!0});const i=s(3909),n=s(7109),a=s(9582),r=s(6457);t.default=class{constru

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.5	50427	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:14 UTC	799	OUT	GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/ClearfaceITCPro-Heavy.7dbd1ec85403f9f3931c.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:14 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 28464 Connection: close Date: Wed, 24 Apr 2024 02:19:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 13:29:01 GMT ETag: "ff4429feba146d5a8e608db1b13cd9b2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 80e637d12d05a8212382cb26f2ad9788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: _s-Ajtd8ZU-BoAHXgp9tPkDOvLV-ONY8tzhS6FOY4pFn2wFWmfZKaA==
2024-04-24 02:19:14 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 30 00 0f 00 00 00 01 59 1c 00 00 6e d0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 6c 1b d8 48 1c 9d 3c 06 60 00 87 66 11 08 0a 83 da 38 83 8f 36 0b 87 1e 00 01 36 02 24 03 8e 36 04 20 05 a6 2f 07 99 07 5b f5 2e 71 02 bd 6d 8f 42 74 27 c0 a8 5a 6d ff 5d ce 12 36 b8 9a cd 79 0e 4a 99 79 2e 65 01 77 7e 70 1e 84 f0 3d bf aa 26 fb ff ff d3 92 8e 18 6b ec 6c 00 9c a6 69 d6 7f 5c ee 2c 3c cb db 2a 26 9c b8 4c ae f0 90 75 c8 d7 ed b9 a2 b7 dd ec c9 0e 04 e9 03 b2 af e1 c9 c5 35 ee 5d 8d c2 81 ad 5f 4f 73 56 55 e1 ea 77 77 9b ca 7b ab 32 55 85 3c ce 0d 9e c8 79 65 d9 0f 72 9e 58 b3 a9 fb 49 de c1 5c e6 24 e1 ec 74 17 09 d5 db 4c 54 c6 c0 6d 0e 08 eb 17 bb ec a4 21 3a 21 e6 10 d3 d0 Data Ascii: wOF2o0Yn?FFTMlH<`f866$6 /[.qmBt'Zm]6yJy.ew~p=&kli\,<*&Lu5]_OsVUww{2U<yerXI\$tLTm!:!
2024-04-24 02:19:14 UTC	1594	IN	Data Raw: aa 5d 0e 48 0d a3 db 4c 5c 87 5c 85 70 73 9a a3 50 a3 28 49 c4 14 1a 33 37 c4 28 bf 0f f9 e9 65 b5 d9 dd 64 67 6a 70 6f 1d 5f 37 d1 2d 69 c0 e3 2d a1 6d dc 32 84 37 b5 c7 5d 41 c3 e9 03 1c a5 e8 53 9c b0 49 ec 37 09 ee 5e ba 3f 08 b5 85 8c 57 c9 99 f9 28 d0 34 67 3a fa 41 e0 ee 12 80 eb 9a f0 46 ec 04 e6 99 de 7e 71 f9 89 be de dc ec 66 ed a7 ee 65 ba e4 48 97 eb 65 f6 bd 62 e8 f5 5c cf 4d f3 b6 24 17 3b 47 b8 69 9f 89 dc c6 8e 64 fb 10 2f b9 1b 95 43 b6 70 dd 7d 86 ec 67 7e 06 1e dc 37 4e 09 47 9f 2c 74 f3 f3 1b 0f 7a 69 1a 78 ee 26 1d 93 ca fd c1 40 cb 35 38 23 c3 af ef 45 e2 90 e9 a6 29 83 12 2e 7b f6 7f d8 6a aa 65 67 45 1b 93 8c 66 8f 25 77 f7 7a 42 69 a8 04 7d 32 14 68 ac fa a9 f8 3c c3 dd a4 6e 12 bb 7b 51 8e 51 b0 96 2c bf 88 e6 2d 9f 22 4d c7 4c Data Ascii: ]HL\\psP(I37(edgjpo_7-i-m27]ASI7^?W(4g:AF~qfeHeb\M$;Gid/Cp}g~7NG,tzix&@58#E).{jegEf%wzBi}2h<n{QQ,-"ML
2024-04-24 02:19:15 UTC	11145	IN	Data Raw: a3 fb 16 85 ca ec ba 64 ff b6 31 fb 30 56 ce 99 98 4a da 9f a0 43 f7 b0 42 49 b4 bf 40 df f2 cd 87 d8 53 ef 94 d7 94 42 d7 1b 29 c2 55 18 41 7c 4e 91 b2 51 f9 51 e1 f1 b6 fc f0 7b b7 9a 77 ca b3 ca 77 db 3e b8 d0 32 19 90 d0 cf 18 00 4e ad 8c 6d 30 67 9f 3b 03 53 18 fe d2 f7 cc a1 e6 ea 11 78 81 00 c4 33 15 bc 2b 4b de 0e f8 fc f6 25 97 c1 65 e7 60 19 12 7c 0a 2d e5 ba 93 96 ba ac 71 a7 10 a6 b5 25 b6 ec 91 dd 01 0a 55 34 6f 9a 45 45 91 68 23 62 1c bf 89 a7 5b a1 52 05 36 3f 8a 44 f5 95 f7 af 95 19 d5 11 3a 27 27 24 5a 05 63 49 90 5c e0 b7 37 d8 16 62 6b 5e 20 b9 ba d7 cf 48 48 ac d1 75 97 e5 96 ca c3 e4 61 b9 a5 65 dd dc d0 62 34 c9 10 57 eb 9e 2f cb 0b 24 b6 5a d8 af 77 a6 d9 ef 4c 03 d2 ff e7 02 3c 00 68 00 20 a7 6a d9 16 30 af 77 7e 9d bb de 38 83 e4 Data Ascii: d10VJCBI@SB)UA\|NQQ{ww>2Nm0g;Sx3+K%e`\|-q%U4oEEh#b[R6?D:''$ZcI\7bk^ HHuaeb4W/$ZwL<h j0w~8

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.5	50428	18.154.132.34	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:14 UTC	792	OUT	GET /creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/FaktPro-Normal.b13a72e7c98c850685bd.woff2 HTTP/1.1 Host: backgrounds.wetransfer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://backgrounds.wetransfer.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://backgrounds.wetransfer.net/creator/wepresent/2403-p11/wp3-marquee/1_k3rVWV/index.html?_origin=https://nolan.wetransfer.net&_placement=desktop-web-renderer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 02:19:14 UTC	659	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47828 Connection: close Date: Wed, 24 Apr 2024 02:19:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 22 Mar 2024 13:29:02 GMT ETag: "6dbab1c1c6f168db27cbe727e3ad7fe8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 418e97b4cd79980675a1440e7e560260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: RMUoIrLpnhc7HwmlIhxx1E081YsGyrP0pCFApUSV6orF2mSqbrxDVA==
2024-04-24 02:19:14 UTC	15725	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ba d4 00 12 00 00 00 02 53 f4 00 00 ba 6b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 30 1b 81 c6 5e 1c e1 12 06 60 00 88 26 08 2a 09 82 73 11 10 0a 85 da 44 85 8b 2a 0b 91 06 00 01 36 02 24 03 a2 08 04 20 05 8d 70 07 d2 72 0c 81 1b 5b 97 22 92 0a a9 71 ed 65 de 26 3e 00 09 e8 36 04 c8 32 75 d3 aa ce d7 7b 41 1c 63 3b 08 5a 3a c7 26 e7 03 15 a4 98 95 e2 02 ee ec 89 31 6e 47 38 e2 f4 3b 7a f6 ff ff ff ff ff ff af 4a fe f3 8c f3 cf 3d e9 dc fb 5e a5 12 08 44 7d ec 6f db 06 31 b9 23 04 a5 48 39 e5 4a 75 55 a5 26 a3 5a 57 15 5a e4 2e 67 f5 15 32 02 be 09 1b 1a c8 b6 c6 6e 1f 07 54 38 e6 71 9f f2 98 57 b0 53 61 71 f1 18 72 ed 7b 73 82 90 10 38 5f d2 59 bd e9 d2 95 aa 65 bd 6f a8 8a Data Ascii: wOF2Sk?FFTM0^`&sD6$ pr["qe&>62u{Ac;Z:&1nG8;zJ=^D}o1#H9JuU&ZWZ.g2nT8qWSaqr{s8_Yeo
2024-04-24 02:19:14 UTC	265	IN	Data Raw: b1 a0 8f 6b 16 b7 21 1d 12 a2 02 c2 69 05 90 36 81 db 28 4b fb dc 4a e1 fe c8 9c 31 90 e9 79 97 a7 80 7c 9a 31 03 34 c3 ec 32 4d e1 15 02 c1 79 0b c5 61 5b a3 b4 71 70 01 e1 ba 2c 7f c9 f0 52 0e c7 d5 9b c6 92 67 6e ec 96 ad f5 36 ac 73 2f 4f a5 b5 1e 00 33 ba 65 c6 fe e8 1a 15 93 2c c9 72 6e 76 03 44 a8 7f 39 76 0b ea f2 a7 c2 74 9c 5c cf 4f a4 7b c5 67 29 e2 01 87 21 0a 2b cc ac c1 e9 3e 62 aa 70 25 0f e7 43 42 67 69 c3 1c ac 1f e5 0d 7e 2b 0c 3d 73 34 e4 4c 2a 1d 91 34 2f a2 3f ab a1 c6 c7 bc e3 ea 6e 22 b2 59 33 f0 82 66 ba 79 24 1b f0 48 ee 5e 05 00 b5 31 79 54 22 cf bd a0 48 96 ce be 55 f5 c4 62 07 a5 d1 73 a6 51 65 59 5d 83 54 72 25 4c c3 95 33 d3 06 fb 98 ef 94 a5 d6 d3 24 94 96 38 9e bb 8c f1 af ef ee e3 f8 bc d9 50 ef ee 3e bd 9b d2 dd 89 fa 82 Data Ascii: k!i6(KJ1y\|142Mya[qp,Rgn6s/O3e,rnvD9vt\O{g)!+>bp%CBgi~+=s4L*4/?n"Y3fy$H^1yT"HUbsQeY]Tr%L3$8P>
2024-04-24 02:19:14 UTC	847	IN	Data Raw: 56 3e b3 ca 01 0e 00 82 72 4a 21 95 b7 56 04 f8 70 70 3b aa a2 7c ac 6b 61 29 42 f7 98 e8 cc 3d 76 4f 2e 30 cd d3 16 eb c3 21 9c a6 48 fc bd 69 60 27 9c 8e 1b d7 b5 66 cc b3 50 0e 23 84 8a 85 0c 74 5a a8 44 c5 2c 96 12 96 42 65 16 b0 ef 9b ba ce 21 5b 0f 82 9b 74 9b ad 52 13 86 96 b9 b0 31 49 87 e6 c5 c6 39 94 5c a2 69 63 16 28 4b c9 11 eb 38 48 f6 64 61 26 f0 ff dd 8c d6 95 6c 64 db 79 3e d7 e0 03 d8 23 5b 67 f8 17 48 d4 66 62 9b f7 80 85 ea 4c 41 f4 59 c2 9d b4 89 c6 5d ad d8 d6 53 b9 0a d6 58 20 4e 9f ef d5 7d cf 96 45 5e 80 61 4f 34 5b 67 93 3e 78 f3 0a 9d 20 db 8d e4 a4 15 e0 db f0 1d 99 08 04 9f 52 0a 87 08 52 69 7a f5 30 ae d6 d8 8f 9d f9 54 1d 9d 87 f3 c2 42 42 20 30 c4 f7 bc cf 28 d5 fd d6 a1 cc a1 37 38 87 2f 8d 36 aa cd 45 c6 e7 28 d1 98 99 fe Data Ascii: V>rJ!Vpp;\|ka)B=vO.0!Hi`'fP#tZD,Be![tR1I9\ic(K8Hda&ldy>#[gHfbLAY]SX N}E^aO4[g>x RRiz0TBB 0(78/6E(
2024-04-24 02:19:15 UTC	16384	IN	Data Raw: 6e a3 1a 1b 0e 3c a6 4b 78 94 46 72 2e b0 24 26 15 cd 56 eb 4c d8 33 36 6c 8e f4 7f 4e 27 5d 99 de a0 bc 24 6d 7e f6 d1 b3 0f 96 66 37 29 94 d2 00 48 45 b0 bf a0 4a 27 5a c7 61 18 32 0c 61 be 77 a3 1a f8 83 ea af 9a e2 69 8b 18 a6 14 d6 44 0d 55 c6 4a 74 5f 48 ea 8c 36 cb bb 86 c0 dc e7 a7 62 0a 38 cc 2c 0c b0 88 e1 80 3d c8 bc d8 89 ed 09 6b 55 35 b3 47 65 b7 cd 56 65 91 64 d1 41 15 6c ee 21 eb a0 1b 21 61 6a 72 6f 4f 83 c7 83 a3 2b c1 82 ef fb 5b 17 38 d7 84 41 09 80 6c 7a 3a 11 53 db 65 31 5b 00 94 1b 9c 76 1b 6e 20 28 4f bb da 24 c7 c3 f0 c7 87 fd fc 26 93 b0 7e 3b c6 12 49 7e ca 56 65 99 cb e5 02 d0 71 09 ad 88 6a 8e 54 de 67 25 aa 77 a2 27 9c 01 43 ff 41 cf 68 81 7b f5 f9 62 95 c8 a1 4e ac 8a b1 70 06 b6 4d de ce 7c 6b 72 a9 18 7b dd 6b 63 de 7a f4 Data Ascii: n<KxFr.$&VL36lN']$m~f7)HEJ'Za2awiDUJt_H6b8,=kU5GeVedAl!!ajroO+[8Alz:Se1[vn (O$&~;I~VeqjTg%w'CAh{bNpM\|kr{kcz
2024-04-24 02:19:15 UTC	14607	IN	Data Raw: 1b 67 38 8d 6f 61 11 86 0a da 69 5c 16 63 da 8a 53 e2 ac ed c6 e5 4c f3 46 74 dc db 80 23 16 59 30 20 dc 0c b9 e2 b5 9e d0 05 82 75 51 0b 3d 9d b2 f6 3b 62 40 b8 09 72 2b 34 7a 25 69 cf 5a bd 8a 4a 2c c6 45 50 20 1a 75 a5 3e d1 b8 b1 fa 63 1c 02 8f 45 88 d7 5c 89 08 44 14 2d 2b 28 07 cb 40 1e 15 7c 89 72 22 3b 4b 35 84 f3 f2 16 38 7e c7 e3 08 f3 90 bb ec 95 76 05 ea 69 5c 7f 03 1c ff 82 23 cc 41 6e 0a 04 f1 23 8b 2b fb 7d 24 42 8f 00 8f 80 66 63 1f a6 d4 6b c5 d1 cb 11 e6 21 d7 f1 4a 81 40 7d 72 8e c3 11 e6 20 37 05 02 f5 cd 09 5f 17 c1 48 61 12 34 0e 63 46 82 46 6a 13 8f 71 3e 4f ea 11 75 5f ea 17 9d 3f aa e8 90 05 e4 21 57 f8 89 c8 e5 0b 2f 91 29 8f 95 aa 27 2e e7 de c1 0d e5 eb ff 5f a9 e0 1e a0 ec c5 ce ad ab f9 6b 90 65 5d e7 49 f8 89 c8 e5 0b 2f 91 Data Ascii: g8oai\cSLFt#Y0 uQ=;b@r+4z%iZJ,EP u>cE\D-+(@\|r";K58~vi\#An#+}$Bfck!J@}r 7_Ha4cFFjq>Ou_?!W/)'._ke]I/

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.5	50429	34.246.249.180	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 02:19:14 UTC	2950	OUT	GET /i.gif?e=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&s=zN_9_yb7KwE1RuJkz17LejLUCoc HTTP/1.1 Host: donny.wetransfer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wetransfer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wt_lang=en-US; _gid=GA1.2.99849118.1713925069; FPID=FPID2.2.1jmsFtiirLk8LdDwNUvPhStbf5XJYc8m2IWLN3lNiUM%3D.1713925069; __wtcm=CP9kvMAP9kvMAPnACAENAxCAAEIAEEJAEAABGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAAAAAAA.JGcQFgABAAMABlAEQARQAnABlADcAH4ATABCACLAEcAKQAVkAuoBpgDiAH8AXmAwQBkkjKSM4AAA; wt_privacy=%7B%22v%22%3A%223%3A20190527%22%2C%22f%22%3A1%2C%22a%22%3A1%2C%22t%22%3A1%7D; wt_first_visit=1713925070103; __wtccpa=1YYY; auth_session_uuid=901c0e8e-5f5a-41d6-8e75-d5e1f2d9e45f; _fbp=fb.1.1713925073230.1941515402; _gcl_au=1.1.497330811.1713925074; FPAU=1.1.497330811.1713925074; __td_signed=true; FPLC=1AJTx3rhWbX3LcG8HPkP5Ne%2Foz%2FyCdGqyvmXsVp57Te3dQsl%2FQjgRcJ8CMmyaR%2FmfHG2IMe%2FQnPZ9h2AGsg6CsVlMsO9dzHq7hZNd2tWrT%2BEdYjW4sbTGDRtq79Qzw%3D%3D; _wt_snowplowses.0497=; sp=f5a0a27b-5314-45b3-80a3-a1517be79b13; _pin_unauth=dWlkPU5tWmxOV1U0TlRJdE9UWmxaUzAwWVRFMExUbGhPVFl0TkRZM1ltWmlNbVU0TURNeA; _ga=GA1.2.1577694276.1713925069; wt_trk=NAV_pricing; _rdt_uuid=1713925075019.bf4fb756-1cf9-4f83-86bc-3183bcff62b3; _uetsid=dc42f18001e011efb0d649652a3d6d34\|1tevvfw\|2\|fl7\|0\|1575; _td=baf3418d-177b-4f78-9bff-5155117ab29b; _ga_0M019DTWVR=GS1.1.1713925068.1.1.1713925130.0.0.496837087; amp_874b77=-0UZbBiWgvIoxMYdttvskM...1hs6uac11.1hs6uc9ei.14.3.17; _uetvid=dc43272001e011efac9cd3cbdc1db2fd\|7zrybf\|1713925138447\|4\|1\|bat.bing.com/p/insights/c/d; _wt_snowplowid.0497=c444300f-6006-4e83-9c38-3f418b9b111c.1713883946204.1.1713925149.1713883946204.66d9a9cf-57fe-4571-932e-7d2eece7c09f.f17dacb0-4e36-49e3-af34-2ea9b79f38c1.4ec8bc1f-f7e4-4611-ad97-fa62ce3e8faa.1713925076854.24
2024-04-24 02:19:15 UTC	288	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://wetransfer.com Date: Wed, 24 Apr 2024 02:19:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-Powered-By: Express Content-Length: 0 Connection: Close

Target ID:	0
Start time:	04:17:35
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	04:17:38
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:17:41
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	04:18:03
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3096 --field-trial-handle=2008,i,16340395143330925153,12945936390909195926,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Windows Analysis Report
https://we.tl/t-nsdjwtsB1E?utm_campaign=TRN_TDL_05&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_05